0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:25:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 577.387374][T19142] loop3: detected capacity change from 0 to 140 17:25:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 577.735283][T19142] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:25:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) 17:25:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20006c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:25:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 578.098454][T19159] loop3: detected capacity change from 0 to 140 [ 578.116523][T19159] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:25:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:25:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 579.124622][T19186] loop3: detected capacity change from 0 to 140 17:25:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) [ 579.176321][ T2967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.228439][ T2967] Buffer I/O error on dev loop3, logical block 0, async page read 17:25:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:25:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 580.367047][ T2967] loop3: unable to read partition table [ 580.390998][T19186] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007a00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 581.407165][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:26:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 582.041196][T19242] loop3: detected capacity change from 0 to 140 [ 582.138277][T19242] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20008400000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 582.866104][T19278] loop3: detected capacity change from 0 to 140 [ 582.988289][T19278] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20008b00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 583.854359][T19297] loop3: detected capacity change from 0 to 140 [ 584.062745][T19297] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 584.367522][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 584.450885][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 584.485113][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 584.498571][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 584.506587][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 584.528370][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:26:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(r5, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f0", 0x1}], 0x1}], 0x1, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20008c00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 584.903831][T19309] loop3: detected capacity change from 0 to 140 [ 584.928203][T19309] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffffffd) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20009000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 585.835420][T19344] loop3: detected capacity change from 0 to 140 [ 585.885828][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:26:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffffffd) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 585.939102][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 586.041849][ T3830] loop3: unable to read partition table 17:26:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 586.110079][T19344] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fe00000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 586.262455][T19362] loop3: detected capacity change from 0 to 140 [ 586.264298][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.286651][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 586.295733][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.304988][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 586.312969][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.335200][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 586.368326][ T3830] loop3: unable to read partition table [ 586.406622][T19362] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:06 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6800, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 586.753669][T19386] loop0: detected capacity change from 0 to 140 [ 586.764938][ T2967] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.774264][ T2967] Buffer I/O error on dev loop0, logical block 0, async page read [ 586.782132][T19387] loop3: detected capacity change from 0 to 140 17:26:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 586.796729][T19387] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 586.806531][ T2967] loop0: unable to read partition table [ 586.823955][T19386] EXT4-fs (loop0): bad geometry: block count 256 exceeds size of device (70 blocks) [ 586.916199][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.942588][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:26:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 586.988789][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:26:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 587.133910][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read 17:26:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20001004000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:06 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x407, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 587.439189][T19422] loop3: detected capacity change from 0 to 140 17:26:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 587.496287][T19422] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:07 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 587.919313][T19442] loop0: detected capacity change from 0 to 140 17:26:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 587.964487][T19442] EXT4-fs (loop0): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:07 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x48, &(0x7f00000001c0)={0x0, 0x0}, 0x10) ioctl$sock_proto_private(r4, 0x89e6, &(0x7f00000000c0)="7d461521eafe5a3bdd4995b51f6a48db1e543a372c85d556b6f4fe0a7c3ee67efcaac6dbf7e981f9938f7155e372531c7ce5404c0565b634ed7275eb566523539017c55b53dab72b0995") close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 588.237157][T19448] loop3: detected capacity change from 0 to 140 [ 588.275166][ T3830] ldm_validate_partition_table(): Disk read failed. 17:26:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 588.308097][ T3830] loop3: unable to read partition table [ 588.315265][T19448] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000006000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 588.415886][T19458] loop3: detected capacity change from 0 to 140 [ 588.426674][T19458] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x48, &(0x7f00000001c0)={0x0, 0x0}, 0x10) ioctl$sock_proto_private(r4, 0x89e6, &(0x7f00000000c0)="7d461521eafe5a3bdd4995b51f6a48db1e543a372c85d556b6f4fe0a7c3ee67efcaac6dbf7e981f9938f7155e372531c7ce5404c0565b634ed7275eb566523539017c55b53dab72b0995") close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:08 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6, 0x2}, {0xa, 0x5}, {0x6, 0x7}, {0xff, 0x2}, {0x3, 0x3}, {0x6, 0x6}, {0x6, 0x2}, {0xfd, 0x7}, {0x3}, {0x0, 0x3}, {0x1}, {0x8, 0x4}, {0x3, 0x4}, {0x6}, {0x8, 0x5}, {0x4, 0x3}, {0x81, 0x20}, {0x3, 0x6}, {0x77}, {0x8, 0x2}], "f5eed7d20fa68307"}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x20000080) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x48, &(0x7f00000001c0)={0x0, 0x0}, 0x10) setsockopt(r4, 0x6278, 0x40, &(0x7f0000000040)="365c72ab2ce191099e85d9ed76fd6c22ea0e41635975591755b0fec428", 0x1d) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 588.938581][T19479] loop3: detected capacity change from 0 to 140 [ 588.956827][T19479] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000009000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 589.395887][T19500] loop3: detected capacity change from 0 to 140 [ 589.480054][T19500] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:09 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:09 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1004, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 589.928823][T19517] loop3: detected capacity change from 0 to 140 [ 589.936033][T19518] loop0: detected capacity change from 0 to 140 [ 589.948562][ T3830] blk_print_req_error: 12 callbacks suppressed [ 589.948579][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.980845][T19518] EXT4-fs (loop0): bad geometry: block count 256 exceeds size of device (70 blocks) [ 590.006133][ T3830] buffer_io_error: 12 callbacks suppressed [ 590.006149][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 590.032411][ T3830] loop3: unable to read partition table [ 590.040424][T19517] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x407, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:09 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 590.425109][T19543] loop3: detected capacity change from 0 to 140 17:26:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x407, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 590.520066][T19543] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000960b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 590.757055][T19557] loop3: detected capacity change from 0 to 140 [ 590.792444][T19557] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:10 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x407, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 591.522692][T19571] loop3: detected capacity change from 0 to 140 [ 591.539482][T19571] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20006a0c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x407, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:11 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 592.202043][T19594] loop3: detected capacity change from 0 to 140 [ 592.212155][T19594] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 592.420365][T19611] loop3: detected capacity change from 0 to 140 [ 592.484463][T19611] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000e000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 593.289470][T19630] loop3: detected capacity change from 0 to 140 [ 593.300346][T19630] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:13 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x2000000) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 593.960278][T19651] loop3: detected capacity change from 0 to 140 [ 593.992904][T19651] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000410000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 594.193978][T19666] loop3: detected capacity change from 0 to 140 [ 594.248493][T19666] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20002010000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004100), 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) pwritev(r5, &(0x7f0000000e80)=[{&(0x7f0000001680)="c1", 0x1}], 0x1, 0x1000000, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) pwritev(r6, &(0x7f0000000e80)=[{&(0x7f0000001680)="c1", 0x1}], 0x1, 0x1000000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) pwritev(r7, &(0x7f0000000e80)=[{&(0x7f0000001680)="c1", 0x1}], 0x1, 0x1000000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000004140)=0x0) r9 = geteuid() getresgid(&(0x7f0000004180)=0x0, &(0x7f00000041c0), &(0x7f0000004200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000040)="7c964e3ff2f3cf29ec6bf13d7da82f3ceecf49735197aa83a968c007088bd859ec7cbf", 0x23}, {&(0x7f0000000180)="7d1545a48e117564b4008979db81440016e467c0e7e53bd76480830cebf2526264b1a541587bd89f238358add3573dc797cb5a512f07", 0x36}], 0x2, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x18, 0x80}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="1e3d6484f6238a3c9c23dfb5330f1da9927f35f9bda99012445707b9cf6492f16326f31ed8b10a993d8058457c621bfc347feb597f39b234b98f43c2838616ceb5a68d146034b731c359d01d22e98c99831ba5c58ada04a4c3025dbafc23795a6b09694f8db5c42aba0e638bba61c5af4a53eb9b4b7593340321cec15d1886b2451b073cffa0411672ae43f1dc435f06fe3989787ac66ab0dd1a42757df005a1fd084dc9ead41c17b8fbfc97de54e98589bd54f866f686b92eade2", 0xbb}, {&(0x7f0000000380)="39191cc21d451b75307de1db537240f7e1fb3924225b8416ae11c939a522c444df311657c5cc664eb97a5461f0e66c5ccf6e7200bafaa91bb3af28b273511ea9", 0x40}, {&(0x7f00000003c0)="0a920fe9744123fcb4d346dd7d6a2a23f81330ff350bfbbcd5e5b5110ea1b0a3dc7f597eb7c0a5ebfd25cd71b4b0900b5dbdb4f85567781a10a88c134e8ba971ee3a845e0a4b4784a1a56d7a374d8afd104a110f1b096789dcedcbd7069e58827d7823019038e1751af1e1e0793b50fa501710dc264fe33fc0baff7f95d2994af1dc", 0x82}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r2, r1, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x88}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000f00)="0a6448c9a995be10232618fac119ba290496d281491506defd2f60875adac655ced9de98a6201bc256e72433f39ee3af0c23caaabe152143adbdaca39f054547e6e49add03f9e0e593fa9f643f3078d9a49c5c6a6158d7744dd227af02b4e276f0c918a2c6b4469f9455786b309f88c71ab9504aacb9dc7cb3e45390a8c5b185f4c22c511dc0f18e122b50a4", 0x8c}, {&(0x7f0000000fc0)="598afc847550bbd1360d1e27c02c8d151af29d5d2fd500c19be383b3a01f8cb7c2ca75e955889616b8370c13ef5dad8ca7913baa2af4e1f3215cc91d7d9e8627466af74c8b5635", 0x47}, {&(0x7f0000001040)="b52b8d52b442bc0b21d676cfcf8c65fea67ca26c18e6f30d3c4c9f7bff9f40b74fb74d40b76171e16c86e7bfcd1a3788e1cae135daf1a8676e55e85bff92935649ba", 0x42}, {&(0x7f00000010c0)="df638c794502a65ec32cccb5f53df40637b278197196b2aa034f79b334c4875ae2a5f2762901afbec369923b019a9829dc5efc9a74bab34fdc4d814272fbab83700259112f341585aadcb75704031278c27114d71ef8ee121b087006d829a027338e23b6", 0x64}, {&(0x7f0000001140)="4768993b692cebc67f774aacabc5f7cf72e2f8728fdc0328ad1abdc6d18becba3af889e5ee271cf880a75cbb381bdf34a6d714eb2c5f5ba09f7f54829dce21c764c8ff", 0x43}, {&(0x7f00000011c0)="4254fb1658b1fd374e82a0a8b291ff6fad00aa1bf162849082a6feb61a01038611de19e2b4e6e892a5b371dcd1fd33cd3141431bd7b2e933e9178933a35b94d392a18be758606c0131d9026b72e61085908b88d4ca24d6b7e7cc661bf79d1bcdf9bfeb95d633c402a662c28ac665bf3f43acf72e56f6346559328376d58577137c81e53158c87fca45a3feb7c6b408e6444536b5e6c345641e50715fff739a3d341565ac74982b9379491b63a80c17de5fddd8", 0xb3}, {&(0x7f0000001280)="f26fc4180ad571f0953acbc783d640b2ed60ffac648a1657e70ccbf10cc75d2e4789c9f0af5776f311f41c34a087be5a233bec4492af455c0c9e2ad0daf69726d3dbe2947b456b6963978f", 0x4b}, {&(0x7f0000001300)="990dd2e77adba4e07ce49f4b5c0806810b1bdd4f550e732ebbdde1a3fcf04804a6eee6f9e13e7834c43829c3b29ff433d552441768a6750dc054b1d4edbdf805e54c9c3fbc7f2e416baf6e83313f2e3378940a96f512cd24c73c048d2316b2cf3ec171610e1d06", 0x67}], 0x8, &(0x7f0000001540)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0x40000}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001640)="fae28c4d958af6facf7c325fc087dfdfa1bfbd1fbbf1e33eb561eba95797bda98addff463e260ce3c9a977814413ee91b4d2df5d44c2f82609b5591208e41faf4393d4f9cfe10efa629d2a9cedcbdb910670412b26e5624a6152875cf8f921e4aa0a85a4a7e86d6a16c33f605003ac4b8e9dd4892de05115010a8be21e290ac741adc5d514558b8d8e7b0b56998b3693bcecf8b74ce2aa6bfd87d4a4e3881f648a893cd2d3cbdbb18ac987", 0xab}], 0x1, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x20000040}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001780)="578da7b7aef468ef4dfa907d25815410ef888deeef4969e7405cd7f3e7be6a90ebfecda2cc92791618f98777df867f914b2aae388f86cb", 0x37}, {&(0x7f00000017c0)="044059cd6cb37882b6f884d495b5d833374f545645fa76a563d7705dcb2293d2a5354854debb458d466c67da8d16cf3a9d2e444f31410900aab091dd04d2843695e58294abeb5af4ccf083ad7c81658211f617c1a10d61328d126094e4036e204779f7defcff144a61439f5dffbe3fd79a", 0x71}, {&(0x7f0000001840)="018feb45180a1e08f2869de6511618810319fb09803a43d9384261ca94ff0c34b621f539ee7d4cf1cc1fc8a6e04dcc6c40ed36d3b46bd59f45f687ec60abb416ca8a69a23f0f9d996a4f4fbd9c7ce273c9f2a69ac122df10f50542d535a95cf1f2df2efa1d9a1ec5da64b02e7d0743b61bdd565c349ad663d1cd8f75bcad9b249dbfc29ac5f49f61771195c029fc6614f7be141bff355d58bf165faa43a08a4849922e0255ec689af5977489c4c4313d6c58b77ea49a1be1398b2500184068376f9e4f8d624cb44993ed7db005608cc83099b6a69d1475eb936d258aeb5e430a40a6cee642627b79a74bfe98e1d27ef7a043cc1e52490344d39a655ac99f10b48786dc1390a069ab40c967b658dfe8e6aab561caa25dcc162ffb3cf6f95afb383047accf03501b52d49adf8b6782cbe8c5bd9237651562ae3c2e725002d847ee51eaf7bb775c5342095bbac64cb0af606159283d2c6cf0efae6b5adba0baa6ed3b0ba06b70d5786a9d84804e2bce349385afcc26b2697cc930d8eb84d2618f631ba566932f0865b2155c97179e83213421b075f8cd76e6c8882f39e4d496ec5871e4e323f5aa96115791d97e05fae6a47fa11fd6ba03e0d08942910507ea45864e5be1446d93e484c97ae8fcf400ffd2c85a9d1c2f2edf2e60abe60528e4e70b5a7bc365df2c9a4027e7de2acb452cafbdb82985dfc737102f7f7f35e73528c3f117e82ff6c3a6ce66666c0b9012f3ee70cc142380f87af6c2100304e49d2e1a28b3b60b7b333ad1e9b331d1db7ceea6248a3c79c086fe98d4391df1827e446cf527f01f49c5a947b2aa4ebac9f9b743ee653559fe17b952004833549b44c9b1f04d9e41474a74e2754b52abf1b93ca906361421a5b4afb0acff4e154d3802ebb57be9baa3fe5b49e8f97eccd29fcdcf5051791afe04a7aba89d48f7c2539aebbf8b52b4076b0f5117d7ecd560b70ab64a187fa446d5bb8c1699670e2862ecd983ad9b3d70d9c9bb353a700f0c4aa06163a5b815df43f7b55258f0a5a990259c928af56211cf90563ff56c0f018ff9deca6e96c39b3d855a57879122ca558d7642ecba7e7248622ca7a40944f91973951ca8968cca11a5e05a8c67854bf84a628dbf59766f35410ee340c1086571665eb3de5a5320f01fce3e0e3e1d301e862e4cf2717edc3b00a6e4d2d2ffc30075e4afc24642684c0a7ce117051759d9ad3ecaca79c5f967c3f91b68ff8b33832a73665217419e1461a4ddb1424c06ecf16cf1b2061871c006834b8c8bb5971821c8a847b24ecf06ad97775b4981a4198d1eba470df0775146b006636495a872b3fb45e8c87f21f75abebd71b28d9007a445c1ea83ef7abe3f591097e793dd5df5728850d44ea6eca2f99321be43709caebc06c938e71d44f50c12ea6f8e29cac4474d0882c2d9f898198579d940a6eee76bc2ad928c6e324edcec3106961db1f90c1762c275825218ec6e39aa102e3f9fc2f1fded031fae966e5b42885b854bcb12bd2bdc89a54f63a1baca45e9ed4c7cc0da77433a80bb3147b51c3909625dce44e675775046134c30266408ba34ecc467fc97f13c060f1b71e34e23952a4cc81e0adeeef9bd745e860a1f6de429629d52271d5d9275d9e54a570f831dc8f49315f72d2bc79e7059dabd687e0e34db8416ef9867fb14794e5f42c515137a5b5d7b83efa10b0830a447f939b8ffd97223a448e42a10c996dacf0a101da446ccb1aa7cd60b29a3296fec585fac35ccdf48abee710a784c02368bf212ed91e23d6bfe0e80e437ebc4ef9ea95ae232e2c3b684d2a0bc8a2de949aff0724e3af7b0a432834252d86129be657653402ff90a8a7dbab39f334e4b0e4e26df48b75bcfa00267a913cc471663e9c74be831ebaae85e9cb28eee5936a5a39626da4778e62a472f713ade77061589ce473f035ff0d31130a1f4e998a83ff3d42fa802d3a881e1109323bc4eabf075fd4ad46f8d74af56dd64555e2fff8242c6cb28d2558fc1503182707e8394a72459952db33c4f23df0869ac07039e163dad9067410faac034d835dbd0481ef6307747dd6eec289a2746fcb59a73cb2ac0b0f8c5ec8304e58af66025c9252a3ab8814c5c23903739a25c82ee7deaa9adba78e415444deda7f0f3a0c0da7efa99ade63c9392aa705c26461b705b893275f6020df08aa496befc6d9a1fde8287a70621a3ffdf429bf6661c0631cc97a182cffd5ee71d8cef7c13ce8e024620f044a26fe423b953098ca7cca09031113d2376d337da11fcb0f135661f7467e6f14f2a1c706680365f51edf5c1fda810c6e302bbd5de5cb459fceb73f317763cb194ae2d7f40d742726a72dffd96436ae41a4bb885a659ba59866d82baeefbad92a03c0d0cb5151ed24f9bc875bcf13ab5db5d41929f8f100b93095580baf21b4fce3ca1b54a9c2dd311bdccca71e1e06390d97f9adc07bbb546a50534f6720ed25134df1ddcee4e21570da754f29aa20a7591c7046a2418234d31cf884a8cee43846b23f6f24a1fd20497885a9cd454cd59dc72fb4f0eee07ebe015e727798c2d7a6e30ba0dc9fcc83a07e097abe9745c57b2163e4745acf345723c282fd4f6068ddb2fa993b3fdd49a6a84d9064e48567b37b45c7505f7bf079a27b0d77cf601dbcdd0b569bcd4b335c4d523a9a25030a13f9c6aab5e30db92d52f47995fd1cf2b5956fb04d7663ed7b79f132665c14b00ba8e75369ba7e375d21cf2cade5acecee197a0b79204a2b7221f10a9483152353763e7532dfc49197f0d025334f7503eaaa48096fe80e41cc4ab496a529b5a42a36c4ab71e44afb42150f087bf8cd0d88d2453096a7b6b0c24095b9325729115180007f0327d1072889018d3762e4a2fcf27f5b7a6733b03569a7b904d2a048031fc8a3801f4e007ddcc642ae4f34afdd123506a3c36882f32ddcb829b45b6ee2a67f5a691cee25231680560d013af14d8fe7362d87de595a2f52aa6197ea4c106bf45ede1a1a5c48d0b45b38548e203627448ef207553e54eb6980c60ae6cf7dedbc0400e5293afa25ff4012b2af837c2e39b4aedf92741aedb61143100549f28b83d1990c6e351a545a159465606ed6f9fb12f89a5338b4172ac24db1b7d44a21871b1b343f6d71d4194788f39807d51a7ca678a8d4e370f400aaa64fada52f97f82dc4a587ccf8fb7c2bfa7042f097022ad22f991af22931fe733f1a4a71c9113cbadc4c302d88edff85640b812ce2224b51d0f05cdac3afd4d090d2b09a77062c685c8b1074559d6546eab9cf94121e6472666d5069dd3a83e450b4883237d6b005726f27d2d3467d33e906d97eace4744e4f5b325f0fa855ba003db8940dcdd68987afccb16642b3fb6945d0210e4fdb18f0db3a53c4de8a81a0852a2be765ec456dd286133fb36dd12988e28da2898e98a3dd78d9a8f3a0add768881aa4e012ae1f6e03f997dd70b360a378d2fcfd24bf01665604ed67e4cf0a29cd13ea1cc15b72648acceb2f24a291bdcf74a1558822d856679baac40eb37c8c0dbc019bc522898651f236756da697c342634a8f5845943892f336ea3de2881f204ea97e55849c9dd06823e86eac58dbf7388b331ca5db1667a25f89f88408793ed49310977e21a581f4cb93d5181015d69b34cf0f8c505accecbf0a241a70906df9cae6b9e656b158a28eec32ffed2db211148d0756bd391fea13790faf9b02282afebd63776620626ae801258d1ce4d0a5868d1950f0bb5ff21b1e0bb8de199dd330c6e35b383eeba8208b1138d0d525073e2c6c8008d65579310c6b878574e7c53411d3f7a581f29be03959adbf1259d5aa9c164035edc75e28fa77d25b4aff993ee14c02c91bb2aee5a1c32d23884a034b2e9bb352d7a2efb844bffaad887d4d526d698918018161b19a1421761c1f79da3b5074022bfa6ceffc86a0b6ad1d44eece50e151f27dbd4790ffc247e87df74894815e2eefd6848f4ebabc5e00b0415a124e37ea1a83e98678d17187a08103ff1fb70017068902e8dc4e8b67bdcaf6333cecd431d827b5e83b362e8ac390f4fbf5b8d98f61b371e48d5f620a279f7b224137d392ed56a8d802fe63bb1c2f0a4d3a0f3477b2fb361accd1b65fcd8f57abb2e565dc112fa58f8054f672adadaff1a53959c89898c8d2b47f71ed59176cedfe31deff20a938cfae40449e6ee394a9b8502352e7e0f23435e359eb67b667a381259deff29f2da0dcf5e1282b7bfdd91a0a3cee037f877d602363a24db4316927640985e8ead2a31625e98380162fc6d0f61d5680db3a556247fb89fe26c459fce96fd20615924a50bfe7543f700a32138d6257a8076b253c6ff9ec14fc581409e003b2b9bcb1b3a3f14c6a2d8561a6d245268e51a62ebd952c4e0d855c82afc442409678f8bf784672e64eba1105858b72811cd4db5ea0161dbe3dab023a73518a45775fd9d75a5329b84e01602aae3ee712fa0a9fa622d09706ece9f0c22ae4b830d9f9b7c6c9efe4e1dc3668c416bb3f45c098fdeebfb39ac596e0976896bb8b901b114b27a515a45caf9f6a2bf9e544ef180f1acca1cf4deb56c699d2420d3fc643b542d90369c2f04ebc1d4ce4bcd216594fe4ba3bbc95c3fab60ebcc4cc75426bc9bb90029e990448d754f26dc5b77cdfeb522bef0eadab5e6b554a41aad8abaf592cbb63bf0ff71de3c3d150603d2f5d99644e8cc2331b2253c8befb7e16567e1a46fd0ce859838236184786afcd42db55a96506739e9ec4e77ad7cf006b5d381fb367c8c1b6925a1cff36cdf038446c80e5e8bbfef729836bff0fd3d67cd4838a8222ffafd86596bb925adf04bfa9254dd45926151f87c8fe52ba4cfc66d13d7de4161ef4421ea76dedffd1e1f4df37630c9093086b4caf972cabf1038f712de85ed629e5e2158927e5936e5f950b01ce933fa4f487be843f1a8c6d21c8e7dc6eb7f2dfa03308f775c0d71c5141a7894eeb5da5d52022cdde13c8ffda22ae2788f5743a90a31861a865f0620e163ddb04829e448210765d503432e09fa4a6ad791421ca3f534c1a420ffef2a1ce2b83805b60f15708fb6ec44b775275fe2d11ecc7051b82a36b46ae5191c8f5baf459ed91c45d305c0bd14667716efab9432bb6384c8b2c5d122edb1731b8b51dc1ee035a18ca00cd409080e14923b7601a4a822320496bd65b69036621136138d47c8af5b75f5fa9c48a9303a654bf086262e20f87fd175189a54e5ff99c8222f522d3ac91bb3b424fa403f09db414228b48302274e705feba06c0aca22773849c45f9470eec37a42fb09b6258f4e8a50c6adba5fd82ceacc5cfe469c8cb5444b2e26c14eac366b72fe2f837fbcbc4822ba13105b53d8ac6fc5926922a743f1fe3472567b537d56639f90910fcabed9e315f262c27a3f8deb015c78c2e28357ebcb5b835c5f1181aaa02a414520c226811e0d6695ecac44757a77c113024249c476d06a702c1b146ae11455b166e3e4826ce058da452f63494d33638d5471667893e8de2274b38c7ab8d742558ec8160bd2b1acecdc7da07db34646241b960d6bdb3aec0bfe28c7708af21b261af39b7b6eec377f2afb8e32bfa92da9a562201d3c80c4705fb9bb6266120162f0a07ef5b14d63b656361dd9c6c933ace9dfc588f1c2e18de63ee3f7215f5c08088a4480826c82c36aeb4ad3adb52e6316da481da5a3f34cc02924665c412aea6c532257220c68223df05856e8dd0e819ddb093c98eadc1a8cda8d7668375d2932df3a03dcba5fb819b19faff61ee9c7f4c30f89fffe255d12c2", 0x1000}, {&(0x7f0000002840)}, {&(0x7f0000002880)="95fe11d5b2b6dbb05763411122fc38b30a34dc9e160dc240f33fae71535bb35010a56d2c3c0628ae19364c9b8467745bd14847c233b5093d226636c91e50", 0x3e}], 0x5, &(0x7f0000004240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [r5, r6, r7, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0xc8, 0x40083}}], 0x5, 0x4004) close_range(r1, 0xffffffffffffffff, 0x0) [ 594.705413][T19681] loop3: detected capacity change from 0 to 140 [ 594.736497][T19681] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000011000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffffffd) close(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x8000, 0x1f, 0x0, &(0x7f0000000240)}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) [ 594.842412][T19695] loop3: detected capacity change from 0 to 140 [ 594.854216][T19695] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 595.077488][T19712] loop3: detected capacity change from 0 to 140 [ 595.099632][T19712] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20008612000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 595.171856][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.196483][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 595.241189][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.300142][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 595.315455][T19725] loop3: detected capacity change from 0 to 140 [ 595.328639][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.346177][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read [ 595.357383][T19725] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000014000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 595.732921][T19733] loop3: detected capacity change from 0 to 140 [ 595.753927][T19733] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000001f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 595.876423][T19745] loop3: detected capacity change from 0 to 140 17:26:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 595.947483][T19745] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000020000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 596.151347][T19769] loop3: detected capacity change from 0 to 140 [ 596.188962][T19769] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x40c, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20001020000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 596.688944][T19782] loop3: detected capacity change from 0 to 140 [ 596.715391][T19782] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000026000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 596.913950][T19803] loop3: detected capacity change from 0 to 140 [ 596.958727][T19803] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000038000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 598.238634][T19826] loop3: detected capacity change from 0 to 140 [ 598.264125][T19826] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:18 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000003f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 599.226181][T19859] loop3: detected capacity change from 0 to 140 17:26:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 599.287425][T19859] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000040000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) [ 600.600441][T19887] loop3: detected capacity change from 0 to 140 [ 600.612773][T19887] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000046000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 600.986590][T19900] loop3: detected capacity change from 0 to 140 17:26:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) [ 601.467964][T19900] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000048000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 601.667459][T19929] loop3: detected capacity change from 0 to 140 [ 601.677893][T19929] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) fcntl$setpipe(r3, 0x4, 0xfffffffffffffffd) close(r2) 17:26:22 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000004c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 602.653319][T19954] loop3: detected capacity change from 0 to 140 [ 602.674978][T19954] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:23 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000055000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:23 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:23 executing program 5: getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 603.990504][T19980] loop3: detected capacity change from 0 to 140 [ 604.011280][T19980] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:24 executing program 5: getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000060000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 605.061541][T20017] loop3: detected capacity change from 0 to 140 [ 605.080772][T20017] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:25 executing program 5: getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:25 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {}, 0x7, 0x7fff}) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000068000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:25 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 606.353610][T20039] loop3: detected capacity change from 0 to 140 [ 606.383299][T20039] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000c6a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:26 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 607.275469][T20060] loop3: detected capacity change from 0 to 140 [ 607.322273][T20060] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:27 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000006c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:27 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 607.819555][T20078] loop3: detected capacity change from 0 to 140 [ 607.845469][T20078] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000074000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:28 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 608.799707][T20101] loop3: detected capacity change from 0 to 140 [ 608.834946][T20101] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:29 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:29 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:29 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000007a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:29 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 610.086224][T20119] loop3: detected capacity change from 0 to 140 [ 610.124435][T20119] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:29 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000084000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:29 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 611.003743][T20144] loop3: detected capacity change from 0 to 140 [ 611.050897][T20144] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:31 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:31 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:31 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20001286000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:31 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 611.549273][T20153] loop3: detected capacity change from 0 to 140 [ 611.576406][T20153] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:31 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:31 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000008b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 612.241454][T20181] loop3: detected capacity change from 0 to 140 [ 612.277999][T20181] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 612.358773][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.391342][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 612.405651][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.531613][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 612.642789][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.775108][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:26:33 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:33 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:33 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000008c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:33 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:33 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 613.590392][T20202] loop3: detected capacity change from 0 to 140 [ 613.606281][T20202] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:33 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:33 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000090000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 614.582095][T20227] loop3: detected capacity change from 0 to 140 [ 614.616762][T20227] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:34 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000b96000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:34 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 615.093700][T20242] loop3: detected capacity change from 0 to 140 [ 615.117581][T20242] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:34 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fffe000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 616.024358][T20268] loop3: detected capacity change from 0 to 140 [ 616.084044][T20268] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:36 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000ff000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 617.398897][T20291] loop3: detected capacity change from 0 to 140 [ 617.423714][T20291] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000fff000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 618.141471][T20330] loop3: detected capacity change from 0 to 140 [ 618.175941][T20330] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000feff000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:37 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 618.302432][T20350] loop3: detected capacity change from 0 to 140 [ 618.381169][T20350] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:38 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 618.601953][T20375] loop3: detected capacity change from 0 to 140 [ 618.639157][T20375] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (70 blocks) 17:26:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:38 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:38 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:38 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 619.466132][T20388] loop3: detected capacity change from 0 to 140 [ 619.483733][T20388] EXT4-fs (loop3): bad geometry: block count 768 exceeds size of device (70 blocks) 17:26:39 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 619.605766][T20406] loop3: detected capacity change from 0 to 140 [ 619.616790][T20406] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (70 blocks) 17:26:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:39 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:39 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000000100040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="246ed29e0f7bc7661d9085066b843dab7f27b89bc650ade16d747ba335c89d075b697112acacc70afc1ffaeda49e7d1f3331ddba517df90b1697b358f9b788496bf5af7ffaa8d4739ea277720759e78650b0473a8b4438aafb88a7080633fffcf60ad05248dccddd242b4e60a8a7e51fc2480c95", 0x74}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="05128282fa482538ad133681f9c9efc71b4aa82b97fd873e74025d2c7a163bfcf8bc1b8f5c197bb02e1e2e3890fd915216d072e94ed7c378b2b318fcc7ed3c43fcdaa7ccf9079b8db9eefbf8d9dfc57cb447", 0x52}, {&(0x7f0000000580)="607efb25d15964406a7a5207f82fd823a803f690e49b117af5ef885ca79151be3cbd42ccba5263d4388c6c4ae6fed67362d1a174eaadc6ded2c30c0800ea37e24f50e519a1f05c8bc4768e4e67d0588b8b906a6605eb0156b38f47e76eed5243982b276c92427f0621d538cc424089befc653d8a461f20d7b5feff2381c37a7d16678a496419367160b7fa3e4e7f92921a9cbca0a0ac24cd9e202bf5fcea33ee35b365f57dbe2bf808add799aca9abd8e00901f3338667c0f18b0f1eff8254c81b50806abb4f6108af86a6fa5c8604960be396223ce2150a333b74e37429", 0xde}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0xe0, 0x4000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000009c0)="1f8e4751d4110f765bff52b92bb9b519123dd5ffeb7438460729b9aa01db2359b6fa134af1908436a29fb89fee010dc3b4a8ef435cce048dd6bddd234c1e0b19581642fb6e7219aa25c9339aedb5d7d3ae", 0x51}, {&(0x7f0000000a40)="64ed57004d74ec22d53ee30f7534d38b91c199b644c6dbc2e11fb25c4d2270b719907001641f3619b96bd25b0f06066fa3b6b396d33f4ae8786b1152d6f18e1b57e8dfe86587cc96c8d8a5c22231ba2dd5d6dd231c4d4e71c248e321b88bea49f61a0910dcf60fda3d848d5ef829e48d9ea8977e196f2af5d816566b94538256507eeb171ea2b9d17b24c1b3c3b56d08649e2f2831e0aa32e452690c2175fcd5c4d74345eb14bbe5d72954bcdef434193ffc7922264640ddfeda1340d458783c01afc556acc07b1addd64fbf053a2f276110a5e3f55ed5851223634f39d5513c21", 0xe1}, {&(0x7f0000000b40)="a05e589da1f56b709595f1ed303fe13cc90d290f9a7d9b27e30da5988a9ae29508bf7642d52172af9be27916ac7d918f9c1713dc1e63fd71b8541017045dd307dd2055cf44733b69d2f406a1fdf7fbfecad9c8d5b57ab359f853da0c028d1d7daf70421e4747f04ccb71843f", 0x6c}, {&(0x7f0000000bc0)="3d612da2bfa563382a70a7b5bb091d809e2bb09259d84baa54a06ee2707cd3eb528ae9796ac20768758b7c2d35be7b28583ad306ea1134df3f836bc33abf23aa2aad4729e0bbaabddc7851e9c1a3c975e2683e2298b2a4320aa753d49cd33aa3c5891cd4528872cd6891d175493272b88d0e286ca1ac50eb4d90d94c1b35da30014b55a12d56699b", 0x88}, {&(0x7f0000000c80)="8cf5b1b04f4053e7a8ba2d4635a41d47d65c4034f60433003172571ff1caa0f7113324b4d92cbee69b51b6edcfbbb52b5f79aa99103e955b79a1fc8b3a84ec70e1658be4c399b855c115b842bdb36bcc9f02a8889376a796bf43d15136f011c137626f0284d2bba7fc14f4c1930b6f3a", 0x70}, {&(0x7f0000000d00)="1c384246e20b30d31e1b9fa3e152e92c8be4d5b24e5078fd8872ad5f4433467da2d3c565077273798aa8f7761126fb00edd55072c00333d59562777c92ecd0ec7112fb9884bb7e562386b63011861b239f0b0fb279def1b8616ce00d327ebe9880ec9130b7b0e5e195c6eb95929ccbb6dd4b80bb98f612d616d1c591765e14", 0x7f}, {&(0x7f0000000d80)="d2fc391d45b803bb80a012309d9921f14fa305271d51181c5ea84079f193e1d98021fe1a8c0c965256191a1d9b338479e219eee6089bacdcd0bed51051309ed6ff72ffc39a2bc92da4142e67612970efbdff117557784b4b40bf1b98437531c8b9f78edbd4391c91f788bc09c082c2f534d4003461393cc1cb8502ae67a1513e4de0e5b796928fe8771914d3d8e361b24002bd25e05145ceb7821cf8ff66be1b81edc62a6fdcfbfa2b026f5b37a351aab1e5bad6b7e6b4f37aeb7cb223f3fbeb9f293a96b8ae89ee5bcb579fef5e0aeec16cdaa303c6466f5228b551bbffacdc6d3d", 0xe2}, {&(0x7f0000000e80)="88308be9665a7702199fa230d6693503b9", 0x11}, {&(0x7f0000000ec0)="5d42beac1d8f1a222ca503232f7a98423feb644defc0444b9e96cde5e3c70ef495b091011cbb08c442bf4396cc303fa1f9aaeeb6f1d6d74902feee406e7b69146ea1341e42c3e92be528dea170eb1617be7d60499c3b59723b13a13eccc0133e1eb04b1149f3c5721ca09f48081a6ec0af3f5f194af578c6283505728c812b0662c29636d31b7a7efd347b36", 0x8c}], 0x9, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20, 0x40}}], 0x3, 0x20004000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x6, 0x3, {r0}, {0x0}, 0x7, 0x7fff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000040)="0c215f67fff659e4c109110dc99f57d0417708a5c06a79434168e4", 0x1b}, {&(0x7f0000000180)="519b3aa085269b", 0x7}, {&(0x7f00000001c0)="5712d7d0c9a6e9346f1899008d92cc599da0a3084c2117446d915be97c4cccc5fed7dbdf099ae99475884b806b430d8260676d79a1c6c5f624a618b1caeb7bdda7", 0x41}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}], 0x80, 0x4040000}}], 0x1, 0x20044041) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 619.837755][T20427] loop3: detected capacity change from 0 to 140 [ 619.864453][T20427] EXT4-fs (loop3): bad geometry: block count 1280 exceeds size of device (70 blocks) 17:26:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:40 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:40 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:40 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:40 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 621.065814][T20439] loop3: detected capacity change from 0 to 140 [ 621.084223][T20439] EXT4-fs (loop3): bad geometry: block count 1792 exceeds size of device (70 blocks) 17:26:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 621.150977][T20454] loop3: detected capacity change from 0 to 140 [ 621.163772][T20454] EXT4-fs (loop3): bad geometry: block count 2048 exceeds size of device (70 blocks) 17:26:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:40 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:40 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:40 executing program 2: getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 621.320913][T20470] loop3: detected capacity change from 0 to 140 [ 621.328595][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.341687][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 621.356002][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.370422][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 621.384611][ T3830] loop3: unable to read partition table [ 621.398748][T20470] EXT4-fs (loop3): bad geometry: block count 2304 exceeds size of device (70 blocks) 17:26:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:41 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 621.958795][T20495] loop3: detected capacity change from 0 to 140 [ 621.974311][T20495] EXT4-fs (loop3): bad geometry: block count 2560 exceeds size of device (70 blocks) 17:26:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:41 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 622.116487][T20509] loop3: detected capacity change from 0 to 140 [ 622.139005][T20509] EXT4-fs (loop3): bad geometry: block count 2816 exceeds size of device (70 blocks) 17:26:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 622.276721][T20527] loop3: detected capacity change from 0 to 140 [ 622.279154][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.317701][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 622.335641][ T3830] loop3: unable to read partition table [ 622.347453][T20527] EXT4-fs (loop3): bad geometry: block count 3072 exceeds size of device (70 blocks) 17:26:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:42 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 622.845455][T20545] loop3: detected capacity change from 0 to 140 [ 622.856056][T20545] EXT4-fs (loop3): bad geometry: block count 3328 exceeds size of device (70 blocks) 17:26:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:42 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 623.050480][T20568] loop3: detected capacity change from 0 to 140 [ 623.061483][T20568] EXT4-fs (loop3): bad geometry: block count 3840 exceeds size of device (70 blocks) 17:26:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:43 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 623.694361][T20599] loop3: detected capacity change from 0 to 140 [ 623.716826][T20599] EXT4-fs (loop3): bad geometry: block count 4096 exceeds size of device (70 blocks) 17:26:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 623.833647][T20614] loop3: detected capacity change from 0 to 140 [ 623.843247][T20614] EXT4-fs (loop3): bad geometry: block count 4608 exceeds size of device (70 blocks) 17:26:43 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 624.014821][T20629] loop3: detected capacity change from 0 to 140 [ 624.017549][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 624.051309][T20629] EXT4-fs (loop3): bad geometry: block count 5120 exceeds size of device (70 blocks) 17:26:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:44 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 624.571809][T20641] loop3: detected capacity change from 0 to 140 17:26:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 624.612766][T20641] EXT4-fs (loop3): bad geometry: block count 7936 exceeds size of device (70 blocks) 17:26:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ffffff1f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:44 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 624.726308][T20658] loop3: detected capacity change from 0 to 140 [ 624.785821][T20658] EXT4-fs (loop3): bad geometry: block count 8191 exceeds size of device (70 blocks) 17:26:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 624.972227][T20676] loop3: detected capacity change from 0 to 140 [ 624.983593][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:26:44 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 625.025569][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 625.056862][ T3830] loop3: unable to read partition table 17:26:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000003d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 625.089403][T20676] EXT4-fs (loop3): bad geometry: block count 8192 exceeds size of device (70 blocks) [ 625.176601][T20685] loop3: detected capacity change from 0 to 140 [ 625.201687][T20685] EXT4-fs (loop3): bad geometry: block count 15616 exceeds size of device (70 blocks) 17:26:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000003f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 625.379060][T20688] loop3: detected capacity change from 0 to 140 [ 625.405769][T20688] EXT4-fs (loop3): bad geometry: block count 16128 exceeds size of device (70 blocks) 17:26:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:45 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:45 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ffffff1f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 626.169767][T20699] loop2: detected capacity change from 0 to 140 [ 626.171938][T20694] loop3: detected capacity change from 0 to 140 [ 626.183181][T20699] EXT4-fs (loop2): bad geometry: block count 8191 exceeds size of device (70 blocks) [ 626.205172][T20694] EXT4-fs (loop3): bad geometry: block count 16384 exceeds size of device (70 blocks) 17:26:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 626.349425][T20710] loop3: detected capacity change from 0 to 140 [ 626.366116][T20710] EXT4-fs (loop3): bad geometry: block count 17920 exceeds size of device (70 blocks) 17:26:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000006300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 626.494852][T20719] loop3: detected capacity change from 0 to 140 [ 626.496294][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.526990][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 626.538839][ T3830] loop3: unable to read partition table 17:26:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000007300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 626.546437][T20719] EXT4-fs (loop3): bad geometry: block count 25344 exceeds size of device (70 blocks) 17:26:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 626.660135][T20728] loop3: detected capacity change from 0 to 140 [ 626.682344][T20728] EXT4-fs (loop3): bad geometry: block count 29440 exceeds size of device (70 blocks) 17:26:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000007900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:46 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000070, 0x0) fcntl$setpipe(r1, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 627.405089][T20739] loop3: detected capacity change from 0 to 140 [ 627.450124][T20739] EXT4-fs (loop3): bad geometry: block count 30976 exceeds size of device (70 blocks) 17:26:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 627.577778][T20755] loop3: detected capacity change from 0 to 140 [ 627.620419][T20755] EXT4-fs (loop3): bad geometry: block count 33024 exceeds size of device (70 blocks) 17:26:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 627.762683][T20763] loop3: detected capacity change from 0 to 140 [ 627.778530][T20763] EXT4-fs (loop3): bad geometry: block count 35840 exceeds size of device (70 blocks) 17:26:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007ffffff200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 627.980724][T20773] loop3: detected capacity change from 0 to 140 [ 628.002976][T20773] EXT4-fs (loop3): bad geometry: block count 62207 exceeds size of device (70 blocks) 17:26:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001f800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:47 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 628.521606][T20785] loop3: detected capacity change from 0 to 140 [ 628.538405][T20785] EXT4-fs (loop3): bad geometry: block count 63489 exceeds size of device (70 blocks) 17:26:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007ffffff800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 628.636462][T20804] loop3: detected capacity change from 0 to 140 [ 628.654814][T20804] EXT4-fs (loop3): bad geometry: block count 63743 exceeds size of device (70 blocks) 17:26:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007ffffff900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 628.794925][T20817] loop3: detected capacity change from 0 to 140 [ 628.821281][T20817] EXT4-fs (loop3): bad geometry: block count 63999 exceeds size of device (70 blocks) 17:26:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000ffa00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 629.003537][T20826] loop3: detected capacity change from 0 to 140 [ 629.046504][T20826] EXT4-fs (loop3): bad geometry: block count 64015 exceeds size of device (70 blocks) [ 629.159144][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.165474][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 17:26:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:49 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001fc00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:49 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000003f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:49 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 629.707700][T20839] loop2: detected capacity change from 0 to 140 [ 629.717277][T20835] loop3: detected capacity change from 0 to 140 [ 629.755721][T20835] EXT4-fs (loop3): bad geometry: block count 64513 exceeds size of device (70 blocks) [ 629.768188][T20839] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007ffffffe00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:49 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 629.946823][T20856] loop3: detected capacity change from 0 to 140 [ 630.009750][T20856] EXT4-fs (loop3): bad geometry: block count 65279 exceeds size of device (70 blocks) 17:26:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fffffffe00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:49 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 630.211924][T20870] loop3: detected capacity change from 0 to 140 [ 630.260676][T20870] EXT4-fs (loop3): bad geometry: block count 65279 exceeds size of device (70 blocks) 17:26:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000ff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:50 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:50 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 630.842348][T20889] loop3: detected capacity change from 0 to 140 [ 630.866102][T20889] EXT4-fs (loop3): bad geometry: block count 65280 exceeds size of device (70 blocks) 17:26:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001ff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 630.976501][T20904] loop3: detected capacity change from 0 to 140 [ 631.006216][T20904] EXT4-fs (loop3): bad geometry: block count 65281 exceeds size of device (70 blocks) 17:26:50 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007ffff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 631.162476][T20918] loop3: detected capacity change from 0 to 140 [ 631.191122][T20918] EXT4-fs (loop3): bad geometry: block count 65535 exceeds size of device (70 blocks) 17:26:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20007fffffff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 631.308498][T20926] loop3: detected capacity change from 0 to 140 [ 631.336416][T20926] EXT4-fs (loop3): bad geometry: block count 65535 exceeds size of device (70 blocks) 17:26:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:51 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000002000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 632.142202][T20938] loop3: detected capacity change from 0 to 140 [ 632.175994][T20938] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:51 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz1\x00', 0x200002, 0x0) 17:26:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'pim6reg1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 17:26:51 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0) [ 632.409637][T20960] loop3: detected capacity change from 0 to 140 [ 632.435598][T20960] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @bcast, @netrom, @netrom, @default]}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 17:26:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000004000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 632.599194][T20971] loop3: detected capacity change from 0 to 140 [ 632.622725][T20971] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:52 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x1884c1, 0x0) 17:26:52 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x0, 0x0, 0x9}, 0x48) 17:26:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f00000009c0)=""/175, 0x2a, 0xaf, 0x1}, 0x20) 17:26:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x1f, 0x0, 0x1}, 0x48) [ 633.094917][T20978] loop3: detected capacity change from 0 to 140 [ 633.131869][T20978] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:26:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x8927, &(0x7f0000000040)) 17:26:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000006000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 633.304816][T20997] loop3: detected capacity change from 0 to 140 17:26:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000740)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:26:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x17, 0x0, 0x20, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 633.369602][T20997] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x17, 0x0, 0x20, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 17:26:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:53 executing program 5: socketpair(0x27, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:26:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'pim6reg1\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 17:26:53 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage\x00', 0x2, 0x0) 17:26:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'pim6reg1\x00', 0x1}) [ 633.868378][T21012] loop3: detected capacity change from 0 to 140 17:26:53 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x38001, 0x0) 17:26:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 633.923253][T21012] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000008000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) [ 634.085644][T21031] loop3: detected capacity change from 0 to 140 [ 634.135822][T21031] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x0, 0x0, 0x0, &(0x7f0000002200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:26:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r1, 0x0, 0x8900}, 0x38) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x8, 0x1, 0x2) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x2, @none, 0x4, 0x2}, 0xe) 17:26:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 17:26:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000009000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:54 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 17:26:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) [ 634.635120][T21042] loop3: detected capacity change from 0 to 140 17:26:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @local}, 0x1c) [ 634.699551][T21042] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:54 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x0, 0x0, 0x0, 0x9}, @ldst, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:26:54 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) [ 634.896236][T21061] loop3: detected capacity change from 0 to 140 [ 634.934820][T21061] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) 17:26:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:54 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000180)=@raw=[@jmp, @exit, @kfunc, @call, @call={0x85, 0x0, 0x0, 0xbc}], &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x6}, 0x10}, 0x80) 17:26:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) write(r3, &(0x7f0000000240)="33984c1e4a289a936902c2ee2b54dd795ac0d3d8fe97c89f15d5b4e1e84d50aaffa443a51ea7290d67ab3996ab148392c0f595016db35af9ef3164c85e99be1279b3bd0a326486e00e7f90147c203887e8250ef531260101e56355f0138da29051e71376e4ea110a25ebe57d6ab553f8b2993d04de9d8c619aa14a97e11a3554a673de431558000ec35c549b6f68715c869ca5ffdee07fa96fa8708c434a8d2b23b62522e1", 0xa5) socketpair(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/31, 0x0, 0x1000, 0x7, 0x2}, 0x20) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340), 0x3ff) 17:26:54 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x0, 0x9}], &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x61, &(0x7f0000000240)=""/97, 0x41100, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80) 17:26:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) [ 635.431919][T21078] loop3: detected capacity change from 0 to 140 [ 635.466099][T21078] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:55 executing program 5: pipe(&(0x7f0000001c00)) 17:26:55 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3a, &(0x7f00000001c0), 0x0) 17:26:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 635.867976][T21093] loop3: detected capacity change from 0 to 140 17:26:55 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)={0x0, 0x0, 0x8}, 0x10) 17:26:55 executing program 2: pipe(&(0x7f0000008940)={0xffffffffffffffff}) accept$netrom(r0, 0x0, 0x0) [ 635.966430][T21093] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000008580), 0x4) 17:26:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000d000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:26:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x114000, 0x800, 0x0, 0x1}, 0x20) write(r3, &(0x7f0000000240)="33984c1e4a289a936902c2ee2b54dd795ac0d3d8fe97c89f15d5b4e1e84d50aaffa443a51ea7290d67ab3996ab148392c0f595016db35af9ef3164c85e99be1279b3bd0a326486e00e7f90147c203887e8250ef531260101e56355f0138da29051e71376e4ea110a25ebe57d6ab553f8b2993d04de9d8c619aa14a97e11a3554a673de431558000ec35c549b6f68715c869ca5ffdee07fa96fa8708c434a8d2b23b62522e1", 0xa5) socketpair(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/31, 0x0, 0x1000, 0x7, 0x2}, 0x20) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340), 0x3ff) 17:26:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}}, 0x0) 17:26:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 636.389026][T21113] loop3: detected capacity change from 0 to 140 [ 636.441708][T21113] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:56 executing program 5: syz_io_uring_setup(0x3487, &(0x7f0000000280)={0x0, 0x4f26, 0x0, 0x1, 0x3da}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 17:26:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 17:26:56 executing program 2: syz_io_uring_setup(0x6284, &(0x7f0000000000)={0x0, 0x5562}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1e45, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 17:26:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:56 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, 0x0, 0x700) 17:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25010000001400070000000000000000000000000000000000050004"], 0x38}}, 0x0) 17:26:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000e000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) [ 637.290851][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 637.307033][T21145] loop3: detected capacity change from 0 to 140 17:26:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 17:26:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x1000000, 0x0, 0x0) [ 637.350700][T21145] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x84008, &(0x7f00000006c0)) 17:26:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 17:26:57 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x1b, 0xfffffffffffffffd, 0x0) 17:26:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000f000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 637.933122][T21169] loop3: detected capacity change from 0 to 140 [ 637.934311][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 637.956550][T21169] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:57 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x4a, 0xfffffffffffffffd, 0x0) 17:26:57 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x4b, 0xfffffffffffffffd, 0x0) 17:26:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3}, 0x8) 17:26:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000010000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 17:26:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x5, &(0x7f0000000580)=0x1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/163, 0xa3}, {&(0x7f0000000d00)=""/19, 0x13}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f0000000e80)=""/103, 0x67}], 0x4, &(0x7f0000000f80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x2, &(0x7f0000003000)=""/87, 0x57}, 0x858}], 0x4, 0x0, &(0x7f0000003080)={0x0, 0x3938700}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x0, 0x0, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000000)='./file0\x00', 0xa) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x101002) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0xc0185502, 0x0) r3 = open(&(0x7f0000004b00)='./file0\x00', 0x800, 0x155) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f0000004840)=ANY=[@ANYBLOB="00fbb60581e915ebc95478cee2c7d503b81997760b6bd0da9d13bfb545cbbc504388a10b91d40533f17791acc0a4a7ab8c487047e7313ca23446c876a32299c3e466fb64052c573f10f717e8901440a951a595adcfaf490e2f1569417fba1361b4e5ab4376e329ac77c2f9d684a025c7045c2d35c9220bcf9bc5c85f0da3d3b5d582703e22aedbb65b2a985d81d0fc3b54d9e7aba8b99ae74dbfdeeee8ddc3d81e1fe7d53211eabc8e0a9b12518a9c26403c2fca63e7df976e2e"], 0xb6, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0x3, 0xa89}, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)=')\xb3\xf5J\x00\x00\x00', &(0x7f0000000300)='./file0\x00', r3) 17:26:57 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xfffffff9) 17:26:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3}, 0x8) [ 638.240792][T21183] loop3: detected capacity change from 0 to 140 [ 638.287511][T21183] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3}, 0x8) 17:26:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 17:26:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3}, 0x8) 17:26:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000011000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:58 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xb, 0xfffffffffffffffd, 0x0) [ 638.833800][T21210] loop3: detected capacity change from 0 to 140 [ 638.884674][T21210] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x0, &(0x7f00000001c0)={0x77359400}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58ddffff5400000127bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010100e000000200000000000000000000000008000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1dd00) 17:26:58 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x3a, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) 17:26:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:59 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x8, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x33, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x12, 0xfffffffffffffffd, 0x0) [ 639.820018][T21231] loop3: detected capacity change from 0 to 140 [ 639.854936][T21231] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000014000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:26:59 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x18, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x32, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:26:59 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x8) 17:26:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:26:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101282, 0x0) write$rfkill(r0, 0x0, 0x0) [ 640.031325][T21244] loop3: detected capacity change from 0 to 140 17:26:59 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) [ 640.089643][T21244] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:26:59 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x4c, 0xfffffffffffffffd, 0x0) 17:26:59 executing program 1: r0 = socket(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1e, 0x3, 0x0, 0x2}, 0xfcbe, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0) 17:26:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 17:26:59 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 17:27:00 executing program 1: select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x2}, 0x0, &(0x7f0000000240)={0x0, 0xea60}) 17:27:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:00 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x2e, 0xfffffffffffffffd, 0x0) 17:27:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:00 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 17:27:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000026000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:00 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x35, 0xfffffffffffffffd, 0x0) 17:27:00 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x13, 0xfffffffffffffffd, 0x0) 17:27:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:00 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x31, 0xfffffffffffffffd, 0x0) 17:27:00 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 17:27:00 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x4d, 0xfffffffffffffffd, 0x0) 17:27:00 executing program 1: r0 = socket(0x1e, 0x5, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1e, 0x3}, 0xfcbe, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0) [ 640.946621][T21287] loop3: detected capacity change from 0 to 140 [ 640.977721][T21287] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000038000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:00 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x1e, 0xfffffffffffffffd, 0x0) [ 641.204909][T21305] loop3: detected capacity change from 0 to 140 [ 641.275310][T21305] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:01 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x5}) 17:27:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000540), 0x0, &(0x7f00000004c0)={0x9}, 0x0) 17:27:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x5, 0xfffffffffffffffd, 0x0) 17:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x2, @remote}]}, 0x28}}, 0x0) 17:27:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 641.546879][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000046000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:01 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000001e80), &(0x7f0000001ec0)='./file0\x00', 0x8, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=ANY=[], 0x1009, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 641.590700][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 641.602351][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.652222][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 641.671287][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.708960][T21321] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 641.719688][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x30, 0xfffffffffffffffd, 0x0) 17:27:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0xf}]}}, &(0x7f00000009c0)=""/175, 0x26, 0xaf, 0x1}, 0x20) 17:27:01 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_get_implied_cluster_alloc_exit\x00'}, 0x10) 17:27:01 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000d80)) 17:27:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 642.111231][T21324] loop3: detected capacity change from 0 to 140 [ 642.221960][T21324] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:01 executing program 1: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="6572737061af5e800b6ff28b4ae989", @ANYBLOB="0010"]}) 17:27:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x1c, 0xfffffffffffffffd, 0x0) 17:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000004000000140001"], 0x28}}, 0x0) 17:27:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000048000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:02 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x11, 0xfffffffffffffffd, 0x0) [ 642.542185][T21351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 642.576183][T21352] loop3: detected capacity change from 0 to 140 17:27:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) [ 642.660957][T21352] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000004c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 17:27:02 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x2d, 0xfffffffffffffffd, 0x0) 17:27:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 642.819918][T21367] loop3: detected capacity change from 0 to 140 [ 642.839622][T21367] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:02 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x23, 0xfffffffffffffffd, 0x0) 17:27:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 17:27:02 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x2c, 0xfffffffffffffffd, 0x0) 17:27:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 17:27:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 643.325743][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.355378][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 643.365980][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000055000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20}}, 0x1c}, 0x11}, 0x0) 17:27:02 executing program 1: r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x3, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 643.375754][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 643.384293][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.401032][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) [ 643.465705][T21393] loop3: detected capacity change from 0 to 140 [ 643.521891][T21393] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5421, &(0x7f0000000080)={'gre0\x00', 0x0}) 17:27:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) 17:27:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 17:27:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newroute={0x1b, 0x18, 0x1}, 0x1c}, 0x11}, 0x0) 17:27:03 executing program 2: socketpair(0xa, 0x2, 0x11, &(0x7f0000000080)) 17:27:03 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0xfffffffffffffc8b) 17:27:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8922, &(0x7f0000000080)={'gre0\x00', 0x0}) 17:27:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000060000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x3035ef402960ec8c) 17:27:03 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x5}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 17:27:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newroute={0x2d, 0x68, 0x1}, 0x1c}, 0x11}, 0x0) 17:27:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1e, 0x4) [ 644.419885][T21423] loop3: detected capacity change from 0 to 140 17:27:04 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x68242) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 17:27:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) [ 644.468159][T21423] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x828242) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 17:27:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140), 0xffffffffffffff10) 17:27:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:04 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x68242) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 17:27:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf}, 0x48) 17:27:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') read$watch_queue(r0, 0x0, 0x3000000) 17:27:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000068000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0xc0045878, 0x0) 17:27:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/fscreate\x00') write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18) 17:27:04 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x68242) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 645.371053][T21452] loop3: detected capacity change from 0 to 140 17:27:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}}}) [ 645.483060][T21452] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:05 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x68242) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 17:27:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8912, 0x0) 17:27:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:05 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) 17:27:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x0, 0x0, 0xfffffffe}, 0x48) 17:27:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8921, &(0x7f0000000080)={'gre0\x00', 0x0}) 17:27:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000006c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:05 executing program 1: syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x200) [ 646.228121][T21476] loop3: detected capacity change from 0 to 140 17:27:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') socket$inet(0x2, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:27:05 executing program 5: openat$tcp_mem(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) [ 646.299561][T21476] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$watch_queue(r0, 0x0, 0xfffffe4d) 17:27:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 17:27:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') read$watch_queue(r0, 0x0, 0x0) 17:27:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000074000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 17:27:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8}]}, 0x2000005c}}, 0x0) [ 647.250117][T21509] loop3: detected capacity change from 0 to 140 17:27:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x1c}}, 0x0) 17:27:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$msr(r0, 0x0, 0x5900) [ 647.291023][T21509] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:06 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) 17:27:06 executing program 1: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) sendmsg$unix(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 17:27:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000007a000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 647.470842][T21525] loop3: detected capacity change from 0 to 140 17:27:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$msr(r0, 0x0, 0x5900) [ 647.543093][T21525] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 647.911109][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.921727][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 647.945084][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.964167][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 647.972255][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.983094][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:07 executing program 5: open$dir(&(0x7f0000000300)='./file1\x00', 0xa1a, 0x0) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) 17:27:07 executing program 1: socketpair(0x11, 0x0, 0x4, 0x0) 17:27:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$msr(r0, 0x0, 0x5900) 17:27:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000084000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$msr(r0, 0x0, 0x5900) 17:27:07 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000f80)={&(0x7f0000000040)=@abs, 0x8, 0x0, 0x0, 0x0, 0x38}, 0x0) [ 648.203432][T21537] loop3: detected capacity change from 0 to 140 17:27:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 648.245061][T21537] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:07 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x17, 0xfffffffffffffffd, 0x0) 17:27:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000f80)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000e80)=[{&(0x7f0000000080)="9aff3b42f5120371b9ecd0c376ae4905b2b3283c013f4acc853cb610f395658da05b0815f7e06ab566157a651d4b7946d3216703833b7bc6de62cc8e7e61953ef6eb4b1b80f49b8ef615483ef57ea593b59067c71b", 0x55}, {0x0}, {&(0x7f0000000140)="207adb9f39ef287c20e7fbc6b1880b545114ee3f772b62fbc1328d0928ad58fbcdf6cb2fbc930f313fd66238a9c1753b31efbdb44817d495a93dbcb397053c56e8c7494bea2c7f2a68c2d8feefac05f41cb2a0da325202b2df8cc4addc10656fdac468e79c9f0ef0373c8a8b1a60a7e137cc3af9bce9a8804c1917b3052e9e6f379cc3948b325fe0ebe0def870b50bc1ed855d697883dd5b16f81dd1631b6659331d7870115d5158ad8daa3403b48f83c9f7e1895d8299af223a8ed862269b0dc1471fc3", 0xc4}, {&(0x7f0000000240)="b6e3d52e", 0x4}, {&(0x7f0000000280)="bea914bd4d77ed6753524095cbbf78ee207efc435dd82cd3720ca0ad0db659b49eeef4f3ebbffc15a0bbff5861e8d7bef77bb1578dc303af9f4279fe23fe43abc03533d03e73c9e6c92c98ea93cc34c8ceadd4aa", 0x54}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x0) 17:27:08 executing program 1: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) 17:27:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)) 17:27:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @remote, @val, {@ipv6}}, 0x0) 17:27:08 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x1000) 17:27:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000008b000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:08 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, &(0x7f0000000180)={0x0, {{0x1a, 0x1c, 0x1}}}, 0xc4) 17:27:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1, &(0x7f0000000300)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:27:08 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x201, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) [ 649.121349][T21565] loop3: detected capacity change from 0 to 140 [ 649.171721][T21565] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x1}, 0x98) 17:27:08 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/65, 0x41, 0x82, 0x0, 0x0) 17:27:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000001480)={r3}, &(0x7f0000001300)=0xb0) 17:27:09 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000a40)={&(0x7f00000000c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18004f"], 0x138}, 0x0) 17:27:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000008c000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000300), 0x88) 17:27:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240), 0x88) 17:27:09 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) [ 649.814465][T21600] loop3: detected capacity change from 0 to 140 17:27:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000480)=@in6={0x0, 0x1c, 0x3}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @authinfo={0x10}, @sndrcv], 0x89}, 0x0) [ 649.864387][T21600] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 17:27:09 executing program 5: getgroups(0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]) setgroups(0x1, &(0x7f00000004c0)=[0xffffffffffffffff]) r1 = getegid() getegid() setgroups(0x4, &(0x7f00000004c0)=[0xffffffffffffffff, r1, 0x0, 0x0]) getgroups(0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]) setresgid(r2, r0, 0xffffffffffffffff) 17:27:09 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x488, 0x0) 17:27:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:09 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:27:09 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x84, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 17:27:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x8) 17:27:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000090000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:09 executing program 2: futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 17:27:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 650.492308][T21638] loop3: detected capacity change from 0 to 140 17:27:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x80000001}, 0x98) 17:27:10 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) getgroups(0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]) setgroups(0x2, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0]) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r0) 17:27:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x81}, 0x98) 17:27:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 650.618799][T21638] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 650.740987][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.819365][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 650.884819][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.943374][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 650.971089][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.014528][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:10 executing program 2: r0 = socket(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000040), 0x8) 17:27:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000fe000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x14) 17:27:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:27:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000)={0x0, 0x20}, 0x8) [ 651.180979][T21668] loop3: detected capacity change from 0 to 140 [ 651.194038][ T3815] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:10 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@un=@abs={0x8}, 0x8) 17:27:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) 17:27:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 651.226667][ T3815] Buffer I/O error on dev loop3, logical block 0, async page read [ 651.291564][ T3815] loop3: unable to read partition table [ 651.333278][T21668] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 17:27:10 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 17:27:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="8a", 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 17:27:11 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2400405, 0x0) 17:27:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000030100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x98) 17:27:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 651.931057][T21707] loop3: detected capacity change from 0 to 140 17:27:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000006c0), 0x10) 17:27:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000680)={r5}, 0x14) 17:27:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000001200)="96", 0x1, 0x0, 0x0, 0x0) [ 651.974618][T21707] EXT4-fs (loop3): bad geometry: block count 259 exceeds size of device (70 blocks) 17:27:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={r5, 0x0, 0x1, 'q'}, 0x9) 17:27:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000010040100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 652.401824][T21740] loop3: detected capacity change from 0 to 140 [ 652.422634][ T2967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.520296][ T2967] Buffer I/O error on dev loop3, logical block 0, async page read [ 652.582961][ T2967] loop3: unable to read partition table [ 652.594580][T21740] EXT4-fs (loop3): bad geometry: block count 260 exceeds size of device (70 blocks) 17:27:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000400), 0x1f}, 0x0) 17:27:12 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)='G', 0x1}], 0x1}, 0x0) 17:27:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@authinfo={0x10}], 0x10}, 0x0) 17:27:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)=')', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="70000000000000003a000000010000000613078ea0f7eed2fb52ad65cfd4112ae5cb539845a865afe72d558bce485a4b0b2cff12692c649050e82e4b3bcb35968bce73c6aaaaeb2a4c5ca9e6449c7a53dba3c98f0aff6c9c657d2eb6502faff391992c3c45e7a700c500000000000000e8"], 0x158}, 0x84) 17:27:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000050100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:12 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 17:27:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 17:27:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x8) 17:27:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'netpci0\x00', 0x400}) [ 652.815558][T21761] loop3: detected capacity change from 0 to 140 [ 652.846250][T21761] EXT4-fs (loop3): bad geometry: block count 261 exceeds size of device (70 blocks) 17:27:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000060100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000001580), 0x12) 17:27:12 executing program 1: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4000000}, 0x48) 17:27:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x0, 0x0, 0x4f}, 0x48) 17:27:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000003c0)=""/137, 0x3a, 0x89, 0x1}, 0x20) 17:27:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/830], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2105dffb93dbbc90f86358e3f251", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) [ 653.488292][T21787] loop3: detected capacity change from 0 to 140 17:27:13 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) [ 653.554216][T21787] EXT4-fs (loop3): bad geometry: block count 262 exceeds size of device (70 blocks) 17:27:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000070100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 653.762805][T21806] loop3: detected capacity change from 0 to 140 [ 653.810429][T21806] EXT4-fs (loop3): bad geometry: block count 263 exceeds size of device (70 blocks) 17:27:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@ip_ttl={{0x14}}], 0x18}, 0x44040) 17:27:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:13 executing program 1: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4000000}, 0x48) 17:27:13 executing program 2: syz_clone(0x42300080, 0x0, 0x0, 0x0, 0x0, 0x0) 17:27:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4000000, 0x0, 0xffffffffffffffff, 0x1c}, 0x48) 17:27:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 654.577154][T21832] loop3: detected capacity change from 0 to 140 [ 654.679700][T21832] EXT4-fs (loop3): bad geometry: block count 265 exceeds size of device (70 blocks) 17:27:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xe, 0x0, 0x0, 0xa22c}, 0x48) 17:27:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:14 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:27:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:14 executing program 2: socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17:27:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f0000000380)=""/140, 0x2a, 0x8c, 0x1}, 0x20) 17:27:15 executing program 1: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4000000}, 0x48) 17:27:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:15 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10}], 0x10}, 0x0) 17:27:15 executing program 5: socketpair(0x1, 0x0, 0x2, &(0x7f0000001d00)) 17:27:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000380)=""/140, 0x2a, 0x8c, 0x1}, 0x20) [ 656.352194][T21873] loop3: detected capacity change from 0 to 140 17:27:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 656.437344][T21873] EXT4-fs (loop3): bad geometry: block count 266 exceeds size of device (70 blocks) 17:27:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@call]}, &(0x7f0000000480)='GPL\x00', 0x4, 0xbd, &(0x7f00000001c0)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005900)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 17:27:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:17 executing program 1: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4000000}, 0x48) 17:27:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005900)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 17:27:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x6, 0xe0, &(0x7f0000000080)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=""/133, 0x31, 0x85, 0x1}, 0x20) [ 657.752102][T21909] loop3: detected capacity change from 0 to 140 17:27:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) [ 657.808710][T21909] EXT4-fs (loop3): bad geometry: block count 267 exceeds size of device (70 blocks) 17:27:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 17:27:17 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x200000, 0x0) 17:27:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:18 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x41, 0x0) 17:27:18 executing program 5: open(&(0x7f0000001440)='./file0\x00', 0x20c2, 0x0) open(&(0x7f0000001440)='./file0\x00', 0x20c2, 0x0) 17:27:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:18 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000960b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:18 executing program 1: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x81400) 17:27:18 executing program 2: shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) 17:27:18 executing program 5: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f00000000c0)=""/167) [ 659.302432][T21945] loop3: detected capacity change from 0 to 140 17:27:18 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) [ 659.354466][T21945] EXT4-fs (loop3): bad geometry: block count 267 exceeds size of device (70 blocks) 17:27:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:27:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 17:27:19 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) 17:27:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:19 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 17:27:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:19 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 17:27:19 executing program 2: semget$private(0x0, 0x3, 0x52c) 17:27:19 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 17:27:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:19 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002240)={{0x1, 0xee01, 0xee01, 0x0, 0xee00}}) 17:27:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) [ 660.475424][T21996] loop3: detected capacity change from 0 to 140 17:27:20 executing program 2: memfd_create(&(0x7f0000000200)='/dev/full\x00', 0x3) 17:27:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 660.610288][T21996] EXT4-fs (loop3): bad geometry: block count 268 exceeds size of device (70 blocks) 17:27:20 executing program 5: syz_clone(0x0, &(0x7f0000000140)="ef", 0x1, 0x0, 0x0, 0x0) 17:27:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:27:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) 17:27:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000006a0c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 17:27:20 executing program 1: semget$private(0x0, 0x3, 0x109) 17:27:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 17:27:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)) [ 660.990674][T22024] loop3: detected capacity change from 0 to 140 17:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a2, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 17:27:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r1, 0x21, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x0) 17:27:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 661.064586][T22033] x_tables: duplicate underflow at hook 2 [ 661.101584][T22024] EXT4-fs (loop3): bad geometry: block count 268 exceeds size of device (70 blocks) 17:27:20 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x2, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000240)='GPL\x00', 0x4, 0xf3, &(0x7f0000000280)=""/243, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 17:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast2}}}, 0x108) 17:27:20 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) 17:27:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xb, &(0x7f0000000040)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0xe8) 17:27:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r0, &(0x7f0000000000)=@generic={0x0, "acf6ab484cbe95d455f559400ef2a63e42ba8d7f4304c153c69a4f44cf12da150a0c2f6b961c2e9354a3b59805041ee1e963b69429571adfd7e5fcad57b679542b511c806cd9dcc8f9d43f435ecbe15442415b126a78a0bb5252a8bd50294dff9a289789fd48695b72af8ebe7f530ca5094660c609d9facd39fba2988b62"}, 0x80) [ 661.305641][T22050] loop3: detected capacity change from 0 to 140 [ 661.333836][ T2967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) 17:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@empty, @loopback, @dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2}) [ 661.362672][ T2967] Buffer I/O error on dev loop3, logical block 0, async page read [ 661.384377][ T2967] loop3: unable to read partition table [ 661.401737][T22050] EXT4-fs (loop3): bad geometry: block count 269 exceeds size of device (70 blocks) 17:27:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x3c, r1, 0x21, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) 17:27:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) connect(r0, 0x0, 0x0) 17:27:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xaf, 0x2, 0x1, 0x3, 0x8, 0xedde}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001100)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@empty, @loopback, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000100)={{0x0, 0x0, 0x4, 0x1f7, 0x401, 0x7fffffff, 0x2, 0x8001, 0x1, 0xffffffff, 0x101, 0x3, 0xff, 0xc00000000000, 0x1ff}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}, 0x14) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x3, 0x0, 0x3) 17:27:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) write$tun(r0, 0x0, 0x0) 17:27:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:21 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x35) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x28, 0x10000f0, &(0x7f00000004c0)="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", 0x0, 0x17, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000000), &(0x7f0000000080)}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x10880) r4 = socket(0x1, 0x803, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003b00)={0x18, 0xa, &(0x7f0000000c40)=@raw=[@generic={0x5, 0x1, 0xf, 0x43c8, 0x16f}, @generic={0x6, 0x4, 0x3, 0x6554, 0x1}, @map_fd, @map_fd={0x18, 0xf}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003400)={0x5, 0x2, 0xfffffe01, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003440)=[0xffffffffffffffff]}, 0x80) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000003380)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/229, 0xe5}, {&(0x7f0000000dc0)=""/223, 0xdf}], 0x8}, 0x3ff}, {{&(0x7f0000000f40)=@tipc=@name, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/5, 0x5}], 0x1, &(0x7f0000001040)=""/65, 0x41}, 0x4a5b}, {{&(0x7f00000010c0)=@ieee802154, 0x80, &(0x7f0000001180)=[{&(0x7f00000003c0)=""/65, 0x41}], 0x1, &(0x7f00000011c0)=""/10, 0xa}, 0xfffff800}, {{&(0x7f0000001200)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/4096, 0x1000}, 0x1f}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000003540)=""/51, 0x33}], 0x2, &(0x7f00000049c0)=""/4105, 0x1009}, 0x80}], 0x5, 0x10020, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003600)=ANY=[@ANYBLOB="7800000024000b0f00000000000000000000003f4316a89f887654612085674d00b22074b2f2adbaaba53ac69d54d389cb77e525f5e5d136e1e5ab228e89ebd45cabbbcd62b6f691cbf0ae89d2d71ea97a57af0cb494dfcfea1ac5597cf565005d8ac942a2484d63b1837c04325d49b0ff45a46f0e0d9b107a200d178c1309bf815dcbe2dd37df70300bfe83a4fb277ff0bdf4e0a7a12759d9d01edb8d05a8d18e3a685a7fde043ced21928d80563205c7", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004c000200000000000000000000000000000000000000000000000000000000000000000000003f8000"/96], 0x78}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000003480)="f2e25a04018d03da27485adffed203106da6c8e60ad0554caba8ea40a459440147791ad1fb586b852220acf4e39b94f869353ddc7815bade5d4308590784a6bb1ba29f3875f8a1fbac7b03ec6db41ae0bba844f053e93e140c0655f67410dc22c5f65083795fbc84a1097ffa365393ff610e9255a9633f23c8c89d0203b7883ceff32e2a958609046b4c108ef3c8dae0f6d165626735c8d3f401b3", 0x9b, 0x20000010, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @private2}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7d, r2}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/271], 0x28) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getrule={0x14, 0x22, 0x902, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000039c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222802001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08000f000600000008002800ea4000001406edcdab6574683100000000000000000000000a000100aaaaaaaaaabb00006800348014003500766c616e300000000000000000000000140035007369743000000000000013000000020014003500626f6e644f736c6176655f33000000001400350076657468305f746f5f627269646765001400350076657468305f766c616e0000000000001a8e083565aa830e5af8dda2cfe3b3c687bddc4306d6739afa4c82b92a39ca0bc35e33e3d00ec62ecb37b2f25a591e8ad7fe76003134b76473598416bdfa69c9309f5e62d5bab434b80c78edaaa8c79c"], 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) 17:27:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000002c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5d8, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6b4a33d52e4dc2ff0da7ed4bcd98fbd191a6f207a35e89b056f06a00344ecce7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48ad1cf75515bb2fb42ff2bafc9761201b09dd412dd404dccbc634f403d2fed9"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2bdd5f3916872e14e7451bdc17665181e07bd19a2b476906719c1dd21af61ca5"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a17e9a94068b7d1b962fa094bc0bdf00b522df73c604857bc042e1a54b6d9b2b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x8a4, 0x8, 0x0, 0x1, [{0x5f0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x434, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "50cd7cdab708789de1c8c9b7ff644708950642b4364c37e7bf2eeb10bbd79184"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x270, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "95722b31c03632d6063f6232b8e22edd5cf5c3ba780ed1dc030873e934e68e9c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0xec4}}, 0x0) [ 661.600645][T22077] loop3: detected capacity change from 0 to 140 [ 661.631491][T22077] EXT4-fs (loop3): bad geometry: block count 270 exceeds size of device (70 blocks) 17:27:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:21 executing program 1: socket$inet(0x2, 0x80006, 0x0) 17:27:21 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) [ 661.710447][T22092] device bond0 entered promiscuous mode [ 661.745774][T22092] device bond_slave_0 entered promiscuous mode 17:27:21 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='M', 0x1}], 0x1, &(0x7f0000000580)=[{0x28, 0x0, 0x0, "f5ebfa23849a67f9d457d05becb65e3f03"}, {0x1010, 0x0, 0x0, "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"}, {0x88, 0x0, 0x0, "009db115245a43dd3ccc1aacf58466485405708df939e198e9d824a4f37016bd1bc0520fe720c919f007a15752632022f2543fe421b595ea2511c6a3ef1d328c4272c0a12dda983bfe5cc169f53b3f0249ac0dad3b9809de4af966f939b0286eaa1dbed26010a1f9d6d563570387d1ce38"}, {0xc0, 0x0, 0x0, "31a153e4341916c5057720d9b7649031a3e1d7c11d5f1d7b0afd515052dc0e9fa68ce84a44fe385d293da3196323b285faf75d5ccd341876aa8f4058c9fc695fb156d61869f4d1b4f5088dd7447efaca5fc6751c1bfac8fff0dfb707653f567d7c3ae378bc0d57e0d59e3052db90cbb5bd09c4a24997798c684f44f2d2025bfa9292223dcca0aceb7be4e254f48a528848c60d728b657bbeb179652f8f194ee8eb5535f88186a8d54e"}, {0x110, 0x0, 0x0, "50a55dc598ab4088e13c57a46427508a859f642d4cc59af59829990af93c8200813328149cd013188bc91d549a54b94d6021455e7171be55da438e9de0204bc9d68467fc179d318f1310fc025c4d28a4383e715f6c49219c6d58f5cca6626e3fbfc2675c29158cde49b13dc3819137ee67467db58ca097cba67d9169576e5c702c27473ce94ccf545a873fcf348f393995670777e443c95f80a926bfa60702f2499d3ee1004ce2aac04cdb1cf46e9943077e7934637b79252136c44a3b5f5bfb55f6fb25c8a79b41a54a02e918d81d836da76cf231e053add9ddcb2c27fc4dc74d37da6e3ea03790a479aa5c2ceb2cd5a7c81083958eb1a28c"}, {0x88, 0x0, 0x0, "d4cae8878ba4b5b6f7195e680d9e96006a531962a9baf6aeedad7ea1fca001df62eaf43976666524a5320667ca882d842aca4cf923b2f6783e472a641e3c05b08058de1ff434963f3873aee9f976bb3cfcbfe724fd350ec9003c46d7c481e41f0e77fb35a957518e1058aa7ec20c1469d6"}, {0xcf0, 0x0, 0x0, "9b745e00a86c9f5466cdae71e342fa5f50f1b4c25293ed85ea60b6055968e82141b4b6f1fb00d48d5bd9bdcc08696976f545917e868b980ef87c12e9a44158cecb10721a1fb20a81094874bc8439f8105f487b2d953802a7cf1e304ec812aeff36ee9a3f0504b0f63421f8b042cfda0e1fec396a97561995c556f4ea1db55ed075c2eb0b2edd70237903efac2c8a065e77403f8987f14b2ded4d308381adad0071995c64e5ab85e787965ad928628451958c31eb33bb46e8f2cba064e37fccf91847d313b5a12f1c347d2113958f7e79001a23b9a4a39e9107ad1e32c35447bf0e677d85a0237ca29936198ac2e63bf2cea9b9041025ceb4508e1010d9dea6d6a9e47ceedbee057d968ae4c82b095c34620d32b4dbecfb3c348719774867a9f777ee2344d5628fefe137895a3e98d9478d8bd5535f53f6a133be48fc8ccad1c6a00ad26fc838c85c908ab30151ebbe0e5b6ba83dc09d4473d877a4e4e8ac8135f9ab17cf871d78d2db5f5869e3301a25e479b8fac0ae2a6f9d3c23eaf9df0dbc0f6ccfe32be432358a33f038f19b2e9334f03b112c65a2ba5fd85eeb0223852c271edb812fd2f43546c66ab3f1281a9f3151ec0a3ec377b10e83e322265f3df28f36c4c28fac65a215ddf8750bac8f4f8ea6f8769f605e24b4ffd50deaa12b2eedd4e50b4030485447ffc67c9ad0f3ddc079ba96e84ade725087e3972cbf863dd13093ae3d868c34d8f5c01777a366d45bd3afc8e8ffa1fcf6d4d20f2d494562e4e26610d4d020917b6dfac76141dd653474ad0a68d3979eb8e174cf320319bd669c02d08809aa482f4316f27b4ed7e52f775af757f034ff860a549a1827dc5a82ba6c51a95ff1ab4086e88827e30cd127ad6e696274a262329165b2d1cc515bda9b6bb3fa953c86495a092b5463560302a0ea566fc3f32ab29d1d94794a6afaa4a60a5ac337e6ab02d395e224fb34e474a24c70ba317ac354761532c59f28508ecc91f20eeeb9acd2073426f1016e5ddfc9a15b19a8422bf90ac7162a6a7d05117ab226530f83d827a3ac0297f1ffa26f2d5e6cfd8c5e36a17882482948d164761ddda0426d326608ab600bfab0101cc9031bc669836f7e007859a497449c7e1b2fe6656a171bd57917e8689eacc3467c089c0ab47361283e9a9fbe1ca801ecccb1f94d2de57631d4d26c36b66ef5e76720a013f657bdfad64054efd0222580caac6536e65c6dca8a6bd37fa4755c3e67b46f473da49c263359fe31f0d0da83bf4af144ccf264849abceca34aab13dfe7afeecb06f1377044915795f62529f70dd40fb28e382083b4659e6f7f3758c5664de3cbf708aabf22a7b87d8fa5312d908c72d38e32035523ade0f962e0c50dca46c652a0395e56e8f6f22d06ffbd7dc9aeaccc404bdecd5fea42b9b258fdb1f54d8bdf8bf5cae3b1868eaf251c1d26c14aae8d3ff1c2a4fc0c2b737143e803b663271c63ba1f41eaeccd876a38a3a0528ec6aa73ce26845bf9ee655127942b2514a586c5c93cd0d54e24d209c9dab01b6114dc3afdc7a92705163a8f0f86c1658748e2980c57c7b9b76998f53dabc718facedd99828b96f09758cb9337f6805379754d368858649f5c7a00c9e9d74121cdc543175e3618932e215f72ce360ff86c555a1763911d660f8c1fa764697a7be98076d4b03967b45a84d3e4cd0b596e68cc67a3c237a68d0900b7965b92da80d29e8d2ae9b3eb450b2fdf609b7758dbfef6d548319536e7885fb2c5b43b9fa835f9c1e7ddbfa7b1f12247915d02bf1db4041b903376906a7c7ebb031c52a15800a74f1672a0ccb64669b3aa5a0192c90dbb68bfb9b5171b113ff1139a9477d04855350a1c66f2481e13bf88d9958269f3eadf53b5f9208e230f18cfce2ca6a5d83bf99649a164738250bbc3086c4ade7ace126998336821aa4d40826074fcde43278b4fca73607219c36449065975cb33c1376109008b0e4a3bef0f2fb512af3adfdf65525dd27b87c419ac8c305449bdd779b6798674b232ec3e0874ba02c1f1ba83408e9565efd245428d9c4cd09a1bfd76cd91ab10a8084a55f50a4dd505d49fb2c4118cc2126189a42df299f98fef19dc32c70fe745443c1fb03b1f37a3cd43c2c8acb52ff3d42caa5dd893234e960000b21f4d03390987186dbb5410942d679353b0b62af509ebfef35ce2b9ee3bcb9f57c131c3746fc4f859db87921e3be14a9ac30fd8c5fb0aa2d1d8a75ebd969af66f69734ee83b4c19be45565e3115bf2a2a3182580ad1dcc171cc8021f330b7c7ee602c53ea013176d8e12f2e948c080e042c3c2f754d1ebf846b642b60055f8a456f0b5d4c40a12e9ceca6ab0391de3406888d5c84fdaf8c16a35adb2655c1a4a8a1223320a05acee2873d4bb65e9a12777e22ae7ac96c7b4e8e35208909d3528f97554e1d596a3b7f396464ca68f996f959289ba700d4dd8cec8aa14f7a21d53b1d752b1f8d61538e0434bbc75432313a68dfa21567a4afeee64a17a4f8285b2659ca1b3e7ff3d30ec6530e0cce0dd5b1ec86025ebedc6ce67814c37860950a558b574434f6c182598537628b8dc9f6880bac77cfa34f2593d03462901510297b2ffaf66124adcf560d774f93b75882d42e1124400b82de77c10574133631505ea0c2edd5898ce0ddc46ed8219b80ce398f2de39953b5dbd0da73f83c50f5c7c8b9445741b43e315918e23473b63b6aa6ab62547b5f002907316e0f9eed7031e900a91c7f94157f5b424900b3614e57ee4a0595b5715b1ed74fd11bc6857003aaaae64458c809efdcc38b1363b195231d02f7c768e0bdb342d8ae2f988ba05b9ffae536e6e2efe30d42fe3adc2e5a872799eff1b3e4a60de0be597d789ecee9aac1dc92d502a5ac24a8e90b085e7b68e9bbbfb9ed84c181705a96ed2a0945db675cfc2e0ba813d176334d1a971813591ce24d69a5bd9aee75f37fc651a569fbbd98f2f1bb0cc3ff60b208d72fd4d7d9d6305fedcb8ece0ba8e930c6e694b80ba122324b2dc723ef99ccd199a27ac9850115cbb8f6c1877f3dc07d5d14ed3ad78f6b53a1525e4b0eb7586c92341d9a8f8bd79209534b5610090076a0cb0eacabd31afa4b8fc879be6f5e90a0255e189a636c58b3ed5c55864cdc643d316b293db81a9eef97e7e834ff067e66a8ce937430e7d95c9176878d5a41eeeb19c23bdb9328604408090e5aa0e884b2c076c0a6e42d566a34966f0687681d25909dd303284acc10910db289941e0a0fdc12b14567cc6f575b427df33a59c87315dcb10bff3e09dc1358c041bad5be615623a03e348ff8a32edf86a0bd00d59d95b9ed4e76910e6df7071129f2a9ae461a84d6a3639d3b085960bcb1e6abc9accf572ffd32a04c9e6dbe62ddd2fcf83d95f36a69f7282491090a330968ae8f49fa37851f115859ffaeb743e105742208eadde3c3e33ce22245a183dedfebbbfda7454715bf86cef42d011bad1d81500a58239180d9e43e3a5612a6f07f74d2a4d757af773b25592e3c7a3d334abbb485d8b13962cce5fe37434cc2b90f73ffbab69d965b2e743f1b10d0a8e1a53d7562a1552ce287f57ddca40832168c0ff822a031a8aaa68d4ad6fe4915cb48d168d187def5c14e2edf8282ed2c89d8663ad1944c165bef4e11c81f64315ab6c56d2c24ab00cf0df70671bcd10c021a690556edf67f403919c6df861ec393e2bc3bb1cbef4015e76582c1519d14f1e84c2727e5e86e8065402f100afe0ce05ad0b6d20b4bc018b8f15a39232e40d33768e92247daced1c5f4562f391ddba93db5c926620d90a1015fc2ffbd49a5b8d4843a74ad54d9a15bd62e9e2f09a1e391e7c2ead17f1e1e461f739983fc0cc4964d48369f102f32a20c2f6c0279013fbc510e741ea0ddb08c06dd50efc4fa7af3c818c8721289c8ce1f8750968e5a7a117c0633d8512d2132c07d926767e0b2e21cdd41714e00fffc81400ca41dc7a2741daf1e81b9cc0c16ff41383353d062a7ac0e993cb01baddcec1e76696a212b9057cce29f28c14743c9aaa23ea6f28c9ba5b187ee608693f76d3b0e7acb2baceb9e1bc6cdad9d636e9083fa75f6244afb00e1cb4f9ff3695fb47614cf0327a90ff35b0339962dd54dd4978b5288f2473a2343ccafbc56bf56c2cd6d92e370faa8f5c94046e7190361be98850ec0bd99aa12535ee0505c073310ccb906ce72986283ca54f984f83d3e96de87feecba878e5a939242017d51bf92bde058e5d9dec08e8add290979265bc79d3976358369ee4b9a08aba3c0ee08e6068c0833a5ffee16d003a656d66d05b042ccf2196d3965cc7aae782067eca701b5ab938214fd343227356502cedae43abc961f4a0d471646c1877530300732702e7eb270871b1d5c32e64b7513e893da2361c32c24319f8f11837f3583efbb82e4bb72e78798c9110752dc1b420d89754adf17ade1b7bce3c1bcf7765743f1b96682438bc26d1c64d168aa446141973f36f801fb8d000f49c4f05050f21d245e9cb6ef84e2a80da74f6877af8b64b65c338a3e9ee68a64ae4cb736c528521c279d1fa3d153a056e5c31e4e2066436cb6d11d571bc05ae589abaf3d67045d7d6ea7e9850bcc1557452d9ede0219354219cce10f98b91047aab1d2b7f8db3f1bb1f7d756"}], 0x2008}}], 0x1, 0x0) [ 661.789257][T22092] device bond_slave_1 entered promiscuous mode [ 661.814074][T22099] loop3: detected capacity change from 0 to 140 [ 661.823711][T22100] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. 17:27:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8}, @cb_func], &(0x7f0000000080)='GPL\x00', 0x2, 0x91, &(0x7f00000000c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700008000000000000600000005"], 0x1c}}, 0x0) [ 661.857085][T22099] EXT4-fs (loop3): bad geometry: block count 271 exceeds size of device (70 blocks) [ 661.888849][T22100] 8021q: adding VLAN 0 to HW filter on device macvlan2 17:27:21 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, 0x0, 0x0) [ 662.042920][T22089] device bond0 left promiscuous mode [ 662.080234][T22089] device bond_slave_0 left promiscuous mode [ 662.092579][T22089] device bond_slave_1 left promiscuous mode 17:27:21 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x35) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x28, 0x10000f0, &(0x7f00000004c0)="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", 0x0, 0x17, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000000), &(0x7f0000000080)}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x10880) r4 = socket(0x1, 0x803, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003b00)={0x18, 0xa, &(0x7f0000000c40)=@raw=[@generic={0x5, 0x1, 0xf, 0x43c8, 0x16f}, @generic={0x6, 0x4, 0x3, 0x6554, 0x1}, @map_fd, @map_fd={0x18, 0xf}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003400)={0x5, 0x2, 0xfffffe01, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003440)=[0xffffffffffffffff]}, 0x80) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000003380)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/229, 0xe5}, {&(0x7f0000000dc0)=""/223, 0xdf}], 0x8}, 0x3ff}, {{&(0x7f0000000f40)=@tipc=@name, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/5, 0x5}], 0x1, &(0x7f0000001040)=""/65, 0x41}, 0x4a5b}, {{&(0x7f00000010c0)=@ieee802154, 0x80, &(0x7f0000001180)=[{&(0x7f00000003c0)=""/65, 0x41}], 0x1, &(0x7f00000011c0)=""/10, 0xa}, 0xfffff800}, {{&(0x7f0000001200)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/4096, 0x1000}, 0x1f}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000003540)=""/51, 0x33}], 0x2, &(0x7f00000049c0)=""/4105, 0x1009}, 0x80}], 0x5, 0x10020, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003600)=ANY=[@ANYBLOB="7800000024000b0f00000000000000000000003f4316a89f887654612085674d00b22074b2f2adbaaba53ac69d54d389cb77e525f5e5d136e1e5ab228e89ebd45cabbbcd62b6f691cbf0ae89d2d71ea97a57af0cb494dfcfea1ac5597cf565005d8ac942a2484d63b1837c04325d49b0ff45a46f0e0d9b107a200d178c1309bf815dcbe2dd37df70300bfe83a4fb277ff0bdf4e0a7a12759d9d01edb8d05a8d18e3a685a7fde043ced21928d80563205c7", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004c000200000000000000000000000000000000000000000000000000000000000000000000003f8000"/96], 0x78}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000003480)="f2e25a04018d03da27485adffed203106da6c8e60ad0554caba8ea40a459440147791ad1fb586b852220acf4e39b94f869353ddc7815bade5d4308590784a6bb1ba29f3875f8a1fbac7b03ec6db41ae0bba844f053e93e140c0655f67410dc22c5f65083795fbc84a1097ffa365393ff610e9255a9633f23c8c89d0203b7883ceff32e2a958609046b4c108ef3c8dae0f6d165626735c8d3f401b3", 0x9b, 0x20000010, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @private2}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7d, r2}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/271], 0x28) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getrule={0x14, 0x22, 0x902, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000039c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222802001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08000f000600000008002800ea4000001406edcdab6574683100000000000000000000000a000100aaaaaaaaaabb00006800348014003500766c616e300000000000000000000000140035007369743000000000000013000000020014003500626f6e644f736c6176655f33000000001400350076657468305f746f5f627269646765001400350076657468305f766c616e0000000000001a8e083565aa830e5af8dda2cfe3b3c687bddc4306d6739afa4c82b92a39ca0bc35e33e3d00ec62ecb37b2f25a591e8ad7fe76003134b76473598416bdfa69c9309f5e62d5bab434b80c78edaaa8c79c"], 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) 17:27:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000004100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) 17:27:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept(r0, 0x0, 0x0) 17:27:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x35) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x28, 0x10000f0, &(0x7f00000004c0)="b95b03b700080000009e40f089061fff060000002000003a77fbac141423e0000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x17, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000000000), &(0x7f0000000080)}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x10880) r4 = socket(0x1, 0x803, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003b00)={0x18, 0xa, &(0x7f0000000c40)=@raw=[@generic={0x5, 0x1, 0xf, 0x43c8, 0x16f}, @generic={0x6, 0x4, 0x3, 0x6554, 0x1}, @map_fd, @map_fd={0x18, 0xf}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003400)={0x5, 0x2, 0xfffffe01, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003440)=[0xffffffffffffffff]}, 0x80) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000003380)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/229, 0xe5}, {&(0x7f0000000dc0)=""/223, 0xdf}], 0x8}, 0x3ff}, {{&(0x7f0000000f40)=@tipc=@name, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/5, 0x5}], 0x1, &(0x7f0000001040)=""/65, 0x41}, 0x4a5b}, {{&(0x7f00000010c0)=@ieee802154, 0x80, &(0x7f0000001180)=[{&(0x7f00000003c0)=""/65, 0x41}], 0x1, &(0x7f00000011c0)=""/10, 0xa}, 0xfffff800}, {{&(0x7f0000001200)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/4096, 0x1000}, 0x1f}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000003540)=""/51, 0x33}], 0x2, &(0x7f00000049c0)=""/4105, 0x1009}, 0x80}], 0x5, 0x10020, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003600)=ANY=[@ANYBLOB="7800000024000b0f00000000000000000000003f4316a89f887654612085674d00b22074b2f2adbaaba53ac69d54d389cb77e525f5e5d136e1e5ab228e89ebd45cabbbcd62b6f691cbf0ae89d2d71ea97a57af0cb494dfcfea1ac5597cf565005d8ac942a2484d63b1837c04325d49b0ff45a46f0e0d9b107a200d178c1309bf815dcbe2dd37df70300bfe83a4fb277ff0bdf4e0a7a12759d9d01edb8d05a8d18e3a685a7fde043ced21928d80563205c7", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004c000200000000000000000000000000000000000000000000000000000000000000000000003f8000"/96], 0x78}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000003480)="f2e25a04018d03da27485adffed203106da6c8e60ad0554caba8ea40a459440147791ad1fb586b852220acf4e39b94f869353ddc7815bade5d4308590784a6bb1ba29f3875f8a1fbac7b03ec6db41ae0bba844f053e93e140c0655f67410dc22c5f65083795fbc84a1097ffa365393ff610e9255a9633f23c8c89d0203b7883ceff32e2a958609046b4c108ef3c8dae0f6d165626735c8d3f401b3", 0x9b, 0x20000010, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @private2}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7d, r2}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/271], 0x28) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getrule={0x14, 0x22, 0x902, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000039c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222802001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08000f000600000008002800ea4000001406edcdab6574683100000000000000000000000a000100aaaaaaaaaabb00006800348014003500766c616e300000000000000000000000140035007369743000000000000013000000020014003500626f6e644f736c6176655f33000000001400350076657468305f746f5f627269646765001400350076657468305f766c616e0000000000001a8e083565aa830e5af8dda2cfe3b3c687bddc4306d6739afa4c82b92a39ca0bc35e33e3d00ec62ecb37b2f25a591e8ad7fe76003134b76473598416bdfa69c9309f5e62d5bab434b80c78edaaa8c79c"], 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) 17:27:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'pim6reg0\x00'}) [ 662.181346][T22130] loop3: detected capacity change from 0 to 140 [ 662.204830][T22130] EXT4-fs (loop3): bad geometry: block count 272 exceeds size of device (70 blocks) 17:27:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 662.244143][T22135] device bond0 entered promiscuous mode [ 662.265670][T22135] device bond_slave_0 entered promiscuous mode 17:27:21 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000020100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 662.317091][T22135] device bond_slave_1 entered promiscuous mode [ 662.327985][T22138] device bond0 entered promiscuous mode [ 662.353278][T22138] device bond_slave_0 entered promiscuous mode 17:27:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 662.366265][T22138] device bond_slave_1 entered promiscuous mode [ 662.406589][T22135] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. [ 662.436791][T22155] loop3: detected capacity change from 0 to 140 17:27:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 662.459537][T22135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.484509][T22155] EXT4-fs (loop3): bad geometry: block count 272 exceeds size of device (70 blocks) [ 662.536248][T22138] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.586192][T22138] 8021q: adding VLAN 0 to HW filter on device macvlan2 17:27:22 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 17:27:22 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000110100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:22 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000440)) [ 662.647995][T22133] device bond0 left promiscuous mode [ 662.658730][T22133] device bond_slave_0 left promiscuous mode [ 662.672365][T22133] device bond_slave_1 left promiscuous mode 17:27:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x318, 0xffffffff, 0xc8, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'ipvlan1\x00', 'geneve1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) [ 662.781891][T22169] loop3: detected capacity change from 0 to 140 [ 662.805763][ T3813] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.823723][T22134] device bond0 left promiscuous mode [ 662.846508][ T3813] Buffer I/O error on dev loop3, logical block 0, async page read [ 662.883722][T22134] device bond_slave_0 left promiscuous mode 17:27:22 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) [ 662.902162][ T3813] loop3: unable to read partition table [ 662.905342][T22134] device bond_slave_1 left promiscuous mode [ 662.939110][T22169] EXT4-fs (loop3): bad geometry: block count 273 exceeds size of device (70 blocks) 17:27:22 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 17:27:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) 17:27:22 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000120100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 17:27:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 663.111739][T22185] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 663.121979][T22184] loop3: detected capacity change from 0 to 140 [ 663.185574][T22184] EXT4-fs (loop3): bad geometry: block count 274 exceeds size of device (70 blocks) [ 663.277994][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 663.294950][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 663.312566][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:22 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8915, &(0x7f0000000040)) 17:27:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast1}) [ 663.321941][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 663.330146][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 663.340171][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:23 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000086120100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xd, 0x6, 0x201}, 0x14}}, 0x0) 17:27:23 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8910, 0x0) 17:27:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000000c0)=0x7, 0x4) 17:27:23 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x21}, 0x14) 17:27:23 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 17:27:23 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) [ 663.601020][T22205] loop3: detected capacity change from 0 to 140 [ 663.637811][T22205] EXT4-fs (loop3): bad geometry: block count 274 exceeds size of device (70 blocks) 17:27:23 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 663.774559][T22219] loop3: detected capacity change from 0 to 140 [ 663.785868][T22219] EXT4-fs (loop3): bad geometry: block count 276 exceeds size of device (70 blocks) [ 663.852285][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 663.869621][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 663.877827][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 663.887220][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 663.895198][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 663.904995][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:23 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:23 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) 17:27:23 executing program 1: openat$drirender128(0xffffffffffffff9c, 0x0, 0x340, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 17:27:23 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000001f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:23 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x9}, 0x0, 0x0, &(0x7f00000001c0)) [ 664.261889][T22228] loop3: detected capacity change from 0 to 140 [ 664.312263][T22228] EXT4-fs (loop3): bad geometry: block count 287 exceeds size of device (70 blocks) 17:27:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:23 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001cc0), 0x1c001, 0x0) 17:27:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 17:27:23 executing program 5: syz_open_dev$vcsu(&(0x7f0000000480), 0xffffffffffffffff, 0x0) 17:27:23 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:24 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001900)) [ 664.524565][T22244] loop3: detected capacity change from 0 to 140 [ 664.571093][T22244] EXT4-fs (loop3): bad geometry: block count 288 exceeds size of device (70 blocks) 17:27:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:24 executing program 1: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 17:27:24 executing program 5: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) 17:27:24 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 17:27:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000010200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:24 executing program 5: syz_open_dev$vcsu(&(0x7f0000000200), 0xffffffffffffff23, 0x10040) [ 665.155981][T22260] loop3: detected capacity change from 0 to 140 [ 665.188906][T22260] EXT4-fs (loop3): bad geometry: block count 288 exceeds size of device (70 blocks) 17:27:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@mcast1}) 17:27:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x54005) 17:27:24 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) socket(0x0, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 17:27:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000260100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:24 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x400, 0x6, 0x5}) [ 665.422227][T22274] loop3: detected capacity change from 0 to 140 [ 665.455737][T22274] EXT4-fs (loop3): bad geometry: block count 294 exceeds size of device (70 blocks) 17:27:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}}, &(0x7f0000000200)=""/145, 0x2e, 0x91, 0x1}, 0x20) 17:27:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000f0000000f000000007"], &(0x7f0000000200)=""/251, 0x10f, 0xfb, 0x1}, 0x20) 17:27:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1, 0x1, 0x3, 0x6, 0x94}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 17:27:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000380100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x15, 0x0, 0x0, 0x0, 0x94}, 0x48) [ 666.093779][T22293] loop3: detected capacity change from 0 to 140 [ 666.128887][T22293] EXT4-fs (loop3): bad geometry: block count 312 exceeds size of device (70 blocks) 17:27:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1b, 0x1}, 0x48) 17:27:25 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan0\x00'}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1, 0x5, 0x20003, 0x6, 0x94, 0x1}, 0x48) 17:27:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "5f00ab00"}) 17:27:25 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000003f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:25 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) creat(0x0, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) [ 666.339769][T22310] loop3: detected capacity change from 0 to 140 [ 666.384150][T22310] EXT4-fs (loop3): bad geometry: block count 319 exceeds size of device (70 blocks) 17:27:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "5f00ab00"}) 17:27:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0xf, 0x7, 0x8, 0x17ef, 0x720c, 0x6adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0}) 17:27:26 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000400100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:26 executing program 1: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000026c0)=[{0x0}], 0x1, &(0x7f00000029c0)=[{&(0x7f0000002700)=""/46, 0x2e}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/136, 0x88}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/232, 0xe8}], 0x7, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/151, 0x97}, {&(0x7f00000017c0)=""/31, 0x1f}, {&(0x7f0000001800)=""/136, 0x88}], 0x6, 0x0) 17:27:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "5f00ab00"}) [ 666.985466][T22324] loop3: detected capacity change from 0 to 140 [ 667.008696][T22324] EXT4-fs (loop3): bad geometry: block count 320 exceeds size of device (70 blocks) 17:27:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "5f00ab00"}) 17:27:26 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000460100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "5f00ab00"}) [ 667.217823][T22339] loop3: detected capacity change from 0 to 140 [ 667.247162][ T3692] usb 6-1: new high-speed USB device number 8 using dummy_hcd 17:27:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1, 0x1, 0x3, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x16, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 17:27:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001bc0)={'tunl0\x00', &(0x7f0000001ac0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) [ 667.263302][T22339] EXT4-fs (loop3): bad geometry: block count 326 exceeds size of device (70 blocks) [ 667.497164][ T3692] usb 6-1: Using ep0 maxpacket: 8 17:27:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 17:27:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001280)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f00000000c0)="454fd4076aeed3f08dbc21601345d9592e59ef6d91842db2", 0x18}], 0x1}}], 0x1, 0x0) [ 667.777028][ T3692] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=6a.df [ 667.786345][ T3692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.795302][ T3692] usb 6-1: Product: syz [ 667.799736][ T3692] usb 6-1: Manufacturer: syz [ 667.804680][ T3692] usb 6-1: SerialNumber: syz [ 667.812844][ T3692] usb 6-1: config 0 descriptor?? [ 667.867165][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 668.077082][ T3692] r8152 6-1:0.0: Unknown version 0x0000 [ 668.287386][ T3698] usb 6-1: USB disconnect, device number 8 17:27:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0xf, 0x7, 0x8, 0x17ef, 0x720c, 0x6adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0}) 17:27:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000480100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='tunL0\x00'/15, @ANYBLOB="0010"]}) 17:27:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @empty, 0x0, 0x300}}) 17:27:28 executing program 2: request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0) 17:27:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:28 executing program 0: ustat(0x8, 0x0) 17:27:28 executing program 1: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x44000, &(0x7f00000005c0)) 17:27:28 executing program 2: syz_mount_image$vxfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0}], 0x0, &(0x7f00000006c0)={[{'/dev/dri/card#\x00,\xedz\xcc\xa0\xdd\x19\xa3@\x99\xfdf\x19\x99\xc4K\x99l'}, {'/'}], [{@context={'context', 0x3d, 'user_u'}}]}) [ 668.834910][T22364] loop3: detected capacity change from 0 to 140 [ 668.888492][T22364] EXT4-fs (loop3): bad geometry: block count 328 exceeds size of device (70 blocks) 17:27:28 executing program 1: syz_clone(0x1000100, 0x0, 0x0, 0x0, 0x0, 0x0) 17:27:28 executing program 0: socketpair(0xa, 0x1, 0x0, &(0x7f0000000500)) 17:27:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000004c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 669.019587][T22374] vxfs: WRONG superblock magic 00000000 at 1 [ 669.040230][T22374] vxfs: WRONG superblock magic 00000000 at 8 [ 669.067745][T22374] vxfs: can't find superblock. [ 669.100165][T22383] loop3: detected capacity change from 0 to 140 [ 669.117084][ T3692] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 669.138993][T22383] EXT4-fs (loop3): bad geometry: block count 332 exceeds size of device (70 blocks) [ 669.367017][ T3692] usb 6-1: Using ep0 maxpacket: 8 [ 669.647119][ T3692] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=6a.df [ 669.656182][ T3692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.668845][ T3692] usb 6-1: Product: syz [ 669.673029][ T3692] usb 6-1: Manufacturer: syz [ 669.679924][ T3692] usb 6-1: SerialNumber: syz [ 669.693103][ T3692] usb 6-1: config 0 descriptor?? [ 669.957087][ T3692] r8152 6-1:0.0: Unknown version 0x0000 [ 670.173234][ T6] usb 6-1: USB disconnect, device number 9 17:27:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0xf, 0x7, 0x8, 0x17ef, 0x720c, 0x6adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0}) 17:27:30 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0xfffffffffffffff7) 17:27:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004540), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17:27:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:30 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000550100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:30 executing program 2: io_uring_setup(0x2f1, &(0x7f0000000200)) 17:27:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f00000046c0)={0x78, 0x2, r1}, 0x78) 17:27:30 executing program 0: syz_mount_image$vxfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x200}], 0x0, &(0x7f00000006c0)) [ 670.711220][T22393] loop3: detected capacity change from 0 to 140 17:27:30 executing program 1: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="ade10fc1e74633c9856d7e863c4f", 0xe}], 0x281010, &(0x7f0000000580)={[{@discard}, {@showmeta}]}) [ 670.783711][T22393] EXT4-fs (loop3): bad geometry: block count 341 exceeds size of device (70 blocks) 17:27:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x622600, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0) [ 670.835091][T22402] loop0: detected capacity change from 0 to 2 17:27:30 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000600100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:30 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003bc0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) [ 670.878957][T22402] Dev loop0: unable to read RDB block 2 [ 670.890375][T22402] loop0: unable to read partition table [ 670.901922][T22402] loop0: partition table beyond EOD, truncated [ 670.922369][T22402] vxfs: unable to read disk superblock at 1 [ 670.959701][T22402] vxfs: unable to read disk superblock at 8 [ 670.972402][T22402] vxfs: can't find superblock. [ 670.978264][T22412] loop3: detected capacity change from 0 to 140 [ 670.999612][T22412] EXT4-fs (loop3): bad geometry: block count 352 exceeds size of device (70 blocks) [ 671.087056][ T3698] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 671.376916][ T3698] usb 6-1: Using ep0 maxpacket: 8 [ 671.697094][ T3698] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=6a.df [ 671.706449][ T3698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.715157][ T3698] usb 6-1: Product: syz [ 671.719452][ T3698] usb 6-1: Manufacturer: syz [ 671.724203][ T3698] usb 6-1: SerialNumber: syz [ 671.733366][ T3698] usb 6-1: config 0 descriptor?? [ 671.997024][ T3698] r8152 6-1:0.0: Unknown version 0x0000 [ 672.216177][ T3698] usb 6-1: USB disconnect, device number 10 17:27:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0xf, 0x7, 0x8, 0x17ef, 0x720c, 0x6adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0}) 17:27:32 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, 0x0, 0x0) 17:27:32 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000003b80)='cgroup.threads\x00', 0x2, 0x0) 17:27:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:32 executing program 0: fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) 17:27:32 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000680100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:32 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 17:27:32 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), 0x20) getcwd(&(0x7f0000000000)=""/9, 0x9) 17:27:32 executing program 1: r0 = socket(0x2, 0x1, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x20) 17:27:32 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c6a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 672.756833][T22421] loop3: detected capacity change from 0 to 140 [ 672.790191][T22421] EXT4-fs (loop3): bad geometry: block count 360 exceeds size of device (70 blocks) 17:27:32 executing program 0: syz_io_uring_setup(0xfdb, &(0x7f0000000580)={0x0, 0x0, 0x20}, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000640)) 17:27:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc4120a363529fdbc, &(0x7f0000000d40)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 672.925491][T22436] loop3: detected capacity change from 0 to 140 [ 672.941704][ T2967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.960830][ T2967] Buffer I/O error on dev loop3, logical block 0, async page read [ 672.993347][ T2967] loop3: unable to read partition table [ 673.008288][T22436] EXT4-fs (loop3): bad geometry: block count 362 exceeds size of device (70 blocks) [ 673.070990][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.099980][T19068] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 673.109355][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 673.128029][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.141163][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 673.149596][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.159400][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read [ 673.366943][T19068] usb 6-1: Using ep0 maxpacket: 8 [ 673.658383][T19068] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=6a.df [ 673.667563][T19068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.675551][T19068] usb 6-1: Product: syz [ 673.679864][T19068] usb 6-1: Manufacturer: syz [ 673.684548][T19068] usb 6-1: SerialNumber: syz [ 673.691146][T19068] usb 6-1: config 0 descriptor?? [ 673.937004][T19068] r8152 6-1:0.0: Unknown version 0x0000 [ 674.153656][T19068] usb 6-1: USB disconnect, device number 11 17:27:34 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:27:34 executing program 1: mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:27:34 executing program 2: socket$inet(0x2, 0x1, 0x40) 17:27:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) 17:27:34 executing program 1: r0 = socket(0x2, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, 0x0, 0x0) [ 674.713398][T22449] loop3: detected capacity change from 0 to 140 17:27:34 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:27:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', 0x0}) [ 674.759161][T22449] EXT4-fs (loop3): bad geometry: block count 364 exceeds size of device (70 blocks) 17:27:34 executing program 1: io_setup(0x8001, &(0x7f0000000000)) io_setup(0xffff, &(0x7f0000000040)) 17:27:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000740100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@ldst, @exit, @alu, @generic, @initr0, @ldst, @call]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x59, &(0x7f00000000c0)=""/89, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 674.982083][T22469] loop3: detected capacity change from 0 to 140 [ 675.002935][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x70, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_NAME={0x5a, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @private0}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x0) 17:27:34 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) open(&(0x7f0000000080)='./bus\x00', 0x8e6a01, 0x0) [ 675.026268][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 675.096742][ T3830] loop3: unable to read partition table [ 675.109557][T22469] EXT4-fs (loop3): bad geometry: block count 372 exceeds size of device (70 blocks) 17:27:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:34 executing program 0: memfd_create(&(0x7f0000000040)='/proc/thread-self\x00', 0x4) 17:27:34 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 17:27:34 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) open(&(0x7f0000000080)='./bus\x00', 0x8e6a01, 0x0) 17:27:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) [ 675.280181][T22486] loop3: detected capacity change from 0 to 140 [ 675.305319][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) [ 675.331956][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 675.371219][ T3830] loop3: unable to read partition table [ 675.393426][T22486] EXT4-fs (loop3): bad geometry: block count 378 exceeds size of device (70 blocks) 17:27:34 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) 17:27:34 executing program 5: r0 = socket(0x1, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 17:27:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c150000", @ANYRES16=r1, @ANYBLOB="a3ca2bbd7000fedbdf250900000000010480040007801c000780080001000c00000008000300ffffffff08000400ec1200001300010062726f6164636173742d6c696e6b00002c000780080003000200000008000300faffffff080004000101000008000300000000000800030000000000240007"], 0x151c}}, 0x0) 17:27:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000840100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:35 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) open(&(0x7f0000000080)='./bus\x00', 0x8e6a01, 0x0) 17:27:35 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "d69da4eb1e2b37d1c68da7a23904c76dc88336cb67017e7accba4b8d0533448fbe7bf6b71fb3fbc21d06a160e8189ffb67aedc6e32df43e738e8bd45e912212e"}, 0x48, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, r1) 17:27:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000e140)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)="193508401318ec914a01258a808c49680564eefeb7c8da26f747cd7aa48d61432182c6b5e713095d4308dcc35dc45eddaf5e5d588916de940f53a726d11c16d0375a24dd31c03c0589ff67aa7bd962f9f2af9dc55838793e581638d9e9c12f1eeeee2b", 0x63}, {&(0x7f0000000300)="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", 0x2de}], 0x2}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)}}], 0x2, 0x40010060, 0x0) [ 675.538491][T22504] loop3: detected capacity change from 0 to 140 [ 675.579914][T22504] EXT4-fs (loop3): bad geometry: block count 388 exceeds size of device (70 blocks) [ 675.586345][T22509] netlink: 5128 bytes leftover after parsing attributes in process `syz-executor.1'. 17:27:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:35 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f0000000280)={0x0, r0/1000+60000}) 17:27:35 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012860100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:35 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x6}, 0x10) 17:27:35 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) open(&(0x7f0000000080)='./bus\x00', 0x8e6a01, 0x0) [ 675.669748][T22509] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 17:27:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x400020c1) [ 675.740510][T22509] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 675.747940][T22520] loop3: detected capacity change from 0 to 140 [ 675.779691][T22520] EXT4-fs (loop3): bad geometry: block count 390 exceeds size of device (70 blocks) 17:27:35 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x29, r0) 17:27:35 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000008b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:35 executing program 1: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "df7ec8bdebebfe7252a187fefbd8501070fb4801fee74be29ee643982557bbfe36176244fffef52f0625b178b587cf5b376adcdc0d8573db9908e4319484c9dd"}, 0x20000108, 0xffffffffffffffff) 17:27:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=@ipv6_getnetconf={0x14, 0x19, 0x1}, 0x14}}, 0x0) 17:27:35 executing program 2: socket$inet6(0x64, 0x0, 0x0) 17:27:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "e972b572f32b059404acfcd96d02538448bd7942a22a00f0decb5e800df6c247156a582f88c3f3328a6fd0a2ffb1130aca42581f3930c85d0569f3cd36a96450"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) [ 676.026398][T22536] loop3: detected capacity change from 0 to 140 [ 676.044168][T22536] EXT4-fs (loop3): bad geometry: block count 395 exceeds size of device (70 blocks) 17:27:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 17:27:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=@ipv4_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 17:27:36 executing program 0: add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 17:27:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x16, 0x607}, 0x1c}}, 0x0) 17:27:36 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000008c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 676.582041][T22550] loop3: detected capacity change from 0 to 140 17:27:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000021000100000000000000000002"], 0x34}}, 0x0) 17:27:36 executing program 0: io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r0, 0x41, &(0x7f0000000240)) 17:27:36 executing program 5: syz_emit_ethernet(0x7bf, &(0x7f0000000000)={@random="84d65a7376a4", @empty, @val, {@ipv6}}, 0x0) 17:27:36 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 676.665125][T22550] EXT4-fs (loop3): bad geometry: block count 396 exceeds size of device (70 blocks) 17:27:36 executing program 5: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) 17:27:36 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x44c382, 0x0) [ 676.715966][T22562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:27:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000900100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:37 executing program 0: memfd_create(&(0x7f0000000000)=')\x00', 0x3) 17:27:37 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs2/custom1\x00', 0x0, 0x0) 17:27:37 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) 17:27:37 executing program 2: semget$private(0x0, 0x3, 0x40) 17:27:37 executing program 2: r0 = epoll_create1(0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) 17:27:37 executing program 5: semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000200)=""/46) [ 677.517641][T22573] loop3: detected capacity change from 0 to 140 17:27:37 executing program 1: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/89) 17:27:37 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000, 0x0) [ 677.588375][T22573] EXT4-fs (loop3): bad geometry: block count 400 exceeds size of device (70 blocks) 17:27:37 executing program 5: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000000c0), 0xfffffe7b) 17:27:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b960100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 677.770572][T22596] loop3: detected capacity change from 0 to 140 [ 677.804957][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 677.820676][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 677.838555][ T3830] loop3: unable to read partition table [ 677.853915][T22596] EXT4-fs (loop3): bad geometry: block count 406 exceeds size of device (70 blocks) 17:27:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 17:27:37 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) 17:27:37 executing program 5: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/110) 17:27:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 17:27:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000fffe0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 17:27:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) [ 678.511641][T22611] loop3: detected capacity change from 0 to 140 [ 678.542514][T22611] EXT4-fs (loop3): bad geometry: block count 510 exceeds size of device (70 blocks) 17:27:38 executing program 5: syz_open_dev$evdev(&(0x7f0000002940), 0x0, 0x300) 17:27:38 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000180)={@dev, @rand_addr=0x64010101, 0x0, "1609571032f7ac9ceb9b8259b5c6c2140f3792cf3fe11f772ec63ef446489c3d"}, 0x3c) 17:27:38 executing program 1: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 17:27:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:38 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f0000000540)=[{0x0, 0x0, 0x1}, {&(0x7f0000000400), 0x0, 0x200}]) 17:27:38 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000ff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 17:27:38 executing program 5: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x63) 17:27:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05"], 0x28}}, 0x0) 17:27:38 executing program 2: syz_open_dev$vcsa(&(0x7f0000000080), 0x4ed, 0x4000) 17:27:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback, {[@generic={0x0, 0x2}, @lsrr={0x83, 0x3}]}}}}}) 17:27:38 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x1, &(0x7f0000001b80)=[{0x0}], 0x0, &(0x7f0000001c80)={[{@fat=@codepage={'codepage', 0x3d, '850'}}, {@dots}, {@fat=@debug}, {@fat=@flush}], [{@dont_appraise}]}) [ 679.421038][T22638] loop0: detected capacity change from 0 to 2 [ 679.424211][T22636] loop3: detected capacity change from 0 to 140 17:27:38 executing program 2: bpf$MAP_CREATE(0xf, &(0x7f0000000600)=@bloom_filter, 0x48) [ 679.485106][T22638] Dev loop0: unable to read RDB block 2 [ 679.492629][T22636] EXT4-fs (loop3): bad geometry: block count 511 exceeds size of device (70 blocks) [ 679.505063][T22638] loop0: unable to read partition table 17:27:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) 17:27:39 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000fff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 679.543053][T22638] loop0: partition table beyond EOD, truncated [ 679.579598][T22638] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 679.596483][T22647] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 679.654286][T22654] loop3: detected capacity change from 0 to 140 [ 679.696094][T22654] EXT4-fs (loop3): bad geometry: block count 511 exceeds size of device (70 blocks) [ 680.080373][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.112780][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 680.148632][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.164892][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 680.173344][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.185710][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2000070, 0x0) fcntl$setpipe(r2, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 17:27:39 executing program 2: socketpair(0x23, 0x0, 0xb1cc, &(0x7f00000000c0)) 17:27:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17:27:39 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0xffff0001, 0x0) 17:27:39 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000feff0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:39 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}) 17:27:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, r1}}, 0x30) 17:27:39 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0xc0045401, 0x0) [ 680.321325][T22665] loop3: detected capacity change from 0 to 140 17:27:39 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fdccbe717145d7c3236b3166c9dcdc53d8efea50dc6b5b4d23c6a8bda96abe5f85e15afc38e84654b9c94f28932af53a993dccfa029204904d77d02a13077a"}, 0x60) [ 680.415513][T22665] EXT4-fs (loop3): bad geometry: block count 511 exceeds size of device (70 blocks) 17:27:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 17:27:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 17:27:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0) 17:27:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:40 executing program 0: timer_create(0x7, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000200)) 17:27:40 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:40 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000100)) 17:27:40 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="85ab432e356a238583ec0eb7b5729f6de9a7550260eb4d7fc1bc907c8edd3df34e07bdbc9818c47d26704d18", &(0x7f00000001c0)=@udp6}, 0x50) 17:27:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x6, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"eb0ab5589a0893d4e47d5dbf3290895a"}}}}, 0x90) 17:27:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:27:40 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101281, 0x0) 17:27:40 executing program 5: semget$private(0x0, 0x3, 0x3c2) 17:27:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) [ 681.248503][T22692] loop3: detected capacity change from 0 to 140 [ 681.286090][T22692] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (70 blocks) 17:27:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, &(0x7f0000000380)=""/223, 0x32, 0xdf, 0x1}, 0x20) 17:27:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'memory'}]}, 0x8) 17:27:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:41 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x8}]}}, &(0x7f00000014c0)=""/248, 0x32, 0xf8, 0x1}, 0x20) 17:27:41 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101281, 0x0) 17:27:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000001000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) close(r1) 17:27:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x48) 17:27:41 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 17:27:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, 0x0) 17:27:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x25, 0x0, 0x0) [ 682.182003][T22723] loop3: detected capacity change from 0 to 140 17:27:41 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101281, 0x0) [ 682.233692][T22723] EXT4-fs (loop3): bad geometry: block count 65536 exceeds size of device (70 blocks) 17:27:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000101000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:41 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101281, 0x0) [ 682.417225][T22740] loop3: detected capacity change from 0 to 140 [ 682.455370][T22740] EXT4-fs (loop3): bad geometry: block count 65792 exceeds size of device (70 blocks) [ 682.816643][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.825968][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 682.835310][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.850432][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 682.858835][ T3830] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.868551][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2000070, 0x0) fcntl$setpipe(r3, 0x408, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:27:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000040)={@broadcast, @private}, 0xc) 17:27:42 executing program 2: sigaltstack(&(0x7f0000000080)={&(0x7f0000000000)=""/58, 0x2, 0x3a}, 0x0) 17:27:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6, 0x4}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x37c4, r0}, 0x38) 17:27:42 executing program 1: r0 = syz_clone(0x40000000, &(0x7f0000001380)="ac992e5281e0bf48e174c6dd9e37641c274ca037e0c9213c48", 0x19, &(0x7f00000013c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000001480)='ns/pid_for_children\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001540)) openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001500)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 17:27:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000102000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:42 executing program 5: bpf$BPF_GET_PROG_INFO(0x14, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 17:27:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6, 0x1a00}, 0x48) 17:27:42 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) [ 683.088697][T22746] loop3: detected capacity change from 0 to 140 [ 683.160216][T22746] EXT4-fs (loop3): bad geometry: block count 131328 exceeds size of device (70 blocks) 17:27:42 executing program 5: syz_clone(0x5e000000, &(0x7f0000000640)="8a8d06587358c5d386f4546c6d64332cde3227857a2a1118", 0x18, 0x0, 0x0, 0x0) 17:27:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x6, 0x0, 0x0) 17:27:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000003000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 683.530143][T22774] loop3: detected capacity change from 0 to 140 [ 683.627193][T22774] EXT4-fs (loop3): bad geometry: block count 196608 exceeds size of device (70 blocks) 17:27:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x5, 0x0, 0x0) 17:27:43 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "6c381c", 0x18, 0x6, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x31}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 17:27:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x12, &(0x7f0000000040)={@empty=0x1000000, @multicast1}, 0xc) 17:27:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000004000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000100)=[@enter_looper, @register_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000180)="f67fb08a"}) 17:27:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x61}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 17:27:43 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xd, 0x0, 0x3) 17:27:43 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) [ 684.034206][T22782] loop3: detected capacity change from 0 to 140 17:27:43 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x0, 0x0, @generic}) 17:27:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 17:27:43 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 684.127217][T22782] EXT4-fs (loop3): bad geometry: block count 262144 exceeds size of device (70 blocks) [ 684.156500][T22787] device team_slave_0 entered promiscuous mode [ 684.163151][T22787] device team_slave_1 entered promiscuous mode 17:27:43 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)) 17:27:43 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xe0}) 17:27:43 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000208000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000040)={@empty=0x1000000, @multicast1}, 0xc) 17:27:43 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000040)) 17:27:43 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d03, &(0x7f0000000080)) 17:27:43 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x6, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 17:27:43 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x1e, 0x0, &(0x7f00000000c0)) [ 684.335382][T22804] loop3: detected capacity change from 0 to 140 [ 684.351584][ T2967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:43 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 17:27:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f0000000000)={'gre0\x00', 0x0}) 17:27:43 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 684.386286][ T2967] Buffer I/O error on dev loop3, logical block 0, async page read 17:27:43 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 17:27:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x12, 0x0, 0x0) [ 684.444816][ T2967] loop3: unable to read partition table [ 684.459860][T22804] EXT4-fs (loop3): bad geometry: block count 524800 exceeds size of device (70 blocks) 17:27:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x82, 0x0, 0x0) [ 684.498882][T22819] QAT: Invalid ioctl -1060596699 17:27:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000000a000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:44 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 17:27:44 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x4, 0x0, 0x0, 0x0, @generic}) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:27:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x6, &(0x7f0000000040)={@empty=0x1000000, @multicast1}, 0xc) 17:27:44 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x7, 0x0, &(0x7f00000000c0)) [ 684.561282][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:44 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000200)=""/181, &(0x7f0000000040)=0xb5) [ 684.606938][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 684.643237][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 684.651761][T22833] QAT: Invalid ioctl -1060596699 17:27:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x77, 0x0, 0x0) 17:27:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, 0x0) 17:27:44 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x11e, 0x63, 0x0, &(0x7f00000000c0)) 17:27:44 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0xa, 0x0, &(0x7f00000000c0)) [ 684.695059][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 684.704519][T22838] loop3: detected capacity change from 0 to 140 [ 684.752062][T22838] EXT4-fs (loop3): bad geometry: block count 524800 exceeds size of device (70 blocks) 17:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032dbd7000fddbdf2545"], 0x60}}, 0x0) 17:27:44 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)) 17:27:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000046000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, 0x0) 17:27:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) read$usbfs(r0, 0x0, 0x0) 17:27:44 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xfffffffffffffd9c) 17:27:44 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 17:27:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000040)={@empty=0x1000000, @multicast1}, 0xc) [ 684.918823][T22852] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.933734][T22856] loop3: detected capacity change from 0 to 140 17:27:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 17:27:44 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 684.984797][T22856] EXT4-fs (loop3): bad geometry: block count 4587520 exceeds size of device (70 blocks) 17:27:44 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 17:27:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) 17:27:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000063000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'memory'}]}, 0xfdef) 17:27:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r1, 0x0, 0x8) 17:27:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000380)='+', 0x0}, 0x20) 17:27:44 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f00000014c0)=""/248, 0x27, 0xf8, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 17:27:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r1, 0x0, 0x37fe0) 17:27:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f0000000140)=""/145}, 0x20) [ 685.179738][T22874] loop3: detected capacity change from 0 to 140 17:27:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6000000}, 0x48) 17:27:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:27:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x11, 0x4, 0x4, 0x4e5}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r0, &(0x7f0000000500)="bf0243"}, 0x20) 17:27:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'memory'}]}, 0xe) 17:27:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000014c0)=""/244, 0x28, 0xf4, 0x1}, 0x20) [ 685.263192][T22874] EXT4-fs (loop3): bad geometry: block count 6488064 exceeds size of device (70 blocks) 17:27:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000180000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:44 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000088b70f08070a78003ea7000000010902240001000000000904000002b042a30009058f03002100040009050d03"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 17:27:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x201, 0x0) pwritev(r0, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 17:27:44 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff4000/0x2000)=nil) shmat(r0, &(0x7f0000ff3000/0x2000)=nil, 0x7000) 17:27:44 executing program 2: mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4) 17:27:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth1_to_bond\x00'}) 17:27:45 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8910, &(0x7f0000000080)={'wg2\x00'}) 17:27:45 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) [ 685.480389][T22902] loop3: detected capacity change from 0 to 140 17:27:45 executing program 5: syz_open_dev$sg(&(0x7f00000007c0), 0x0, 0x4c000) 17:27:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x34a, 0x4, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 17:27:45 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x0, "f907efd1c45b5a09c408d38f1658c8bca2f377a258c1c9d055d08c713907b78a"}) [ 685.571858][T22902] EXT4-fs (loop3): bad geometry: block count 8388864 exceeds size of device (70 blocks) 17:27:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x88) 17:27:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000083000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 685.717202][ T3698] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 685.780841][T22921] loop3: detected capacity change from 0 to 140 [ 685.801429][T22921] EXT4-fs (loop3): bad geometry: block count 8585216 exceeds size of device (70 blocks) [ 685.987043][ T3698] usb 5-1: Using ep0 maxpacket: 8 [ 686.147297][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 686.163883][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8448, setting to 1024 [ 686.192694][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 686.205249][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 686.258075][ T3698] usb 5-1: New USB device found, idVendor=0a07, idProduct=0078, bcdDevice=a7.3e [ 686.296804][ T3698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.340221][ T3698] usb 5-1: config 0 descriptor?? [ 686.437804][ T3698] adutux 5-1:0.0: ADU120 now attached to /dev/usb/adutux0 [ 686.628939][ T3698] usb 5-1: USB disconnect, device number 5 17:27:46 executing program 4: syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000012c0), &(0x7f0000001300), 0x0) 17:27:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x34a, 0x4, 0xcd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 17:27:46 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8000, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 17:27:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 17:27:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xd00}, 0x14}}, 0x0) 17:27:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000000f6000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:46 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0) 17:27:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) flock(r0, 0xc) 17:27:46 executing program 2: add_key(&(0x7f0000000600)='ceph\x00', 0x0, &(0x7f0000000680)="b1", 0x1, 0xfffffffffffffffc) [ 687.199990][T22931] loop3: detected capacity change from 0 to 140 17:27:46 executing program 5: r0 = socket(0x28, 0x1, 0x0) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 17:27:46 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0000014}) [ 687.278772][T22931] EXT4-fs (loop3): bad geometry: block count 16121856 exceeds size of device (70 blocks) 17:27:46 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000500)='syzkaller\x00', 0xa) 17:27:46 executing program 4: r0 = socket(0x25, 0x5, 0x0) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0xa, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) 17:27:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = dup2(r0, r1) fcntl$addseals(r2, 0x409, 0x19) 17:27:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private0}, r1}}, 0x48) 17:27:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001fc000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x1000}) 17:27:47 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x84) 17:27:47 executing program 2: r0 = socket(0xa, 0x5, 0x0) connect$rxrpc(r0, 0x0, 0x0) 17:27:47 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 17:27:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$rxrpc(r0, 0x0, 0x0) [ 687.546270][T22954] loop3: detected capacity change from 0 to 140 17:27:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x1}}, 0x18) 17:27:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x556, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b5, 0x4}) [ 687.600414][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.631081][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:27:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 17:27:47 executing program 4: r0 = socket$inet(0x2, 0x3, 0xca) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:27:47 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0) [ 687.697878][ T3830] loop3: unable to read partition table [ 687.704800][T22954] EXT4-fs (loop3): bad geometry: block count 16515328 exceeds size of device (70 blocks) 17:27:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x0, 0x0, 0x7fff}, 0x48) 17:27:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000000ff000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:47 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x5402, 0x0) [ 687.940434][T22981] loop3: detected capacity change from 0 to 140 [ 687.959771][T22981] EXT4-fs (loop3): bad geometry: block count 16711680 exceeds size of device (70 blocks) [ 688.032752][ T3751] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.060252][ T3751] Buffer I/O error on dev loop3, logical block 0, async page read [ 688.095044][ T3751] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.112143][ T3751] Buffer I/O error on dev loop3, logical block 2, async page read [ 688.122283][ T3751] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.132667][ T3751] Buffer I/O error on dev loop3, logical block 3, async page read 17:27:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00'}}) 17:27:47 executing program 4: syz_open_dev$usbfs(&(0x7f0000000100), 0xd, 0x0) 17:27:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) 17:27:47 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80901, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8}, 0x10) 17:27:47 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0xc0045103, &(0x7f0000000000)) 17:27:47 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001ff000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:47 executing program 1: io_setup(0x75, &(0x7f0000000000)=0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}]) 17:27:48 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x200, 0x0) 17:27:48 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)="e28aa0", 0x3}}, 0x0) 17:27:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) [ 688.491851][T22991] loop3: detected capacity change from 0 to 140 [ 688.518592][T22991] EXT4-fs (loop3): bad geometry: block count 16711936 exceeds size of device (70 blocks) 17:27:48 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 17:27:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005f5e0ff000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:48 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x400, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 17:27:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x7, 0x0, 0x0, 0x4}, 0x48) [ 688.625956][T22999] ieee802154 phy0 wpan0: encryption failed: -22 17:27:48 executing program 5: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) 17:27:48 executing program 0: clock_gettime(0x5, &(0x7f00000002c0)) 17:27:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x48) 17:27:48 executing program 4: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40000062) [ 688.737743][T23006] loop3: detected capacity change from 0 to 140 17:27:48 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045407, 0x0) 17:27:48 executing program 2: setresuid(0xee01, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee00) [ 688.807039][T23006] EXT4-fs (loop3): bad geometry: block count 16769269 exceeds size of device (70 blocks) 17:27:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x556, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4}) 17:27:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)='\r', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000340)={r1, 0x0, 0x0}) 17:27:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 17:27:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000030000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 17:27:48 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x2]}, &(0x7f0000000040), 0x8) 17:27:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0) 17:27:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x0, 0xffffffff, 0x0, 0x1}, 0x48) 17:27:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x0, 0x0, 0x40, 0x0, 0x1}, 0x48) 17:27:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "e573040c353e5a55"}, 0x5}}]}, 0x2c}}, 0x0) 17:27:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 688.996241][T23031] loop3: detected capacity change from 0 to 140 [ 689.061320][T23031] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 17:27:48 executing program 1: r0 = socket(0x29, 0x5, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) 17:27:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x7, 0x5, 0x800, 0x41, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 17:27:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 17:27:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f000000f1c0)=@base={0xd, 0x0, 0x4}, 0x48) [ 689.105327][T23031] EXT4-fs (loop3): group descriptors corrupted! 17:27:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 17:27:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) 17:27:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 17:27:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x2000000e) 17:27:48 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = geteuid() setresuid(0xee01, r0, 0x0) setresuid(0x0, 0x0, 0x0) 17:27:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0xc074510c, 0x0) [ 689.309570][T23055] loop3: detected capacity change from 0 to 140 17:27:48 executing program 1: r0 = socket(0x26, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x84, 0x2, 0x0, 0x0) 17:27:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 17:27:48 executing program 5: setresuid(0x0, 0xee01, 0x0) r0 = geteuid() setresuid(0xee01, r0, 0x0) r1 = geteuid() setresuid(r1, 0x0, 0x0) [ 689.356231][T23061] Zero length message leads to an empty skb [ 689.377757][T23055] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 17:27:48 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ipvlan0\x00'}}, 0x1e) 17:27:48 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'bond0\x00'}) [ 689.441843][T23055] EXT4-fs (loop3): group descriptors corrupted! 17:27:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c64c9, &(0x7f0000000180)) 17:27:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4605, 0x20000000) 17:27:49 executing program 5: r0 = socket(0x2, 0x3, 0x5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 17:27:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000080000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2503"], 0x118}}, 0x0) 17:27:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x3c00, 0xee98a13ce97dc86d, 0x0, 0x5d4, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x7}) 17:27:49 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40085) 17:27:49 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x80, "06d230aa4019b50de3b07f4347221ee8da931e74921dfb3ffd58abf95745806e"}) 17:27:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x8004510b, &(0x7f0000000000)) 17:27:49 executing program 4: r0 = socket(0x25, 0x5, 0x0) connect$rxrpc(r0, 0x0, 0x0) [ 689.679149][T23083] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.2'. [ 689.700623][T23090] loop3: detected capacity change from 0 to 140 17:27:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:27:49 executing program 1: timer_create(0x9, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 17:27:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000040)={'wlan0\x00'}) 17:27:49 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'bridge_slave_1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'bridge_slave_1\x00', {}, 0x6}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'bridge_slave_1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000340)={0x0, 'bridge_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x12, 0x8, 0x70bd25, 0x25dfdbff, {0x10, 0x92, 0x9, 0x3, {0x4e24, 0x4e24, [0x0, 0x9, 0x3, 0xfa], [0xc2d, 0x6, 0x1, 0x1], 0x0, [0x80000001, 0x4]}, 0x64a, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "aa8b7cb9ea2655dbddfa893793fa1fc13aa8fa6aaa64b3ef3c3214d374a44bdddadfbc4bdd2c4e569375c91432fa4e61e88d9041955dcb3b7e3c53869bd12763b0ced32a71b2f928bcc6589b516bf06ea7b60c52a2615ba21e5383ddeb19f6700d9ac5eaa0887c06"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "c83436cd38b233ad986a130f63070f5ef282ffb6eb45dfe2ef1237ab9fefa159a3b0622624a57527e1383245df3588c7d7d875aad4118ea108a9704f2d79f74619c053e9310c0f07863c2c2b70414147add2bb1c5e1c5d3f3d782141"}]}, 0x11c}}, 0x24000000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000340)={0x0, 'bond_slave_0\x00', {}, 0x3}) r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x10044) r8 = syz_open_dev$mouse(&(0x7f0000000940), 0x8, 0x18d200) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000480)='syzkaller\x00', 0x10000, 0xd4, &(0x7f00000004c0)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x5, 0x2, 0x3f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r7, 0x1, 0xffffffffffffffff, r8]}, 0x80) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000c40)={0x5, 0x10, 0xfa00, {&(0x7f0000000a40), 0xffffffffffffffff, 0x2}}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, 0x0, 0x25, 0x13}, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3, @ANYRES32=r4, @ANYRESDEC=r5, @ANYRES8=r1, @ANYRESOCT], 0x14}}, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000300)=""/204, 0xcc) [ 689.740333][T23090] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 17:27:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x4004510f, &(0x7f0000000000)) [ 689.801662][T23090] EXT4-fs (loop3): group descriptors corrupted! 17:27:49 executing program 5: bpf$MAP_CREATE(0xf, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:27:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x556, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:27:49 executing program 1: r0 = socket(0x29, 0x2, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 17:27:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x4605, &(0x7f0000000040)) 17:27:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x20}}, 0x10) 17:27:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b233872fb8282d6faa83340269c7862dd0af7d7712fef228044b3fd66584f6d1550fe4f0bf3974ff940cc9deb1bbfc9f9cc74c5218349310c405a4a1c37b9f"}, 0x60) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 17:27:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x0, 0x1000, 0x1}, 0x48) 17:27:49 executing program 1: r0 = socket(0x25, 0x5, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) [ 690.013428][T23112] loop3: detected capacity change from 0 to 140 17:27:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4611, 0x4) 17:27:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @fixed}, 0xe) [ 690.084821][T23112] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 17:27:49 executing program 2: r0 = add_key(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1, 0x2}, &(0x7f0000000680)="95", 0x1, 0xfffffffffffffffc) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, r0) 17:27:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) [ 690.135693][T23112] EXT4-fs (loop3): group descriptors corrupted! 17:27:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000100000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:49 executing program 0: bpf$MAP_CREATE(0x9, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:27:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x1000, 0x8, [0x0, 0x0]}) 17:27:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b233872fb8282d6faa83340269c7862dd0af7d7712fef228044b3fd66584f6d1550fe4f0bf3974ff940cc9deb1bbfc9f9cc74c5218349310c405a4a1c37b9f"}, 0x60) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 17:27:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, 0x0) 17:27:49 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) 17:27:49 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89ea, &(0x7f0000000000)={'wlan1\x00'}) 17:27:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) [ 690.315884][T23135] loop3: detected capacity change from 0 to 140 17:27:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 17:27:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000460000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:49 executing program 1: timer_create(0x9, 0x0, &(0x7f0000000080)) 17:27:49 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0x9, 0x0, 0x0) [ 690.387015][T23135] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)! 17:27:49 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x2000) [ 690.387047][T23135] EXT4-fs (loop3): group descriptors corrupted! 17:27:50 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000100)={0x77359400}, 0x0) 17:27:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 690.530448][T23153] loop3: detected capacity change from 0 to 140 17:27:50 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b233872fb8282d6faa83340269c7862dd0af7d7712fef228044b3fd66584f6d1550fe4f0bf3974ff940cc9deb1bbfc9f9cc74c5218349310c405a4a1c37b9f"}, 0x60) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 17:27:50 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000c80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9a) 17:27:50 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x48044) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 690.588168][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.594525][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.668408][T23153] EXT4-fs mount: 34 callbacks suppressed [ 690.668428][T23153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 17:27:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000003340)) 17:27:50 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xe, 0x0, 0x0) 17:27:50 executing program 0: syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001280), 0x21080, &(0x7f00000012c0)) 17:27:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000630000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:50 executing program 1: r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000400)='ro\x00', 0x0, 0x0) 17:27:50 executing program 0: sigaltstack(&(0x7f00000000c0)={&(0x7f0000000080)=""/51, 0x80000002, 0x33}, 0x0) 17:27:50 executing program 5: syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x11, &(0x7f00000002c0)=ANY=[]) [ 690.900912][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 691.037927][T23182] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 691.041261][T23183] loop3: detected capacity change from 0 to 140 [ 691.074495][T23183] EXT4-fs (loop3): bad geometry: block count 99 exceeds size of device (70 blocks) [ 691.119536][T23182] cramfs: wrong magic 17:27:51 executing program 2: r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsmount(r0, 0x0, 0x0) 17:27:51 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b233872fb8282d6faa83340269c7862dd0af7d7712fef228044b3fd66584f6d1550fe4f0bf3974ff940cc9deb1bbfc9f9cc74c5218349310c405a4a1c37b9f"}, 0x60) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 17:27:51 executing program 1: socketpair(0x18, 0x0, 0x5, &(0x7f0000000a40)) 17:27:51 executing program 0: io_setup(0x8001, &(0x7f0000001a00)=0x0) io_cancel(r0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 17:27:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000830000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:51 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000600)=@bloom_filter, 0x48) io_setup(0x8001, &(0x7f0000001a00)) 17:27:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x0, 0x0, 0x1}, 0x48) 17:27:51 executing program 2: socketpair(0x10, 0x803, 0x0, &(0x7f0000000040)) [ 691.589877][T23193] loop3: detected capacity change from 0 to 140 [ 691.605936][T23193] EXT4-fs (loop3): bad geometry: block count 131 exceeds size of device (70 blocks) 17:27:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000c00000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003300)={0x0}) recvmmsg$unix(r0, &(0x7f0000003280), 0x0, 0x1, &(0x7f0000003340)={r1}) 17:27:51 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x4, 0x0) 17:27:51 executing program 0: socketpair(0x2, 0x0, 0x78a00000, &(0x7f0000000000)) 17:27:51 executing program 2: io_setup(0xffffff80, &(0x7f0000000040)) 17:27:51 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000600)=@bloom_filter, 0x48) [ 691.823558][T23202] loop3: detected capacity change from 0 to 140 17:27:51 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x0, 0x4101) [ 691.878624][T23202] EXT4-fs (loop3): bad geometry: block count 192 exceeds size of device (70 blocks) 17:27:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 17:27:51 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x22, 0x0, 0x0) 17:27:51 executing program 4: syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x20a801, &(0x7f0000000180)) 17:27:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000f60000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:51 executing program 1: bpf$MAP_CREATE(0x22, &(0x7f0000000600)=@bloom_filter, 0x48) 17:27:51 executing program 0: io_setup(0x1f, &(0x7f0000000180)=0x0) io_getevents(r0, 0x10001, 0x0, 0x0, 0x0) 17:27:51 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x0) [ 692.122226][T23223] loop3: detected capacity change from 0 to 140 [ 692.185758][T23223] EXT4-fs (loop3): bad geometry: block count 246 exceeds size of device (70 blocks) 17:27:52 executing program 5: clock_gettime(0x4, &(0x7f0000001380)) 17:27:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}}, 0x0) 17:27:52 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x6, &(0x7f0000001b80)=[{&(0x7f0000000780)="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", 0x1000, 0x1000}, {&(0x7f0000001780)="e0", 0x1}, {&(0x7f0000001800)="8c", 0x1, 0x3f00000000000}, {&(0x7f0000001840)="c1", 0x1}, {&(0x7f0000001940)=',', 0x1}, {0x0}], 0x0, &(0x7f0000001c80)={[{@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@debug}], [{@dont_appraise}]}) 17:27:52 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r0, &(0x7f0000000140)=@rfm={0x25, 0x0, "d5beab467773473d31d00569612c35d6"}, 0x18) 17:27:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x24}}, 0x0) 17:27:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000020100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 692.703760][T23233] loop1: detected capacity change from 0 to 49152 [ 692.722360][T23238] loop3: detected capacity change from 0 to 140 17:27:52 executing program 0: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) 17:27:52 executing program 4: socketpair(0x22, 0x0, 0x6, 0x0) [ 692.747521][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.756744][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 692.770240][ T3751] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:52 executing program 2: getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 17:27:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x18, r1, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 692.803850][ T3751] Buffer I/O error on dev loop1, logical block 0, async page read [ 692.819797][ T3830] loop3: unable to read partition table [ 692.831710][ T3751] loop1: unable to read partition table [ 692.841755][T23238] EXT4-fs (loop3): bad geometry: block count 258 exceeds size of device (70 blocks) 17:27:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000030100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:52 executing program 1: read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016ca3c496b24ad55200010000000000000000fc00"/35], 0x34}}, 0x0) 17:27:52 executing program 4: rt_sigaction(0x3d, &(0x7f00000000c0)={&(0x7f0000000040)="c4227918bde12d0000c4820d4059d9c4a28d286601f0812ffa2d00000fc7f0f2a78f09b00125001000026426653e40ad2e83f30b66410f646d3e", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 17:27:52 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) 17:27:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x168}}, 0x0) [ 692.963328][T23249] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 17:27:52 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 17:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) [ 693.012755][T23253] loop3: detected capacity change from 0 to 140 17:27:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}}, 0x0) [ 693.065126][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.088015][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:27:52 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20440, 0x0) [ 693.111192][ T3830] loop3: unable to read partition table 17:27:52 executing program 2: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 17:27:52 executing program 5: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x414800, 0x0) [ 693.140276][T23253] EXT4-fs (loop3): bad geometry: block count 259 exceeds size of device (70 blocks) 17:27:52 executing program 1: accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x40800) 17:27:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], 0x14}}, 0x0) 17:27:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x2, &(0x7f0000001b80)=[{0x0}, {0x0}], 0x0, &(0x7f0000001c80)={[{@fat=@codepage={'codepage', 0x3d, '850'}}, {@dots}, {@fat=@debug}, {@fat=@flush}], [{@dont_appraise}]}) 17:27:52 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}) 17:27:52 executing program 2: syz_mount_image$adfs(&(0x7f00000000c0), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000140)='-', 0x1}, {&(0x7f00000001c0)='O', 0x1}, {&(0x7f0000000280)="ee", 0x1, 0x1000}], 0x408, &(0x7f00000004c0)) 17:27:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) 17:27:52 executing program 1: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) [ 693.357335][T23275] FAT-fs (loop0): Unrecognized mount option "dont_appraise" or missing value [ 693.375521][T23282] loop3: detected capacity change from 0 to 140 17:27:52 executing program 0: syz_open_dev$cec(0xfffffffffffffffc, 0x1, 0x2) 17:27:52 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 693.413841][T23284] loop2: detected capacity change from 0 to 16 [ 693.443804][ T3815] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.464433][ T3815] Buffer I/O error on dev loop2, logical block 0, async page read [ 693.474125][T23282] EXT4-fs (loop3): bad geometry: block count 260 exceeds size of device (70 blocks) 17:27:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 17:27:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 17:27:53 executing program 4: modify_ldt$write(0x1, &(0x7f0000000300), 0x10) modify_ldt$write(0x1, &(0x7f0000000500), 0x10) [ 693.535763][ T3815] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000050100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:53 executing program 1: request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) 17:27:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="e6", 0x1, r1) 17:27:53 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) [ 693.590342][ T3815] Buffer I/O error on dev loop2, logical block 0, async page read [ 693.625398][ T3815] ldm_validate_partition_table(): Disk read failed. [ 693.666744][ T3815] Dev loop2: unable to read RDB block 0 [ 693.691912][ T3815] loop2: unable to read partition table 17:27:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 17:27:53 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x80000000}, &(0x7f0000000200)={0x0, r0+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x80000000]}, 0x8}) 17:27:53 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x6400) 17:27:53 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000), 0xc) [ 693.711020][T23303] loop3: detected capacity change from 0 to 140 [ 693.711372][ T3815] loop2: partition table beyond EOD, truncated [ 693.746069][T23303] EXT4-fs (loop3): bad geometry: block count 261 exceeds size of device (70 blocks) 17:27:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "7966a180e25cfc4c", "3f06cce37e78c6b77ff7cc9abb1cb08b", "334c89ab", "a54a3063ab3608b5"}, 0x28) 17:27:53 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x88242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000380), 0x2) 17:27:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000060100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:53 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000740)='./file0\x00', 0x1, 0x8, &(0x7f0000001b80)=[{&(0x7f0000000780)="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", 0x1000, 0x1000}, {&(0x7f0000001780)="e03ecdadc7cf0ad34de25afadf256e37198f68cc214cfd701b19e807e2cde5cb872d", 0x22}, {&(0x7f0000001800)="8c6e631744de3b6a5d0be12cf69791dd2245231929ff4b09c26e33ff5d25c3ae40a7cd0e29046de14dd646", 0x2b, 0x3f00000000000}, {&(0x7f0000001840)="c16ebcb3", 0x4}, {0x0, 0x0, 0x2000000000}, {&(0x7f0000001940)="2c8bcefc6d7d39dc5012742bd58426698e74e82fe6e7372ddceca06f5245c4e4ec989230c32da610378f8b24486d63f18e7df1007f", 0x35}, {&(0x7f0000001a80)="04", 0x1, 0x8000000000000001}, {0x0}], 0x20000, &(0x7f0000001c80)={[{@fat=@codepage={'codepage', 0x3d, '850'}}, {@dots}, {@fat=@debug}, {@fat=@flush}], [{@dont_appraise}]}) 17:27:53 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001280)={0x0, 0x7, 0x0, "e05b9933958095f61c674e8f297ee807fd2e09693d76acc71f6e1b05e5d0f248"}) 17:27:53 executing program 1: clock_gettime(0x4, &(0x7f0000000280)) 17:27:53 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) 17:27:53 executing program 5: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000240)="804d48b627faf59ca898f1d1e2207d014f04fd2f3ea4fb5b036a2bf09c7406690b3a4ff5c7f82f1d76ef12b7bbb007f2259b5e276dce977f4089acd014e052f41467c6d3d0992aa682d4a75e5676608f5c8ca7f69fb820d0a75673eee62dbd253fc1b3132131e1747ccad0af18d4649d830d4c45574bc16ce1ef3e499b4c01fc1de26f72775eafd1fe5b3bd95e986d6e9e844e1dde9b31a3276b9673aa06849c2e5632106f9ecc5bb81c93e67918fde3a9cf618909f0fb5a3b7b68d6e4415ae7568473a25eec5cd7c726c8e39a79fb0e706f4f2f477f0fad382b202eeab397d8869f9e7bb7e9af029cbb8c0c27ce78c7effd36e8da4018be726c63939b6d1344dc9746d024954bc0b13842e48b714f32f0485631eab1260a4d71a91f5040dde4030086ac8c5472bad50b8a10a51d4dfed53b2ed17ff7b7c15e75d597e5e3343b558196575046c4effd3b4e62e0f9c7d549336f40bf9a6a9444e2b033b5b80b0e04a9cb177097f6113e3980688a0bb02fd49e6c1659f6ff73ddb169962a33a0d4975b6e942ef7ab132e8dabdd10b63125cbbae1a72c9b679feca238f80037168dbc3c963a7e1e0876a06499df70035f2769a3c001095dedc7c6450596af01b0385c7e3a0546cc641930f76ba179a4663ff326c404437d6da8bdca080f49d780686412d133f8e29ebaf1b357d72c74145a506e7afd2f6063e3102c96401c0980efda482d68b56c44c00c6c8ffc15ea098dfb06b76f9302d5a4243df890f065599bd9e76398ff3e02a187910cce9b8ab388ede67865bf32252a2a760c1a52fd08e4cee26b13a1fe8136ca73d158130edf12243bed57b212e5a12a0ec8b12d7f44482292ea963ab436132d35b3925433b95a1302d809bc6bf2f97b6a2a1cdd9074bb692394330f88147663f06925463125c66ff582dc63c577eb9cda5dc0be63ab458d928eb1415742ea7493008e6f60c67219633235f39eefb0cc13527f0c2d299ee81cb7e132ebd1699197f51d6a149f3446a9c39151073946096e4106ee7aa1842163993c62f34f6b04f8a467a7b7461eecb22fafcf2985c526872602deb01042b1837ee99cfbbc1c00a31210581aec29bf3bd23759b0c77f3b7542733d70d15f116fa8155befda9ccaec20930aec73c90a2816ab180eec3bcca7c0f78132623a288c61304e6f34c2e6b78333e8cac5f7e204cb4653babcf4a32e066cc52653bbaa6b0c11ecfdd396da6cf353237db2349079c3d44860be8484d65403d33117bd5b99ae645e2e26c705057acf3a2a8e4af697f5132ac74972eb38884f087a6c7a47054dd32228b57427ea3d3db98638f579fcd34d4cacec86cc24c7b6477a6fcb1ce57ba3cde9af2de94c7bdc8bbd5dfd3d543310d8325eaf1bfa2d1f510ae8378fb43ef289fc1b68d3b44c52bd20a06c3f020bc5d7c9933c0d3df1a49ebe44035b83ecadced79f2529bf6697053dd779e67184884789c28261063ac211095349a8f9411804becaf776a617bb18a4afc586d673ec93c8989766d2fc6a6b8a54d7dbdc5c0e8db6c9ddee237fec6b968cb3a8a28a9090b25345ee7cf8a03d69ba9f400f6d80b2977ac960322a1c57cfb44fc262daa013c1a1f7d4d3fde3b87c188b1cf411c2134b01461591a4ef8d87ba05a3d3ff6e978359513e111fcdcd420e5d2c62aa9611acfe14e6bd919b5ee88d91b6355cffe508cadf83f09c6abdfecf5b8763930e0283c019bc7fb71ce900d482cdf4ef370fbfe32b981369596d0079c620d1874399eca8c1a08420745176d1572c1290a1b800e8b74331750bb568662dffcdb44c1c19b407d00ecc600465315e668eb8e04cbd876b397c3f73c52fdbc0969d53b77318f3541a5724a4d6b13d99f26c8b921f3e04d366b8ad0635b928d0281f12d5dfe2339d900a3aa421b2a841890a8c2b38137cef6515265d9c7bd93e37278b268c4ccf54e9018c50ba2a9379db1246c6317917b63ea2a6688c282fc6be6a773590ed5e6ce4f46607d02c4623b4329f2ad10086cdedd6882622f0c1e29104034edecb453f08c2450898923af061f8a8fe51cea0a143ed2a57c2b1a438fcc34649fdb99ea44b7743c0e86f325fd44b38dc6ec10745ef10838a4d00bd301c7c594d653587e83012e3a383fc4a705e16e4b20be25f94fa28d429eebef1185d7ae6b3ca6d7510a2806f2e92ee5ddf2ad31b00f908a0812b98c413da74304d43e13185c9fceb71b8b559ca31222d1914c9ae2bead2c80e4f477675afbee8cd4d315e148f3ba6d788b30a6a26d62668d333e5ea9f721e41da81aed86265b504c476b85a02d739a6aeccac2c9a74f5bfb0bcb0d2b04fcf315a23c39e590d733b731d2a4a84fb718d5d555ebe0d3cedb59c31560bfd2885c43fe05ed2912403210010412de09add75f16cc2f4bcafa46a841b959401311134bb0062827152327a00ce785a95cb9801d46e0a81267600669ad7635a0b9fb07278495bfc3d01fa4e53e50e4c2770071dd693001012080560031bebf0d0be87c6f950dfb0e5925977d209acf65e09f746518cc332117c4fa74eb97acbbb944cf9003fea2c2c6149e543bde11d84b9215c01e2b4ad14aff6fd4232194145ac278384210ec6caaae84eea9c0d4718939468936fbbc8ec801615dfded3161578f2e909fdbfbfd38c042635888001045479ef4fa6e2b33d93c31b927d5704188a437222ed40715b76348b5d037423eba4a3e9887fc8994f97a666a7feb04a8988ced8460a5c9377360c16d5af0735ed31c615cf79847f843a658d2c8c3c79405c89438b17ca5f6f95eddb920f4221e0d085fa3547511cad05cc0d8d4795a9d4ac82d6a37ad697a9553cbfd0120cf348690b9567df502b298325af81f310df4cae3ef5f35fb92201d4ea9665076ac9bc16fd8f883f5878431f83ba6f7a07fdc5ffab3a337ce385e3b5b54c6b940377845a3998704400d39c5fc01d307c9950df8bfe116d846d02add1df127a9b807e77cd95589667c491c3141a4764ce4f182a78278f906798aa86dd99738fc6919d838b899569792c51ad306c2ef950897a0aa4d5a58714babc276ee107fdc403200103fbfb277cb77194888f49550b2f5ef6b3b2f331fff477583864f49705133f852f60578c5075826a9e9ee049ba9aa6a80c72a0977e52e7e5393e2a04e4e73f5179023810384365d465559d9742e2f370b001e01ef8e5ab2a2040402ab89119a4463adf2c0139e3d3970bd9f0271d0a1ccd2e4b75c5b1e2502ca425bfc320f0792a243061b55376d1a53e6eb2fa9b6bfbcd4ab990eac2caca759a8389e8d59dc95d0080a93efd09fce41c4f23cfee0f1635cdb1e1cc413dd497ae14033ec8c1c0e6a8d5a46d957f0ab332e32e658c503dfe938fa87618aa241c8bec5010c5ad2222be791b5499aa27d685e72d0a924c31d08489d554a559b2f716b0ebda6e0d332c01d6873bc1ce6c1e6c233a160548cd2886801c3543821b7dd67ae6635347f18a1c4662ecc7e0f76f4e44d36b1c29b878186a554b10480f6ec4d368cabb9efa22fbc2477931907ba855d1a75be9ffc994eb252550aa9fdc08f1b2a00b65cd9714998a5fe6923542d087e83eda021aa2731f80ea8895b019e0ade089f75c0b3be2e3fdc4fa45361cb6bad0b2fc3c614d036daf482c15c30bbf80d07ef41c7c3c80c88001e2076fcf978228ca1e91aa4a4b34a4fa7fd6a75f39a3ec6230c3377822ca349032f76ac0f9463008131e146fffdb9c355e909653f44a98ea982f48673b8e1cce01ee5bc9a7d7fb66570e8aadce5cf2f5feda7d5fdc22f07c318116a66b68f5ced52742b97314462c852a4d99323d6e5bf53e6fa04b30e6bfba957d1563811ce7e0c7069736c43a49357c7dbf1919adadfb974dbe91e2dd0a6408a0b4410e81e3819cbd797b9cbd24f244c643d0c782d6023659fe5cb05395aa7cea03c48f12a1ddc13e286b5247bed06a5b814907ca89545deb6ea6c51fee521a884a03cbabd15f0b004fb8c1f79a239e0517ae837b7b16e12a705be0bfb59a3b8eda503b7de78c91e928605c171260e78d2c3e61e678e78d319010d7ade05c3836f0852a60a63463a93e6a1394147f3adf04a76d40f942144797651e06f32804973e932f3d5189d4623b9263fc9286042a15b2f41f0691cbb9d1642b61e33cf5d8e8ad4e0530f208d6617c2c46c06b40984c731c4ac10f13fbd967871885f546eb344108e2dcf0744823d22e5e4c4b0bd27ba9f22992008aeb232322144b0ee29e9f7e92350147a5bf23437810e89cb13a7039cbe3d589db4fb58f2c889893ff77f244a74fbe98d0a2776a80ea6a9bf34a138a44ac48e560ddbbfee638aa11185ce69e8f6ab75035555abceb988a0a7bd301626d20f7e1a71a6e138b29c156c299271371caf4ada65cd3c52c871a9e9a0423c67661ce912b6df21a13fd23782e7ea2c6c8c0cc0b1cd00217f81687e377daaa100615e93ce47d8aec4a9c8c718b76c2e8a4323a3f7830fd5136d1023089529bac42776a674ce021bb63e2f0af0341abde32f6010e009b50538cf67f75e63f231c5249850699671005688e7783a2b8ba17a8ad7cb87ad3f41f98902ba309b5ea10de3e416c86c83d6d6a19f77c94720e0ac5c12b815c5493fa1e896c5a99906cfc708833dbc4059b4634f44169b358a5d92e9ab9fccb94c2c9d6580dc2e098aa30b30244fc0870eda7513fa4001909ad94a72c8c0febf71480392f6d268ed775004b3d654e9df3e63d9af5fd92ab30150fe450a2949f21960bd1b01b051c066aef9647cc2b06a5b98319c23297899dc9b3d8183f90d053d94461d1cd8ed4b0c8a99051152af78b77c837e668a26bc1dd75bcd774f43c34354be3e4c02a76a325456320481c69e88cdd10eb6b3dbe64a2d72a2a03fb5075417dd37643d83c307f0cc4abdd8f3f90ab28006d53b8abd7c44e7cf87de9b0d8d223997d0eb163a7602857a2ef9000113913268bb8", 0xdc1}], 0x0, 0x0) [ 693.954803][T23321] loop4: detected capacity change from 0 to 49152 [ 693.966647][T23322] loop3: detected capacity change from 0 to 140 17:27:53 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 17:27:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0, 0x28}}, 0x0) 17:27:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x14, r1, 0x5}, 0x14}}, 0x0) 17:27:53 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x7) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @private}, &(0x7f0000000380)=0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x20004014) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), 0x4) syz_open_dev$audion(&(0x7f00000004c0), 0x0, 0x30d000) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101180, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 694.040495][T23330] loop5: detected capacity change from 0 to 6 [ 694.055336][T23322] EXT4-fs (loop3): bad geometry: block count 262 exceeds size of device (70 blocks) [ 694.065386][ T2967] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 694.091808][ T2967] Buffer I/O error on dev loop5, logical block 0, async page read [ 694.114308][ T2967] Dev loop5: unable to read RDB block 6 [ 694.132220][T23335] must specify at least one socket [ 694.133950][ T2967] loop5: unable to read partition table 17:27:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000001b80), 0x0, &(0x7f0000001c80)) 17:27:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000070100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:53 executing program 5: syz_open_dev$audion(&(0x7f0000000140), 0x0, 0xcb01) 17:27:53 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x20000010}) [ 694.169550][ T2967] loop5: partition table beyond EOD, truncated 17:27:53 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) pkey_mprotect(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x0, 0xffffffffffffffff) [ 694.238581][T23346] loop3: detected capacity change from 0 to 140 [ 694.253042][T23344] FAT-fs (loop4): bogus number of reserved sectors [ 694.259790][T23344] FAT-fs (loop4): Can't find a valid FAT filesystem 17:27:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000280)) 17:27:53 executing program 1: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 17:27:53 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) [ 694.299377][T23346] EXT4-fs (loop3): bad geometry: block count 263 exceeds size of device (70 blocks) 17:27:53 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) 17:27:53 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) 17:27:53 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x8400) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x800}]}, 0x20}}, 0x24000004) socketpair(0x28, 0x2, 0x8, &(0x7f0000000240)) openat$incfs(0xffffffffffffffff, &(0x7f0000000980)='.pending_reads\x00', 0x141140, 0x6) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:27:53 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80101, 0x0) 17:27:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000080100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:54 executing program 5: socketpair(0x0, 0xe, 0x0, 0x0) 17:27:54 executing program 4: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) 17:27:54 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="07febb35081ebd22aa91"]) 17:27:54 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:27:54 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) 17:27:54 executing program 5: r0 = geteuid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x40000) setreuid(0xee00, r0) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) [ 694.558298][T23370] loop3: detected capacity change from 0 to 140 17:27:54 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) 17:27:54 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000300)="4950fc68ee0b1fe6670eedaa6d0bfcee91f5bc18c4124df7268ad73a86b40c85a7e4d2aad454b150ac310d8e259d3b07e3e2bc3411af68cc0e9f4ea20c33bb02ef5b248e5a515fafb553043e863abf8aee57bfde382c812b95d0e8722b3dbbcf785925aebf8961735ad8da91cd9b4734c060770fa75a087327ccc8bd0244f69ef5d5f380737bd085813c30c76759ea379c95746a371a77d2c2f8902204a2eeaa3d60bf0badf894f62753542fdadf10e6469f2b810b722f4154b4ae06239249dec2805a41bc584e5c2de69ca440dfa77ccd638b9d0665dd83bbcf654f60eed5876f5adcd4cf48fc5c7cf9707e1a8497fd3f58dc084408288b51900d564c4dea87874f40b4a7a93fbb61b96ec2f57f5e20809a4465a9ed52bbc0dd9db0f5c9992e6aeb1bb67edeaa9e9874edc99853bbb2bb944e7b3f2bd7cea01b9da621cb1cbb6c3097d0da0c01a192a40a820dec6dac4db7482e9f653628a6cd0d370568c415a8f0f09d43d8ac17814e052e610b2a9a6c2ac4cf17c5d5c30757efbfc59113c4553d277f9c7ab5ac7ee8a685d0af28fa3c2093a115a638021f4fc165a94cd4b2fc911190952b4a7e85bc291f7564cc877c1dc0d2a498924229f1a33814cc56b1fd29ed63b20c08244d313199dd22986e3323c5eca95798d19d443104d33744c3869ae36fe1fb4f38f5063426955f35c1583065fbe154a6344556ce", 0x1fb, 0x5}], 0x0, &(0x7f0000001500)) [ 694.616523][T23370] EXT4-fs (loop3): bad geometry: block count 264 exceeds size of device (70 blocks) 17:27:54 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ab0cb7b3"}}) 17:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="5746a14ff11c3bd85dcf", 0xa) 17:27:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) [ 694.731302][T23384] loop1: detected capacity change from 0 to 1 [ 694.770470][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:54 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) 17:27:54 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/17, 0x11}}, 0x120) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) [ 694.803670][T23384] Dev loop1: unable to read RDB block 1 [ 694.814201][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 694.848175][T23384] loop1: unable to read partition table [ 694.855195][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.884709][T23384] loop1: partition table beyond EOD, truncated 17:27:54 executing program 4: fanotify_mark(0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, 0x0) [ 694.902192][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 694.911669][T23397] loop3: detected capacity change from 0 to 140 17:27:54 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x14043, 0x0) [ 694.950130][T23384] NILFS (loop1): unable to read superblock [ 694.953351][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 694.959017][T23397] EXT4-fs (loop3): bad geometry: block count 264 exceeds size of device (70 blocks) 17:27:54 executing program 4: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) [ 695.012056][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.048860][ T3751] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:54 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x4000000000001e) 17:27:54 executing program 1: sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1af26500bd659c31) 17:27:54 executing program 2: ioperm(0x0, 0x6c, 0x613) [ 695.053228][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.077031][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.089267][ T3751] Buffer I/O error on dev loop1, logical block 0, async page read 17:27:54 executing program 5: request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='{4^*][,&[$%\x00', 0xfffffffffffffffe) [ 695.119309][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.154435][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:27:54 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:54 executing program 4: sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x1beee74de59dce59) 17:27:54 executing program 1: rt_sigaction(0x3d, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 17:27:54 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000180)) [ 695.185703][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.214886][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.242106][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.266217][T23413] loop3: detected capacity change from 0 to 140 [ 695.281904][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.317274][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.335878][T23413] EXT4-fs (loop3): bad geometry: block count 266 exceeds size of device (70 blocks) [ 695.360060][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.382251][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.420409][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.446463][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.472266][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.483705][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 695.562359][ T6] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 17:27:55 executing program 0: rt_sigaction(0x3d, &(0x7f00000000c0)={&(0x7f0000000040)="c4227918bde12d0000c4820d4059d9c4a28d286601f0812ffa2d00000fc7f0f2a78f09b00125001000026426653e40ad2e83f30b66410f646d3e", 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 17:27:55 executing program 4: memfd_create(&(0x7f0000000180)='\x00', 0x0) 17:27:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 17:27:55 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x53f}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='nobarrier,nodiscard,order=r']) 17:27:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}}, 0x0) 17:27:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:55 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{0x0}], 0x0, &(0x7f0000001340)) [ 695.660725][T23430] loop5: detected capacity change from 0 to 5 [ 695.676118][ T3815] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) 17:27:55 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f0000000200)="7036d00676600ab6f8b61fd976c42cb25d9789f7dffc1e701f43e63ce844444a71a60bd8e943fb54d1c9a588e7feafd2ad2b4e6f22ad96e403f2af097004813e84fb4981a13d1d23b9bd1abb84e6abb54ae6a0865f6c8d71d2862ae849e8cad573975edf4af20e99f52adb1ebbc00b74ae08adcfdb14d268989950c601c4de13956a8f7e993ad17d496e86e83c09ca16d2675e83578dcacaacdbcc797e042cecb4a8dfbdace102755a3d85b179e25feff60736944a8b048d8b066a23ae82e4ab032023e6192697", 0xc7, 0x1f3a}], 0x0, 0x0) [ 695.745351][ T3815] Buffer I/O error on dev loop5, logical block 0, async page read 17:27:55 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) [ 695.798352][ T3815] Dev loop5: unable to read RDB block 5 [ 695.805756][T23434] loop3: detected capacity change from 0 to 140 [ 695.830227][ T3815] loop5: unable to read partition table [ 695.833592][T23439] loop2: detected capacity change from 0 to 31 17:27:55 executing program 1: r0 = getpgid(0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040)=[0x6], 0x0, 0x0) [ 695.857347][T23422] ldm_validate_partition_table(): Disk read failed. [ 695.864189][T23422] Dev loop2: unable to read RDB block 0 [ 695.871258][T23434] EXT4-fs (loop3): bad geometry: block count 267 exceeds size of device (70 blocks) [ 695.880836][ T3815] loop5: partition table beyond EOD, truncated 17:27:55 executing program 4: socket$igmp(0x2, 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000300)={0x200}, 0x10) socket$igmp(0x2, 0x3, 0x2) modify_ldt$write(0x1, &(0x7f0000000500), 0x10) [ 695.906747][T23422] loop2: unable to read partition table [ 695.925648][T23430] NILFS (loop5): unable to read secondary superblock (blocksize = 1024) [ 695.944904][T23422] loop2: partition table beyond EOD, truncated 17:27:55 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x14, r0, 0x1}, 0x14}}, 0x0) 17:27:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000010000000c0008e6"], 0x28}}, 0x0) 17:27:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 696.004644][T23430] NILFS (loop5): couldn't find nilfs on the device 17:27:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x4c}}, 0x0) 17:27:55 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4) 17:27:55 executing program 4: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0), 0x0, 0x0) [ 696.104805][T23452] loop3: detected capacity change from 0 to 140 [ 696.110476][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.140974][T23452] EXT4-fs (loop3): bad geometry: block count 268 exceeds size of device (70 blocks) 17:27:55 executing program 0: syz_open_dev$dri(&(0x7f0000004600), 0x7fffffff, 0x0) [ 696.151969][T23451] must specify at least one socket 17:27:55 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x1000005, 0x10, r0, 0x0) 17:27:55 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:27:55 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1e3e42) 17:27:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:55 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000300)="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", 0xffb, 0x5}], 0x0, &(0x7f0000001500)={[{@order_relaxed}]}) 17:27:55 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0)=0xffffffffffff0000, 0x1f, 0x0) 17:27:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f700)=[{{&(0x7f00000007c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{0x0}], 0x1, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x0) 17:27:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @in={0x2, 0x0, @local}], 0x2c) 17:27:55 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), 0x0) [ 696.403729][T23472] loop5: detected capacity change from 0 to 8 [ 696.409341][T23471] loop3: detected capacity change from 0 to 140 [ 696.431492][ T2967] ldm_validate_partition_table(): Disk read failed. [ 696.443353][T23471] EXT4-fs (loop3): bad geometry: block count 269 exceeds size of device (70 blocks) 17:27:55 executing program 0: request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0) 17:27:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x10}}], 0x1, 0x0) 17:27:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) 17:27:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38) [ 696.471659][ T2967] Dev loop5: unable to read RDB block 8 [ 696.485047][ T2967] loop5: unable to read partition table [ 696.505508][ T2967] loop5: partition table beyond EOD, truncated 17:27:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) [ 696.540583][T23472] NILFS (loop5): couldn't find nilfs on the device 17:27:56 executing program 1: request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 17:27:56 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000001b80), 0x0, 0x0) 17:27:56 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 17:27:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 17:27:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) [ 696.675891][T23488] loop3: detected capacity change from 0 to 140 17:27:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 17:27:56 executing program 0: syz_mount_image$adfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:27:56 executing program 4: syz_open_dev$vcsa(&(0x7f0000000140), 0x93dc, 0x40) 17:27:56 executing program 5: alarm(0x2) [ 696.732522][T23488] EXT4-fs (loop3): bad geometry: block count 270 exceeds size of device (70 blocks) 17:27:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) 17:27:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x1, &(0x7f0000001b80)=[{0x0}], 0x0, 0x0) 17:27:56 executing program 5: syz_open_dev$dri(&(0x7f0000004600), 0x0, 0x0) 17:27:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x402c052) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:27:56 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0xfffffffffffffe95) 17:27:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1002"], 0x10}}], 0x1, 0x0) [ 696.960612][T23513] loop3: detected capacity change from 0 to 140 17:27:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) 17:27:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 17:27:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) [ 697.034902][T23513] EXT4-fs (loop3): bad geometry: block count 271 exceeds size of device (70 blocks) 17:27:56 executing program 0: socketpair(0xa, 0x2, 0x5, 0x0) 17:27:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:56 executing program 5: set_mempolicy(0x0, &(0x7f0000000040), 0x0) 17:27:56 executing program 4: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000080)='.', 0x1, 0x10000}, {&(0x7f00000000c0)="8a", 0x1, 0x8000000000000000}, {&(0x7f0000000180)=';', 0x1}], 0x0, 0x0) 17:27:56 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x20]}, 0x8) 17:27:56 executing program 1: socketpair(0xa, 0x1, 0x2, 0x0) 17:27:56 executing program 0: add_key(&(0x7f0000001480)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) 17:27:56 executing program 5: connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0xf8}, 0xfffffd82) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x28a085) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) [ 697.223138][T23537] loop4: detected capacity change from 0 to 8192 [ 697.238351][T23534] loop3: detected capacity change from 0 to 140 [ 697.263056][ T3815] ldm_validate_partition_table(): Disk read failed. 17:27:56 executing program 2: syz_open_dev$vcsa(&(0x7f0000000800), 0x0, 0x22400) 17:27:56 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x0, 0x1f}, 0x10) 17:27:56 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$caif(r0, &(0x7f00000001c0)=@util={0x25, "0afe3ef79e65b4cc874eece6bb73ea6c"}, 0x18) 17:27:56 executing program 1: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) [ 697.273242][ T3815] Dev loop4: unable to read RDB block 0 [ 697.288945][T23534] EXT4-fs (loop3): bad geometry: block count 272 exceeds size of device (70 blocks) [ 697.303876][ T3815] loop4: unable to read partition table 17:27:56 executing program 2: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) time(&(0x7f0000000000)) 17:27:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000110100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:56 executing program 1: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000180)=';', 0x1, 0xfffffffffffffff8}], 0x0, 0x0) 17:27:56 executing program 0: futex(&(0x7f0000001400)=0x2, 0x80, 0x2, &(0x7f0000001440)={0x77359400}, 0x0, 0x0) 17:27:56 executing program 4: syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x80800) 17:27:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x10001}}, 0x0) [ 697.510474][T23557] loop3: detected capacity change from 0 to 140 [ 697.536538][T23559] loop1: detected capacity change from 0 to 16383 17:27:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @mss, @sack_perm], 0x4) 17:27:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000005840)={0x2020}, 0x2020) [ 697.551733][T23557] EXT4-fs (loop3): bad geometry: block count 273 exceeds size of device (70 blocks) 17:27:57 executing program 5: accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 17:27:57 executing program 1: r0 = socket(0x1d, 0x3, 0x1) accept$phonet_pipe(r0, 0x0, 0x0) 17:27:57 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 17:27:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) 17:27:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000120100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:57 executing program 2: openat$urandom(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 17:27:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x34}}, 0x0) [ 697.785481][T23580] loop3: detected capacity change from 0 to 140 [ 697.854350][T23580] EXT4-fs (loop3): bad geometry: block count 274 exceeds size of device (70 blocks) 17:27:57 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003e00), 0x2, 0x0) 17:27:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:57 executing program 2: syz_mount_image$adfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="2d5d2f6804d5d570d9ebdc79c2797f1455256c1f83aec5af53a65809adbff2caab9121f69ae3d68eb229cd55fe53d5cc2a9dc323435abc620a31567e8dcec3f47a492c6c7a962b875e1b57633d2f43576af4d7e19df5da1779c76bab50c12b68250fe0ad5cc3dc1b46cf359dc1197b7c23726ddfaa2549e443a3de5e8f4775a6", 0x80, 0x8}, {&(0x7f00000001c0)="4fa4b8c91868be793d313e309c0bbd941f6c1b30634995ab9224b7a1c3704be5558e7a2198b80191ac521a8c6d7d8c5fd1ea144628989761cd305ddf8a64a21a39814127a9f51a9e1e579243b7ad0393791b8e65de77e2e7b53b07dc330e4e75aa32101569fbfa8f40c24acd151a580ba21436d3d1648f0a82617da426676d4ac4d70d044da9ad772c61ddb1bb883a2871fb15cf262b9839214a105f35ccf187de6b8e85dd37eb3f905fb20a", 0xac, 0x5}, {&(0x7f0000000280)="eee7bc4e03fe9923c6c7870e936e74c0a0a449496ffff1679cde3c502d31c5c3ddbe0ce8698cadcf7e895e15ba39d93c300e4e134c36082084eb550eceb9be94707ae9f1990641698f0d25a60973c16cc51adb3a45e0a3363e400e7852c6fb6e446e9c59120660ccc93e74fbfd0f3029a8a39d7076a993299d3fcba07b8323399dbc5fe31ad694421e594ba0fef6bf62d1ba12e42fe58bf5a8c0cf3bc8dcf176ee", 0xa1, 0x1000}, {&(0x7f0000000340)="e1c83bf9", 0x4}, {&(0x7f0000000380)='W', 0x1, 0x80000000}], 0x408, &(0x7f00000004c0)={[{}, {}, {}], [{@subj_role={'subj_role', 0x3d, ':'}}]}) 17:27:57 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 17:27:57 executing program 4: syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1800002, &(0x7f00000014c0)) 17:27:57 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 17:27:58 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) [ 698.444913][T23589] loop2: detected capacity change from 0 to 264192 [ 698.446130][T23585] loop3: detected capacity change from 0 to 140 [ 698.460215][ T3830] blk_print_req_error: 35 callbacks suppressed [ 698.460233][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:58 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) [ 698.515270][ T3830] buffer_io_error: 35 callbacks suppressed [ 698.515288][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:27:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f0000001a40)) 17:27:58 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80802, 0x0) 17:27:58 executing program 4: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000080)="2e7f5e", 0x3}, {&(0x7f00000000c0)="8a", 0x1, 0x8000000000000000}], 0x0, 0x0) 17:27:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) [ 698.591225][ T3830] loop3: unable to read partition table [ 698.625707][T23585] EXT4-fs (loop3): bad geometry: block count 276 exceeds size of device (70 blocks) 17:27:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000260100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:58 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000) 17:27:58 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffee3) 17:27:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 698.700787][T23604] loop4: detected capacity change from 0 to 8192 17:27:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:27:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) 17:27:58 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000300), 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x0) 17:27:58 executing program 1: rt_sigaction(0x3d, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 17:27:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 698.799188][T23611] loop3: detected capacity change from 0 to 140 [ 698.811212][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.834525][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:27:58 executing program 5: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 17:27:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000380100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:58 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) [ 698.895009][ T3830] loop3: unable to read partition table [ 698.912695][T23611] EXT4-fs (loop3): bad geometry: block count 294 exceeds size of device (70 blocks) 17:27:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2000020, &(0x7f00000017c0)) 17:27:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 17:27:58 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x83000000) 17:27:58 executing program 5: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) 17:27:58 executing program 0: connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0xf8}, 0xfffffd82) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_open_dev$audion(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x34}}, 0x0) 17:27:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) 17:27:58 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) [ 699.039406][T23630] loop3: detected capacity change from 0 to 140 [ 699.077649][T23630] EXT4-fs (loop3): bad geometry: block count 312 exceeds size of device (70 blocks) 17:27:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x20}}, 0x0) 17:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 17:27:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000460100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf0703"], 0x20}}, 0x0) 17:27:59 executing program 1: syz_mount_image$adfs(&(0x7f00000000c0), 0x0, 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000140)="2d5d2f6804d5d570d9ebdc79c2797f1455256c1f83aec5af53a65809adbff2caab9121f69ae3d68eb229cd55fe53d5cc2a9dc323435abc62", 0x38, 0x8}, {&(0x7f00000001c0)="4fa4b8c91868be793d313e309c0bbd941f6c1b30634995ab9224", 0x1a, 0x5}, {&(0x7f0000000280)="eee7bc4e03fe9923c6c7870e936e74c0a0a449496ffff1679cde3c502d31c5c3ddbe0ce8698cadcf7e895e15ba39d93c300e4e134c36082084eb550eceb9be94707ae9f1990641698f0d25a60973c16cc51adb3a45e0a3363e", 0x59, 0x1000}, {&(0x7f0000000380)="573024147acc61a4ef28f9eff2d614ec7a8ea9eff98a480045e66ed847a3891acfc2326e236624ec", 0x28, 0x80000000}], 0x0, &(0x7f00000004c0)={[{}, {}, {}], [{@subj_role={'subj_role', 0x3d, ':'}}]}) 17:27:59 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0xffa3) 17:27:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 17:27:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) [ 699.804031][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 699.817994][T23653] loop1: detected capacity change from 0 to 264192 [ 699.822357][T23655] loop3: detected capacity change from 0 to 140 17:27:59 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000100)) 17:27:59 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "4171b276b419005c5fb30f2cba5eb122b7e43018064183593c3c65dd85b184cd"}) 17:27:59 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) [ 699.857146][T23657] must specify a device to reconfigure [ 699.869544][T23655] EXT4-fs (loop3): bad geometry: block count 326 exceeds size of device (70 blocks) 17:27:59 executing program 4: getresgid(&(0x7f00000002c0), 0x0, 0x0) 17:27:59 executing program 5: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) 17:27:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 17:27:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000480100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:59 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 17:27:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) 17:27:59 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x28, r2, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) 17:27:59 executing program 2: r0 = getpgid(0x0) ptrace(0xffffffffffffffff, r0) 17:27:59 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='nobarrier,nodiscard,order=r']) 17:27:59 executing program 1: sigaltstack(0x0, &(0x7f0000001180)={0x0}) [ 700.074942][T23678] loop3: detected capacity change from 0 to 140 [ 700.081978][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.100756][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 700.130247][ T3830] loop3: unable to read partition table [ 700.157739][T23678] EXT4-fs (loop3): bad geometry: block count 328 exceeds size of device (70 blocks) [ 700.159287][ C0] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:27:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000004c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:27:59 executing program 1: clock_gettime(0x3, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, r0/1000+10000}}, &(0x7f0000000080)) 17:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8980, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 17:27:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 700.177938][T23688] must specify at least one socket [ 700.178944][T23683] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 700.217091][T23683] NILFS (loop4): couldn't find nilfs on the device [ 700.321169][T23693] loop3: detected capacity change from 0 to 140 [ 700.336783][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.346044][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 700.381224][ T3830] loop3: unable to read partition table [ 700.389928][T23693] EXT4-fs (loop3): bad geometry: block count 332 exceeds size of device (70 blocks) 17:28:00 executing program 0: socketpair(0x2c, 0x0, 0x0, 0x0) 17:28:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000840)={"1f6e25e6f8bc15d03f4fb16c250e4b01"}) 17:28:00 executing program 2: readlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/149, 0x95) 17:28:00 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB]) 17:28:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:28:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000550100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:00 executing program 2: socket(0x25, 0x5, 0x80000001) 17:28:00 executing program 0: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000140)="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", 0xe01, 0x200}], 0x0, 0x0) [ 700.911988][ C1] I/O error, dev loop5, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 700.923474][T23706] NILFS (loop5): unable to read secondary superblock (blocksize = 1024) [ 700.932559][T23704] loop3: detected capacity change from 0 to 140 17:28:00 executing program 4: syz_open_dev$usbfs(&(0x7f0000001880), 0x75b8, 0x0) 17:28:00 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x29c0, 0x0) [ 700.957806][T23706] NILFS (loop5): couldn't find nilfs on the device [ 700.977447][T23704] EXT4-fs (loop3): bad geometry: block count 341 exceeds size of device (70 blocks) 17:28:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 17:28:00 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 17:28:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="c9", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 17:28:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) [ 701.044827][T23716] loop0: detected capacity change from 0 to 8 17:28:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000600100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:00 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$audion(0x0, 0x0, 0x30d000) syz_genetlink_get_family_id$mptcp(0x0, r0) syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x6400) 17:28:00 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 17:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f700)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x0) 17:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "3a4924e0226a4c84705322eb4f22fe92903d368a950739314729b147440b619a507be48aeaf09a6c23c7ef4c4cd85a561b640f2fcd0a1325aa626f1d7706fc069b3187ec5d4de3cbf91a00"}, 0xd8) 17:28:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_vlan\x00'}) [ 701.171854][ T3639] Dev loop0: unable to read RDB block 8 [ 701.179647][T23726] loop3: detected capacity change from 0 to 140 17:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) 17:28:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/180, &(0x7f0000000100)=0xffffffffffffff17) 17:28:00 executing program 4: socketpair(0x28, 0x0, 0x3, 0x0) [ 701.222329][ T3639] loop0: unable to read partition table [ 701.227509][T23726] EXT4-fs (loop3): bad geometry: block count 352 exceeds size of device (70 blocks) [ 701.237713][ T3639] loop0: partition table beyond EOD, truncated 17:28:00 executing program 5: syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0xe01) 17:28:00 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 17:28:00 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 17:28:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000680100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:00 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) 17:28:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 17:28:00 executing program 5: modify_ldt$write(0x1, &(0x7f0000000300)={0x200}, 0x10) 17:28:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 17:28:00 executing program 1: modify_ldt$write(0x1, &(0x7f0000000040)={0xbe9f}, 0x10) 17:28:01 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 701.436088][T23749] loop3: detected capacity change from 0 to 140 [ 701.443448][ C1] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.454388][T23750] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 701.468578][T23750] NILFS (loop4): couldn't find nilfs on the device 17:28:01 executing program 0: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000180)="3b79d56aa4bcc374", 0x8, 0xfffffffffffffff8}], 0x0, 0x0) 17:28:01 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0}], 0x0, &(0x7f00000003c0)) [ 701.524578][T23749] EXT4-fs (loop3): bad geometry: block count 360 exceeds size of device (70 blocks) 17:28:01 executing program 4: add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000440)="02", 0x1, 0xfffffffffffffffd) 17:28:01 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000940)=[{}], 0x1, 0x0) 17:28:01 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000300)="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", 0xffb, 0x5}], 0x0, &(0x7f0000001500)) 17:28:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 701.589734][T23763] loop0: detected capacity change from 0 to 16383 17:28:01 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2941) [ 701.644203][T23766] Can't find a SQUASHFS superblock on loop2 [ 701.681612][T23774] loop5: detected capacity change from 0 to 8 [ 701.688482][T23773] loop3: detected capacity change from 0 to 140 17:28:01 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x321000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 17:28:01 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) [ 701.703118][T23774] Dev loop5: unable to read RDB block 8 [ 701.740844][T23774] loop5: unable to read partition table 17:28:01 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 17:28:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @local}], 0x10) 17:28:01 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 701.751550][T23773] EXT4-fs (loop3): bad geometry: block count 364 exceeds size of device (70 blocks) [ 701.771842][T23774] loop5: partition table beyond EOD, truncated 17:28:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 17:28:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000740100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 701.826643][T23774] NILFS (loop5): couldn't find nilfs on the device [ 701.834464][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.849398][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:28:01 executing program 2: clock_gettime(0x0, &(0x7f0000001240)) 17:28:01 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000dc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x14, r0, 0x301}, 0x14}}, 0x0) [ 701.889118][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.933216][T23789] loop3: detected capacity change from 0 to 140 [ 701.936924][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read 17:28:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800064a8aaf70d17f"], 0x34}}, 0x0) 17:28:01 executing program 4: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:01 executing program 0: clock_adjtime(0x0, &(0x7f0000000040)={0x1}) 17:28:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0xff3b, &(0x7f0000001000)={&(0x7f0000000140)={0x1c, r2, 0x5}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 17:28:01 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) [ 702.006300][T23789] EXT4-fs (loop3): bad geometry: block count 372 exceeds size of device (70 blocks) 17:28:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:01 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200) 17:28:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)) [ 702.065033][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:28:01 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[]) [ 702.127098][T23798] must specify at least one socket 17:28:01 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001040)) [ 702.155830][T23804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:28:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 17:28:01 executing program 4: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000180)="3b79d56aa4bcc3741e", 0x9, 0xfffffffffffffff8}], 0x0, 0x0) [ 702.201916][T23807] loop3: detected capacity change from 0 to 140 [ 702.228624][ C1] I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 702.239332][T23811] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) 17:28:01 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000540)=[{&(0x7f00000002c0)="18", 0x1}]) 17:28:01 executing program 2: syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x2002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000) [ 702.267470][T23807] EXT4-fs (loop3): bad geometry: block count 378 exceeds size of device (70 blocks) [ 702.280840][T23811] NILFS (loop1): couldn't find nilfs on the device [ 702.290583][T23818] loop4: detected capacity change from 0 to 16383 [ 702.304498][ T3830] Buffer I/O error on dev loop4, logical block 0, async page read 17:28:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0x4}]}}}}}) 17:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 702.317600][ T3830] Buffer I/O error on dev loop4, logical block 0, async page read [ 702.337313][ T3830] loop4: unable to read partition table 17:28:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 17:28:01 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000800100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x203, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x24}}, 0x0) 17:28:01 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffed0) 17:28:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 17:28:01 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 702.472783][T23831] loop3: detected capacity change from 0 to 140 17:28:02 executing program 5: syz_open_dev$vcsa(&(0x7f00000012c0), 0x0, 0x20801) 17:28:02 executing program 0: syz_mount_image$adfs(&(0x7f00000000c0), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000140)="2d5d2f6804d5d570d9ebdc79c2797f1455256c1f83aec5af53a65809adbff2caab9121f69ae3d68eb229cd55fe53d5cc2a9dc323435abc620a31567e8dcec3f47a492c6c7a962b875e1b57633d2f43576af4d7e19df5da1779c76bab50c12b68250fe0ad5cc3dc1b46cf359dc1197b7c23726ddfaa2549e443a3de5e8f4775a6", 0x80, 0x8}, {&(0x7f00000001c0)="4fa4b8c91868be793d313e309c0bbd941f6c1b30634995ab9224b7a1c3704be5558e7a2198b80191ac521a8c6d7d8c5fd1ea144628989761cd305ddf8a64a21a39814127a9f51a9e1e579243b7ad0393791b8e65de77e2e7b53b07dc330e4e75aa32101569fbfa8f40c24acd151a580ba21436d3d1648f0a82617da426676d4ac4d70d044da9ad772c", 0x89}, {&(0x7f0000000280)="eee7bc4e03fe9923c6c7870e936e74c0a0a449496ffff1679cde3c502d31c5c3ddbe0ce8698cadcf7e895e15ba39d93c300e4e134c36082084eb550eceb9be94707ae9f199", 0x45, 0x1000}], 0x0, &(0x7f00000004c0)={[{}, {}, {}], [{@subj_role={'subj_role', 0x3d, ':'}}]}) 17:28:02 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0, 0x0) 17:28:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) [ 702.513584][T23837] must specify at least one socket [ 702.533049][T23831] EXT4-fs (loop3): bad geometry: block count 384 exceeds size of device (70 blocks) 17:28:02 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={0x0}) [ 702.601113][T23843] loop0: detected capacity change from 0 to 16 17:28:02 executing program 2: syz_open_dev$mouse(&(0x7f0000000040), 0xff, 0x10940) 17:28:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 17:28:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000840100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:02 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xe75, 0x1, "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"}]}, 0xec4}}, 0x0) [ 702.669399][ T2967] Buffer I/O error on dev loop0, logical block 0, async page read [ 702.691425][ T2967] ldm_validate_partition_table(): Disk read failed. 17:28:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) 17:28:02 executing program 5: syz_mount_image$adfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000280)="eee7bc4e03fe9923c6c7870e936e74c0a0a449496ffff1679cde3c502d31c5c3ddbe0ce8698cadcf7e895e15ba39d93c300e4e134c36082084eb550eceb9be94707ae9f1990641698f0d25a60973c16c", 0x50, 0x1000}], 0x408, &(0x7f00000004c0)={[{}, {}, {}], [{@subj_role={'subj_role', 0x3d, ':'}}]}) [ 702.720284][ T2967] Dev loop0: unable to read RDB block 0 [ 702.745782][T23855] loop3: detected capacity change from 0 to 140 [ 702.756143][ T2967] loop0: unable to read partition table 17:28:02 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa2200, 0x0) 17:28:02 executing program 2: set_mempolicy(0x4003, &(0x7f0000000080)=0x9, 0x400) 17:28:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 702.777454][ T2967] loop0: partition table beyond EOD, truncated [ 702.788564][T23855] EXT4-fs (loop3): bad geometry: block count 388 exceeds size of device (70 blocks) [ 702.800731][T23860] loop5: detected capacity change from 0 to 16 17:28:02 executing program 4: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x80000000}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x80000000]}, 0x8}) 17:28:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) 17:28:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0, r0) 17:28:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000008b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 702.845719][T23860] loop5: unable to read partition table [ 702.865034][T23860] loop5: partition table beyond EOD, truncated 17:28:02 executing program 2: syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x200) 17:28:02 executing program 1: syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x46201) [ 702.918644][T23860] ADFS-fs (loop5): unrecognised mount option "subj_role=:" or missing value 17:28:02 executing program 4: getgroups(0x1, &(0x7f0000000100)=[0xee01]) 17:28:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r0) 17:28:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x1, &(0x7f0000001640)={[{@nodots}, {@fat=@quiet}, {@fat=@dos1xfloppy}]}) 17:28:02 executing program 2: socketpair(0x1d, 0x0, 0x7, 0x0) [ 703.001422][T23874] loop3: detected capacity change from 0 to 140 17:28:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x1) [ 703.068324][T23874] EXT4-fs (loop3): bad geometry: block count 395 exceeds size of device (70 blocks) 17:28:02 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000080)="2e7f5ebc6602b081ae5c15cdbf7a0820", 0x10, 0x10000}, {&(0x7f00000000c0), 0x0, 0x8000000000000000}, {&(0x7f0000000180)=';', 0x1, 0xfffffffffffffff8}], 0x83040, &(0x7f0000001340)={[{@show_sys_files_yes}, {@utf8}, {@fmask={'fmask', 0x3d, 0x3}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_lt={'fowner<', 0xee01}}, {@obj_role={'obj_role', 0x3d, ').}@.&\xd4'}}]}) 17:28:02 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) 17:28:02 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:28:02 executing program 1: syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x4140) [ 703.123970][T23885] FAT-fs (loop0): bogus number of reserved sectors [ 703.147361][T23885] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code 17:28:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000008c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:02 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f000000ad40)='./binderfs/binder1\x00', 0x0, 0x0) [ 703.182424][T23885] FAT-fs (loop0): Can't find a valid FAT filesystem [ 703.198755][T23891] loop4: detected capacity change from 0 to 16383 17:28:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) 17:28:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 703.251168][T23891] ======================================================= [ 703.251168][T23891] WARNING: The mand mount option has been deprecated and [ 703.251168][T23891] and is ignored by this kernel. Remove the mand [ 703.251168][T23891] option from the mount to silence this warning. [ 703.251168][T23891] ======================================================= 17:28:02 executing program 5: clock_gettime(0x0, &(0x7f0000000140)={0x0}) select(0x40, &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000180)={r0}) [ 703.336747][T23901] loop3: detected capacity change from 0 to 140 17:28:02 executing program 0: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000400)='\f', 0x1, 0xeba1}], 0x0, 0x0) 17:28:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048ae65, 0x0) 17:28:02 executing program 1: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ff8000/0x2000)=nil) [ 703.378655][T23901] EXT4-fs (loop3): bad geometry: block count 396 exceeds size of device (70 blocks) 17:28:03 executing program 4: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[{&(0x7f0000000340)="bd", 0x1}, {&(0x7f0000000400)='\f', 0x1, 0xeba1}, {&(0x7f0000000500)=']', 0x1}, {&(0x7f0000000580)='6', 0x1, 0x8000000000000001}], 0x0, 0x0) 17:28:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000fc0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae0a, 0x0) 17:28:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @link_local}) [ 703.517004][T23915] loop0: detected capacity change from 0 to 235 17:28:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x217f}) [ 703.561384][T23918] loop3: detected capacity change from 0 to 140 17:28:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae03, 0x0) [ 703.603052][T23922] loop4: detected capacity change from 0 to 8192 [ 703.618634][T23918] EXT4-fs (loop3): bad geometry: block count 508 exceeds size of device (70 blocks) 17:28:03 executing program 1: io_setup(0x11ab, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x3, 0x300) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 17:28:03 executing program 5: prctl$PR_GET_TSC(0x3, 0x0) 17:28:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2d) 17:28:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000fe0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v3, 0x18, 0x0) 17:28:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x1, &(0x7f0000000180)=@raw=[@kfunc], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 703.760274][T23938] loop3: detected capacity change from 0 to 140 [ 703.798961][T23938] EXT4-fs (loop3): bad geometry: block count 510 exceeds size of device (70 blocks) 17:28:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x808f4db77f0000) 17:28:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x60) 17:28:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000080200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:03 executing program 1: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[], [{@permit_directio}]}) 17:28:03 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40042, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 17:28:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:28:03 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x201}, 0x14}}, 0x0) [ 704.001504][T23951] loop3: detected capacity change from 0 to 140 [ 704.029406][T23956] romfs: Unknown parameter 'permit_directio' 17:28:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc208ae62, 0x0) 17:28:03 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x82240, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 17:28:03 executing program 0: msgget(0x1, 0x7a4) 17:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) [ 704.062639][T23951] EXT4-fs (loop3): bad geometry: block count 520 exceeds size of device (70 blocks) 17:28:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000140)=@raw=[@cb_func], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:28:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa1) 17:28:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:03 executing program 5: syz_io_uring_setup(0xc, &(0x7f00000000c0), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:28:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbf) 17:28:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000001780)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) 17:28:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe8030000}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 17:28:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='4'], 0x28}}, 0x0) 17:28:03 executing program 5: r0 = syz_io_uring_setup(0x7150, &(0x7f00000004c0), &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) [ 704.351330][T23978] loop3: detected capacity change from 0 to 140 17:28:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0xffffffffffffffff}], 0x1}}], 0x1, 0x0) 17:28:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4030ae7b, 0x0) 17:28:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbe) [ 704.398515][T23978] EXT4-fs (loop3): bad geometry: block count 768 exceeds size of device (70 blocks) 17:28:04 executing program 5: bpf$PROG_LOAD(0x22, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2c) 17:28:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x25) 17:28:04 executing program 2: r0 = syz_io_uring_setup(0x116a, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x55b0, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000004c0), &(0x7f0000000480)) 17:28:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:04 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x2, "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"}, 0xfd1, 0x800) 17:28:04 executing program 1: r0 = syz_io_uring_setup(0x344b, &(0x7f0000000000)={0x0, 0xbdcd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 704.664812][T24006] loop3: detected capacity change from 0 to 140 17:28:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8010aebb, &(0x7f0000000040)) 17:28:04 executing program 0: mknodat$null(0xffffffffffffff9c, 0x0, 0xe987b65b49eb3f5d, 0x103) 17:28:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc) 17:28:04 executing program 2: fanotify_mark(0xffffffffffffffff, 0x1, 0x10, 0xffffffffffffffff, 0x0) [ 704.737413][T24006] EXT4-fs (loop3): bad geometry: block count 1280 exceeds size of device (70 blocks) 17:28:04 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3e, 0x0, 0x0, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:04 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_allocate_blocks\x00', r1}, 0x10) write(r0, &(0x7f0000000380)='4', 0x1) 17:28:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x7b) 17:28:04 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x24, &(0x7f0000000380)=""/36, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 17:28:04 executing program 1: io_setup(0x1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000001340)) io_setup(0x101, &(0x7f0000001580)) [ 704.951106][ T27] audit: type=1800 audit(1657819684.434:690): pid=24029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1165 res=0 errno=0 [ 704.983366][T24028] loop3: detected capacity change from 0 to 140 17:28:04 executing program 4: io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0]) 17:28:04 executing program 0: bpf$PROG_LOAD(0x15, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x200001, 0x0) 17:28:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000006c0)) select(0x40, &(0x7f0000000600), &(0x7f0000000640)={0x8}, 0x0, 0x0) 17:28:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6000000) [ 705.049965][T24028] EXT4-fs (loop3): bad geometry: block count 1792 exceeds size of device (70 blocks) 17:28:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000001700)={0x18}, 0x18) 17:28:04 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x20) 17:28:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:04 executing program 2: prctl$PR_GET_TSC(0x2, &(0x7f0000001040)) 17:28:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) 17:28:04 executing program 1: io_setup(0x3ff, &(0x7f00000004c0)=0x0) io_setup(0x1000, &(0x7f0000000000)=0x0) io_destroy(r1) io_destroy(r0) 17:28:04 executing program 0: prctl$PR_GET_TSC(0x35, 0x0) 17:28:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="0b5c660deeb3"}) [ 705.248647][T24050] loop3: detected capacity change from 0 to 140 17:28:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa7) 17:28:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2012071, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x116a, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 17:28:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x22) 17:28:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 17:28:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3c) [ 705.379634][T24050] EXT4-fs (loop3): bad geometry: block count 2304 exceeds size of device (70 blocks) 17:28:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000600), &(0x7f0000000640)={0x8}, 0x0, &(0x7f0000000700)) 17:28:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000040)) 17:28:05 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000026c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xf, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 17:28:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x6, 0x4) 17:28:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x28) 17:28:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x52) 17:28:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4188aec6, 0x0) 17:28:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x32) [ 705.565791][T24082] loop3: detected capacity change from 0 to 140 [ 705.627918][T24082] EXT4-fs (loop3): bad geometry: block count 2560 exceeds size of device (70 blocks) 17:28:05 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0xa80c2, 0x0) 17:28:05 executing program 5: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x8]) 17:28:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x7a) 17:28:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:05 executing program 4: syz_mount_image$romfs(&(0x7f00000002c0), 0x0, 0x0, 0x5, &(0x7f00000007c0)=[{0x0, 0x0, 0x4b0}, {&(0x7f0000000400), 0x0, 0xeba1}, {&(0x7f0000000500), 0x0, 0x3f}, {0x0, 0x0, 0x8000000000000001}, {0x0}], 0x1000080, &(0x7f0000000880)={[{'-'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@audit}, {@dont_measure}, {@dont_measure}, {@appraise_type}]}) 17:28:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="28e259118f81498008", 0x9) 17:28:05 executing program 0: syz_mount_image$romfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x803000, &(0x7f0000000580)=ANY=[]) 17:28:05 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)='6', 0x1, 0x8000000000000001}], 0x0, 0x0) [ 705.812631][T24105] loop4: detected capacity change from 0 to 8192 17:28:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x4400) [ 705.858697][T24107] loop3: detected capacity change from 0 to 140 17:28:05 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) [ 705.902823][T24107] EXT4-fs (loop3): bad geometry: block count 2816 exceeds size of device (70 blocks) [ 705.923300][T24113] loop1: detected capacity change from 0 to 8192 17:28:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020940d, &(0x7f0000000080)={0x0, 0x0}) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 17:28:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:05 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="8520"], &(0x7f0000000040)='GPL\x00', 0x7, 0x80, &(0x7f0000000080)=""/128, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x0) 17:28:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:28:05 executing program 0: pipe2$9p(0x0, 0x84040) 17:28:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 17:28:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 706.153112][T24127] loop3: detected capacity change from 0 to 140 [ 706.177362][T24127] EXT4-fs (loop3): bad geometry: block count 3072 exceeds size of device (70 blocks) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffdef}}, 0x0) 17:28:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x4, r2}) 17:28:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 17:28:05 executing program 5: prctl$PR_GET_TSC(0x28, &(0x7f0000001040)) 17:28:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2402, 0x0) 17:28:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchown(r0, 0x0, 0xee00) [ 706.378247][T24147] loop3: detected capacity change from 0 to 140 [ 706.461390][T24147] EXT4-fs (loop3): bad geometry: block count 3328 exceeds size of device (70 blocks) 17:28:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8208ae63, &(0x7f0000000040)) 17:28:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 17:28:06 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='~', 0x1}]) 17:28:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0}) 17:28:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x2, &(0x7f0000000180)=@raw=[@map_idx], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:28:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x6) 17:28:06 executing program 4: prctl$PR_GET_TSC(0x34, 0x0) [ 706.694226][T24168] loop3: detected capacity change from 0 to 140 17:28:06 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='~', 0x1}]) [ 706.744360][T24168] EXT4-fs (loop3): bad geometry: block count 3840 exceeds size of device (70 blocks) 17:28:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4d) 17:28:06 executing program 2: io_setup(0x1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000001340)) 17:28:06 executing program 4: prctl$PR_GET_TSC(0x24, 0x0) 17:28:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:06 executing program 0: prctl$PR_GET_TSC(0x19, &(0x7f0000001040)) 17:28:06 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000540)="a35f", 0x2, 0xfff}], 0x0, 0x0) 17:28:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter, 0x48) 17:28:06 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x5}, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) [ 706.967752][T24191] loop3: detected capacity change from 0 to 140 17:28:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x1000000}) 17:28:06 executing program 0: semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 17:28:06 executing program 4: r0 = memfd_secret(0x0) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) [ 707.010436][T24191] EXT4-fs (loop3): bad geometry: block count 4608 exceeds size of device (70 blocks) [ 707.012946][T24197] loop1: detected capacity change from 0 to 15 17:28:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) 17:28:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x94) [ 707.081171][ T2967] Dev loop1: unable to read RDB block 15 [ 707.105495][ T2967] loop1: unable to read partition table 17:28:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 707.127391][ T2967] loop1: partition table beyond EOD, truncated 17:28:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 17:28:06 executing program 1: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 17:28:06 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:06 executing program 4: syz_io_uring_setup(0x1ae, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 17:28:06 executing program 5: r0 = epoll_create(0xd26) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0x2]}, 0x8) 17:28:06 executing program 0: bpf$PROG_LOAD(0xa, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 707.244857][T24214] loop3: detected capacity change from 0 to 140 17:28:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2f) 17:28:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 17:28:06 executing program 5: r0 = syz_io_uring_setup(0x7869, &(0x7f0000000140), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) [ 707.304448][T24214] EXT4-fs (loop3): bad geometry: block count 5120 exceeds size of device (70 blocks) 17:28:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = memfd_secret(0x0) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x1ba3, &(0x7f0000000140), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 17:28:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 17:28:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:06 executing program 2: io_setup(0x1e5, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 17:28:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc1) 17:28:06 executing program 4: bpf$PROG_LOAD(0x1d, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:07 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = memfd_secret(0x0) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x1ba3, &(0x7f0000000140), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 17:28:07 executing program 0: io_setup(0xe6ce, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) syz_io_uring_setup(0x116a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x249}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 707.498339][T24239] loop3: detected capacity change from 0 to 140 17:28:07 executing program 4: syz_io_uring_setup(0x19d, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x7bc8, &(0x7f0000000140), &(0x7f00007ff000/0x800000)=nil, &(0x7f0000d1f000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 707.540154][T24239] EXT4-fs (loop3): bad geometry: block count 7936 exceeds size of device (70 blocks) 17:28:07 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000026c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:28:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:07 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000840)='.log\x00', 0x200000, 0x0) 17:28:07 executing program 1: syz_io_uring_setup(0x19d, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x7bc8, &(0x7f0000000140), &(0x7f00007ff000/0x800000)=nil, &(0x7f0000d1f000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1906, &(0x7f00000002c0), &(0x7f0000972000/0x2000)=nil, &(0x7f0000e99000/0x8000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 17:28:07 executing program 4: prctl$PR_GET_TSC(0x22, 0x0) 17:28:07 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x204}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 17:28:07 executing program 5: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/81) r0 = msgget(0x1, 0x7a4) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000140)=""/177) timerfd_create(0x4, 0x400) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) [ 707.719162][T24257] loop3: detected capacity change from 0 to 140 17:28:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 17:28:07 executing program 2: socketpair(0x11, 0xa, 0xffff, &(0x7f0000000640)) 17:28:07 executing program 5: prctl$PR_GET_TSC(0x3e, &(0x7f0000001040)) 17:28:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}]}}, &(0x7f0000000340)=""/242, 0x32, 0xf2, 0x1}, 0x20) [ 707.806476][T24257] EXT4-fs (loop3): bad geometry: block count 8192 exceeds size of device (70 blocks) 17:28:07 executing program 1: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5}, 0x0, 0x0) 17:28:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4040ae77, &(0x7f0000000040)) 17:28:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000003d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:07 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x40001, 0x0) 17:28:07 executing program 0: bpf$PROG_LOAD(0xe, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) 17:28:07 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x3, 0x0, 0x1800}, {}, {}], 0x3) [ 708.036671][T24282] loop3: detected capacity change from 0 to 140 17:28:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa4) [ 708.080370][T24282] EXT4-fs (loop3): bad geometry: block count 15616 exceeds size of device (70 blocks) 17:28:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) 17:28:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000003f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x79) 17:28:07 executing program 5: prctl$PR_GET_TSC(0x3a, &(0x7f0000001040)) [ 708.206587][T24299] loop3: detected capacity change from 0 to 140 [ 708.244527][T24299] EXT4-fs (loop3): bad geometry: block count 16128 exceeds size of device (70 blocks) 17:28:08 executing program 1: syz_mount_image$romfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)) 17:28:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x62) 17:28:08 executing program 5: process_madvise(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140), 0xfffffffffffffd67}, {&(0x7f0000000140)="f56264090e67507b86831490b8ea63216da26ba7ef2a370b784981b0e8fdaa99a34d8e93903cbc1a2fe80e762032b04bcbd5c112028d0889646aaa3562cee91b311f37e960a47dc35475e88971424369bf", 0x51}, {&(0x7f00000000c0)="bd6fc04d3f3da8921b914020cb7fd10cb2ef10738963a17a822c882536955826b6c9e6350d5398f3411266daf8429c91eec2f22e180a49ad1bcb1726dace9caba931f5a7f8b8125eec4d266bdd02a63416e9ce6fa56e0858b88189ce2fe4e7fa39f4fc5028dfbdd75b33b29c4f2b", 0x6e}, {&(0x7f00000003c0)="8dcbe7758c9fd3803c54d22091a41f236d404237d0ff3817c69420b4186340c3be00027e0e10d8dd66012ae289f1c2de339f7019817396842703c760ff8d11aee4f46b8eab711093097114ec8e6b6afcce058da69d9706c1386eea2e65cb8b48fc674e57ae3ab37a9ebe8ebd41bc546d5cb908d26e1c602c9c405c3d929f0aefe9ec3c95ad20e2cfc1a82f8ca13c260662281bc628e36c3755de15f86f3f95ee3a7b84c64ce1fd0c41927ed7cbdae62bd105369c31d89812247d43995b60259823e5b8c242f09d1f28797cea28c995d84c792a04c1099a64d24dadd973eacc", 0xdf}, {&(0x7f00000004c0)="2152c4501f275e07700c476cc61b69bb069b774bfbd72c536280adec5c8351fd60fc222971450d9984369ea924fe832c1790d2b816f796a5ccca22df5372adbd26e34f7ee836d90714a3e4d018839dbbc111e1ab2be63759e9b7b5daa228f458c7d81a05d205e5e9c59d4883d797abb6c3352af6c71e0a3fba791349667ad7abf454ff4cbf881126fb0a3232456bfa2d36b0778af6d8f3b7c7cade6df9596d344f25988e85706757f7d7ffe51017c180b613ccdab97821b60a9396afa47781e8ab3056e1ced059c281809f5f6acdf9b3c4057734dea7a5e4e00c6b5c16a24501ee4413510b541fb52bdc446a3cf1ce28605289f7d8d3a22569870bb494156a83ace792c7d22f98e7f0b245", 0x10b}], 0x5, 0x0, 0x0) 17:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb}, 0x1, 0x0, 0xb22a}, 0x0) 17:28:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xfff}) 17:28:08 executing program 5: socketpair(0xa, 0x0, 0x200000, &(0x7f0000000300)) 17:28:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) 17:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) [ 708.840612][T24311] loop3: detected capacity change from 0 to 140 [ 708.873631][ T3830] blk_print_req_error: 3 callbacks suppressed [ 708.873648][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:28:08 executing program 1: msgsnd(0x0, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 708.955137][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:28:08 executing program 5: prctl$PR_GET_TSC(0x3a, 0x0) 17:28:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000c08e14a0aa3f8"], &(0x7f0000000040)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 17:28:08 executing program 0: socketpair(0x10, 0x803, 0x0, &(0x7f0000000080)) [ 709.023434][ T3830] loop3: unable to read partition table 17:28:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) [ 709.079461][T24311] EXT4-fs (loop3): bad geometry: block count 16384 exceeds size of device (70 blocks) 17:28:08 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000400)='\f', 0x1, 0xeba1}], 0x1000080, &(0x7f0000000880)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@audit}, {@dont_measure}]}) 17:28:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:08 executing program 5: syz_io_uring_setup(0x116a, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x65bd, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x116a, &(0x7f0000000240)={0x0, 0x2000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 17:28:08 executing program 4: io_setup(0x76a1, &(0x7f0000000000)=0x0) io_destroy(r0) 17:28:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc208ae62, &(0x7f0000000040)) 17:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 709.280017][T24337] loop1: detected capacity change from 0 to 235 17:28:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 709.350296][T24344] loop3: detected capacity change from 0 to 140 [ 709.363394][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.373112][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.382606][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:28:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x23) [ 709.395166][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.403640][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.413679][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.427171][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.438510][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.450636][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.462125][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read [ 709.475214][ T3812] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 709.477409][ T3830] loop3: unable to read partition table [ 709.496375][T24344] EXT4-fs (loop3): bad geometry: block count 17920 exceeds size of device (70 blocks) 17:28:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae44, &(0x7f0000000040)) 17:28:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}, {0x0}], 0x9}}], 0x1, 0x0) 17:28:09 executing program 2: io_setup(0x100, &(0x7f00000001c0)) 17:28:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000006300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:09 executing program 1: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x0) [ 709.565417][ T3830] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:28:09 executing program 0: prctl$PR_GET_TSC(0x37, 0x0) 17:28:09 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}]) 17:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev}}}], 0x20}}], 0x1, 0x0) 17:28:09 executing program 2: open$dir(&(0x7f0000000200)='./file1\x00', 0x24042, 0x0) 17:28:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc1, &(0x7f00000000c0)=""/193, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 709.749548][T24365] loop3: detected capacity change from 0 to 140 17:28:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x4}) 17:28:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x20000000) [ 709.841723][T24365] EXT4-fs (loop3): bad geometry: block count 25344 exceeds size of device (70 blocks) [ 709.852302][ T27] audit: type=1800 audit(1657819689.334:691): pid=24375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1162 res=0 errno=0 [ 709.916055][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.956774][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:28:09 executing program 4: getresuid(&(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)) 17:28:09 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x3, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff}}) 17:28:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000007300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 710.005172][ T3830] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:28:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, 0x0) 17:28:09 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x155002, 0x0) 17:28:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 710.094782][ T3830] Buffer I/O error on dev loop3, logical block 2, async page read [ 710.103297][T24384] loop3: detected capacity change from 0 to 140 [ 710.128963][ T3830] Buffer I/O error on dev loop3, logical block 3, async page read 17:28:09 executing program 4: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x28d8cd2abb6c4e9e) 17:28:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000007900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) [ 710.206476][T24384] EXT4-fs (loop3): bad geometry: block count 25344 exceeds size of device (70 blocks) 17:28:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0}) 17:28:09 executing program 2: io_setup(0x100, &(0x7f00000001c0)=0x0) io_destroy(r0) [ 710.276546][T24401] loop3: detected capacity change from 0 to 140 [ 710.316307][T24401] EXT4-fs (loop3): bad geometry: block count 30976 exceeds size of device (70 blocks) 17:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 17:28:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8048ae66, 0x0) 17:28:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:10 executing program 0: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:10 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff}, 0xc) 17:28:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 710.609885][T24413] loop3: detected capacity change from 0 to 140 [ 710.623254][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:28:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0xe0002007}) 17:28:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}) 17:28:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) [ 710.698894][ T3830] loop3: unable to read partition table [ 710.726352][T24413] EXT4-fs (loop3): bad geometry: block count 33024 exceeds size of device (70 blocks) 17:28:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0}) 17:28:10 executing program 4: r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x4) 17:28:10 executing program 1: io_setup(0x7, &(0x7f0000001780)=0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[0x0]) 17:28:10 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe9, &(0x7f0000000140)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0}) [ 710.893406][T24434] loop3: detected capacity change from 0 to 140 [ 710.895153][ T3830] ldm_validate_partition_table(): Disk read failed. 17:28:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xf) 17:28:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x61) [ 710.943402][ T3830] loop3: unable to read partition table [ 710.966601][T24434] EXT4-fs (loop3): bad geometry: block count 35840 exceeds size of device (70 blocks) 17:28:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001f800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:10 executing program 4: r0 = socket(0x28, 0x5, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0, 0x7c}}, 0x0) 17:28:10 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) 17:28:10 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) 17:28:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) [ 711.131266][T24456] loop3: detected capacity change from 0 to 140 [ 711.174405][T24456] EXT4-fs (loop3): bad geometry: block count 63489 exceeds size of device (70 blocks) 17:28:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa) 17:28:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae71, &(0x7f0000000040)) 17:28:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000ffa00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:10 executing program 1: bpf$PROG_LOAD(0x7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) sendmsg$alg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@op={0x18}], 0x18}, 0x4080) 17:28:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x42c00) 17:28:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc0) 17:28:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x20000000) 17:28:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x17) [ 711.358736][T24477] loop3: detected capacity change from 0 to 140 [ 711.392494][T24477] EXT4-fs (loop3): bad geometry: block count 64015 exceeds size of device (70 blocks) 17:28:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5450, 0x0) 17:28:10 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x5}, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 17:28:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001fc00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:11 executing program 4: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 17:28:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "e9ace6305858c3330fb5f2e376bdb9360a5927"}) 17:28:11 executing program 2: r0 = msgget(0x3, 0x244) msgctl$IPC_RMID(r0, 0x0) 17:28:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x3e) 17:28:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:11 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 711.566227][T24496] loop3: detected capacity change from 0 to 140 17:28:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x52, r1}) [ 711.624201][ T3830] ldm_validate_partition_table(): Disk read failed. [ 711.639378][ T3830] loop3: unable to read partition table 17:28:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @func]}}, &(0x7f0000000340)=""/242, 0x3e, 0xf2, 0x1}, 0x20) [ 711.668660][T24496] EXT4-fs (loop3): bad geometry: block count 64513 exceeds size of device (70 blocks) 17:28:11 executing program 4: bpf$PROG_LOAD(0x1e, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:28:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) 17:28:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae64, 0x0) 17:28:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000fffe00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:11 executing program 0: syz_io_uring_setup(0x116a, &(0x7f0000000240)={0x0, 0x42d8}, &(0x7f0000f5b000/0x4000)=nil, &(0x7f00009cd000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) 17:28:11 executing program 2: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000340)="bd", 0x1}, {&(0x7f0000000580)='6', 0x1, 0x8000000000000001}], 0x0, 0x0) 17:28:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc008aeba, 0x0) [ 711.861766][T24523] loop2: detected capacity change from 0 to 8192 17:28:11 executing program 0: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 17:28:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 711.911961][T24525] loop3: detected capacity change from 0 to 140 17:28:11 executing program 1: prctl$PR_GET_TSC(0x27, 0x0) 17:28:11 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) [ 711.953133][T24525] EXT4-fs (loop3): bad geometry: block count 65279 exceeds size of device (70 blocks) 17:28:11 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x42, 0x0) 17:28:11 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x204881, 0x1a1) 17:28:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000ff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:11 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={0x0}) 17:28:11 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x38) 17:28:11 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000080)=""/210) 17:28:11 executing program 0: setreuid(0x0, 0xee01) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') 17:28:11 executing program 2: semget$private(0x0, 0x4, 0x1f2) 17:28:11 executing program 4: setreuid(0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 17:28:11 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fallocate(r0, 0x1, 0x0, 0x0) 17:28:11 executing program 5: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e) [ 712.146302][T24549] loop3: detected capacity change from 0 to 140 17:28:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') dup(r0) [ 712.220017][T24549] EXT4-fs (loop3): bad geometry: block count 65280 exceeds size of device (70 blocks) 17:28:11 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x60080, 0x101) 17:28:11 executing program 1: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) 17:28:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000001ff00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:11 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/118) 17:28:11 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 17:28:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) 17:28:11 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000340)=[{0x5}], 0x1) 17:28:11 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0) 17:28:11 executing program 2: semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000140)=""/230) 17:28:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r2}) 17:28:11 executing program 0: open(&(0x7f0000000800)='./file0\x00', 0x40260, 0x0) 17:28:11 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001000)=""/4082) 17:28:11 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/80) [ 712.453843][T24576] loop3: detected capacity change from 0 to 140 17:28:12 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') dup(r0) [ 712.524705][T24576] EXT4-fs (loop3): bad geometry: block count 65281 exceeds size of device (70 blocks) 17:28:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000ffe0f5050c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:12 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 17:28:12 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 17:28:12 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0xa99}, 0x0, 0x0, 0x0) 17:28:12 executing program 2: semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f00000006c0)=""/80) 17:28:12 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x204881, 0x1a3) 17:28:12 executing program 0: semget$private(0x0, 0x1, 0x108) 17:28:12 executing program 5: semget(0x2, 0x0, 0x477) 17:28:12 executing program 4: semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000002c0)=""/5) [ 712.694899][T24601] loop3: detected capacity change from 0 to 140 17:28:12 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) 17:28:12 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) 17:28:12 executing program 2: r0 = getpid() get_robust_list(r0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) [ 712.769351][T24601] EXT4-fs (loop3): bad geometry: block count 99999999 exceeds size of device (70 blocks) 17:28:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:12 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') 17:28:12 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 17:28:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf0ff7f00000000}}, 0x0) 17:28:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/block/loop2', 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:12 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x111241, 0x0) 17:28:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 17:28:12 executing program 1: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000001580)=[{&(0x7f0000000140)="c4f344a5f38458650eedcf3d9cee6e2fb0215013133445798ccf85f4098091510ca7eb29d2608a833640ccd965d42532d78930646b0a015da460f722ca9426893aa4731aa67679b97b334666567e3a44eb588f28b6cb608ed103b0c18db014d8cefc03df100a61a4d0e3bf166ad8ab719f553b89e32c52174187c73dc229f481b72b2770f6e281858da52ef97a36777b9cbff681959b7888c4931eb6c14b0716a516a606314c1c78a3a27c7bc41e78514045e160281b4da6e450dab5315fa891c2865f2e", 0xc4, 0x2}, {&(0x7f0000000240)="0eb58240878894cd5b91211339cb008e6630db58b7040c9999d7ebe46750855e8e6290462c29cab6f9ed66dae7fdcb8632ad695cf75d4dc7d10720c500ea80f07932e963993c62518ef5919e6286edec11e3506bcd873de27d5c32534a04a835df5d080e81240361c1e165977e5dfbd786fb040334e57a5a80df622ef59f1c1489ffb705fae8", 0x86}, {&(0x7f0000000340)="768225c1bca37e7ef8be812c9a068ddaf463ed97a7c6839586da9a88e3ca306909fe060763c19d9ed40c7427db75fcc90a3be31a22c648edc60cfc670ac2077a7b", 0x41, 0xffffffff}, {&(0x7f00000003c0), 0x0, 0x2}, {&(0x7f0000000400)="e3", 0x1, 0x2}, {&(0x7f0000000480)="66c609fbe53beb10fad3c87c192569d2bd2d5b1b112969bceb21f5958b3ed0e3c8c334a9774c0c6e47c28af39f2aa473d727f6a47cb9e857a42f2081d5907006477b2e1f6e0346bf7b5c51b30a3a264b8b8494ac92ba18d54c8710e7d2f7916582c4a8ae417d0939cd22a27db1c939c698e99352f3e60b9a961899756fec18bc577a0b6c69353ad524af2560ea9d5b85f5d5343aa6b43fc2b67fff81b1f42bba7818418dcf4d09a8ea77544532745ea94fe5fd3c7c5dcc6956ee2b468bf399c1e69049c0c8fd386707bb72148eefe4782dc0d4512994eb29dc0fce7b74c0ebd3d0074b273ccd2934e1d67b2741ab9fc2ebd2fa81b4621cd8547a094464f03d23976f0748ac160314a1aa8cdacfc8c24556619e90f6ea3f20f5742d485c7b535f71da41e41ac82f63a516ebe1e2bcde63c7c950f1abc4f8e228a8944bfbd168f4a5e66711d2253be0980961e6dcc3f5da6ce2694840ebd7904c53015b77667f9a2c724f56bfd06cf4df89842600eb5fc6c8288b332cffb0f2f4c4beed121b3fbcec59a636d072dfc91cc3b2a0024ae17ba9ef22d1f0ffbc156fac92f09054a75a8cfd38f5d845894b37de5b757d7bfe679e933b08d6bc1316a55182164cacf0cf99ff5c6783f87b94c2857cb7362bfc6ee8021fc9c93f7956cae046e1606ce7e84b223db7cee95cf595d9e496218ed7cf404f2116f15d2e0cbccb76cf72b12f8430c11e7bf667b4fe6a012e10f9bf86490ec9d67439e7f4f5d0bd4c15e460f9b79374ddca20276901289fe1cc6e2e62dbb920e425aab66ea38d3e6206e24321c471379a62a2b7913609efb05136d4642fc70e36750765a2e30ab0f8c410a3bc5ba076de4f832cfcd26315d01b80e1383cc8878e6180288d5816d51f1064d0cf278afdd2027f396df8b57eb85d18b78f17e3e2fd22f0b9c984f83c458830735128f6d80e91d536be3771c1609d2bb7a032df20aacaaff11ad5d347c52d6c0ee0812b46417d85dff6e13847cf33df867388b82d51504e8e9312ad5cfbeba44fe754e9f46e89ff04149e05f040307fbcf2ddbd805de46c0dab1274945a968a4d484fe881ddf063fa0619841010a944d05b7e6a2dfe9bd9c3d00aec9648b90393806cd958899f72724ffbb042d2da05c9d8277867c6075e0b504511f71b558c5a0232e3044721f2d4ea4f790966a4b281060c966bb94fc4bf90e6b11234154273f8fc9fce57e38b0a7a448e968ac78dd2e812bc3f07d439c24df246915e2c97d440aa170a6ca82aaf8b326e02b702cc433496f1daee7ec7781b96a049cab32f80ab34fe4bf4d0472c99618d5a22224b254dbe0b60204e7cadc60b8a731cd704aa52cca52f77699b1ce6fa5e576ec518cbd5a9a9b6796e7c35d1eba6f735e24e1f435fe15e6422c32d58afd660fcfe3685ca91430bc65e88bb19844a98e0d18526167edaf6753629f558e2f0cf09d81188b4e6e32389b3ad7710ab6b06275d56349ff57ec795829354579390684d7fe50002696ef92253deebc81adcf6233246ecb1244ab51f95f0bb00e61ff68d3ce463294282041b387e21e1a71bf0d8d856e20536ceb5e7afb679bdfbe8df232ed4c8bd07c5754390cb7fff4a01daac6f28868a7b879a0927fca3c47591285dcc5bf9aff9cafc2f165f98521971d1089945ed07a5ce8c3c913559ae2486519b008894b0724334c0fb35ea0fa412851e33c50880ee34e9afa47b797f2a205b8f9db83de71a543390f7912874fccf7e68d395e7f35fa67cb9f9a7ea2e876a5e554e99dd362742df8154dc8cb250ec1be82c7187aec169529d9c9546f38a45ab360b882559f69f84c1252744ca2c2ab5fc76e7f209df2d24a10f93a45949f23a3907e4c9bc5822cf18e411276605ef8b54f2cecc54eb5ddd822258f389ce0a1d27a3ee38ca6fa4a7998ba29ccd757a7a8c17892db311c460f57e33853b65b72c991ca9b2607064cd50c0728783a991309926c25435965f4f15b6031a7bb08cd3b4b13801ae03e34ea268324de9d56cad7eea265d2c92fe121d22eb4ae7cc23d776bb1a4bfa9e1187db0150c63f5f37ba66dd7480904f419a174c06af2e9d3b9d4dac06ae1a3d2d3cbee967c86bc6bb7e872672f9e7fe24c0dcbaa71d5ae3fe86803416c97ee43a95fa8171c281ced0341285cf4512347337afc98076ee3fab0f3e3451bf45ba228aa119495c517efe62833bb6daf1fe2516ee5c410d3e2984997b1542bc9bb396a6921d45648fff41281c872628299eb786f2db1269d63d65eb898a77995d98f7233c0add7177d467ebeeacca05b7a5661adec380fb7fbe4484529ea03d1496354e14a3f64430a66bdf89f05148a7df38fa4fe415ca1b1311dfb07f27c4bea38f82a3f3a1cb3557a6b005fb9eea26f8b803e39323333308ccfae9624e509faf971a4a9c44ccf103bcfbafcd9d2082c953f836927a0dc1273f5ae83aa6318856c5852be2cb05fa3078e80c7633912aa2d83663ba8c2c3dfdee194be22021f3b2fa54d73b52f937cbb5071fc5221e6f4c70762730da20e7071f6b349a197fb756693432e5b4901a00c5c942043cd2ad7aa4d12f1c92c98672d98dff3c789df54532b60e7f84b50a0ea7ec6c10fc351c422f50a0390873ebf95e9676b6655d4f6c7d39dbce68c4bac2584e18fb12265bc7ea94bfd151d1fcbc809df776d123fb5729273f06074b27aa7441fb3990aa1d41bbd65da7474f8d22e1a5e66eb90da1caae50de600b7bd00a9f66d17f4b7cb01b8012a4fbe72b9a4074ce53f4346859cba0528e8630f1a8ae8259127390026163108d987e217f32a92f5618587ffe90e696a4b9a91afdb75358d981aa8fdbc8e8a5da3b2efd47b686032d994577e1940ef07a9f96077502aaaa6c03713f4db4f2c41876c2863ac65aa22bc33a111dbc80d34c7878f61a801ec18649a91baacef9f080803895e32e569d137649b2570fdab662bb96e4fe9041f060b37135609b19050f71b59ddf990894272182da7b1956d82ad112fc8942bc2d701c45fb7792c3a32c025b44560365d196826aba57e07d518bae092ea34ffa1f03d8ad51c322216e188481144674ab44ef563df62c5db4e84df4a20cd64ecf4bfd2d0d96e3ab5851a02cf0cae2b935f628f04918a914a73fbc1d826d5e00012b627a1df9eb0dc0e57e150f81b0afed32d5f7b2b1a49997b225318fc251269e88b94669a127ddc8e1e589ce743511c9320958a86f4d7e586a48ceddfa329e5c360928382f9dd94d11d40ec2ca3a7ecea494cf52c2dffc4c0c0fb4bb8f773e835652f9605a94e610790adff385b842c079aac0efdba400947f1c634c3e8f13a63eaa89a9daddf9e7111a1c47c221fb7e5a3b42d4932813966ddd4bc3afd4ab4e10b4ed44a04ac78acd005bac32e3906227620b35c5b3cdfbf7d612b6ec5f57c92f149bbf3c67d2844f81a741d3b41528881e3f514a460855d77c9709361e541c98b0005372126f8d058887fd16f8cfad66c1b4926be65029912d6f94b484a411840e24026f7471ff3cfe8e6e53691b809e23d94c41f54237e824841c5ba95b242e2e0f885ccfe6546e0fcd79de507407436f27007742f28c19bf46944a443fb02f0388a4252068ff6a0f44b5089473132b8afd5ca189687a9fa05a3eb373e80127b6075f5523430ddaa58dd53ac1206dd96fab785fea7b7cb532b4f9f13d0b9b99fa554fcaa38ca66eba4b6093f51617d3d8ef008a6eebea62b0b024bdc4cca5eb5ead8221481ad7aee49fd1fe752f4d7ad3eeff615dca9bd6467851c6b30152e8710b27e093acbe7b780fa79a1ab5f4dca55d4d164c4289e70a178c3f63f606893b9075b1e6600e64483235e8d027e943b933dbce8c6948b8d79b838658b4fd1d8207af0afdaaf3569488b3ebb8ea76a80778de5a50f2c28bea08bc12a2643a8377d02b0f6416b14f6ca59962cf559f14846b05b5ba84cea262b2d94f2d1fbf05707dbee4239b442d45af1077037a36d9204ca14e3ac7a8bc8791b11408959e76a5a8f648ae494ef8b4afdbef63601bd61f69b903eebbf5320b344f27615fa92720d94ca03cb35c623e01282e02063da4f2a3c49c48fbf7ef3d97459332514c20fb101e9e64bcfcbe70737a5f3b93703abbb16f611d9526e7639f2e483cf886a073344893486d44a6b639fe0a08737afca860e6cce1282bdadfc44d36adc0f39f664e382b103354a30452daae3ae25141cc0f249dc57dcdebaf0ce109931e389d31fdd325951637481383ce6717badc5f29b8cc62d8f8", 0xbcf, 0x2b91}, {&(0x7f0000001480)="4c62c778f29f0366beff2c3c73641332252be7a1d35c7a71f908d39f78cbbd1fb77c6d613ba2561997e71f5470639e55aa273a4312ed34e97f3762ccc9603a91d13e14efa7e8f260854de516c266265098aa8b", 0x53, 0xfffffffeffffffff}], 0x21000, &(0x7f0000001640)={[{@whint_mode_fs}, {@discard}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', 0xee01}}, {@obj_user={'obj_user', 0x3d, '+]\xae+(&\'\''}}]}) [ 712.977392][T24626] loop3: detected capacity change from 0 to 140 17:28:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=@ipv4_newnexthop={0x20, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 17:28:12 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000800), 0x48) 17:28:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4}, {0x6}]}) 17:28:12 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x9}]) [ 713.021177][T24626] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (70 blocks) [ 713.036975][T24636] loop1: detected capacity change from 0 to 264192 17:28:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:12 executing program 4: select(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x3}, &(0x7f00000002c0)={0x0, 0xea60}) 17:28:12 executing program 1: io_setup(0xaa0c, &(0x7f0000000040)) [ 713.099510][ T27] audit: type=1326 audit(1657819692.584:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24637 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff90f289109 code=0x0 17:28:12 executing program 2: io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000100)={0x0, r1+60000000}) 17:28:12 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 17:28:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 17:28:12 executing program 5: io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x4, &(0x7f0000000040)) io_destroy(r0) [ 713.222456][T24650] loop3: detected capacity change from 0 to 140 [ 713.251198][T24650] EXT4-fs (loop3): bad geometry: block count 768 exceeds size of device (70 blocks) 17:28:12 executing program 0: io_setup(0xfffffffb, &(0x7f0000000100)) 17:28:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:28:12 executing program 1: keyctl$search(0x5, 0x0, 0x0, 0x0, 0x0) 17:28:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}}, 0x0) 17:28:12 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000001100)) [ 713.410990][T24663] loop3: detected capacity change from 0 to 140 [ 713.450957][T24663] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (70 blocks) 17:28:13 executing program 5: syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x2f, 0x50, 0x8, 0x1110, 0x9022, 0x737f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x89, 0xef, 0x3b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}]}}]}}]}}, 0x0) 17:28:13 executing program 1: select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x3}, 0x0, 0x0) [ 713.807005][T19068] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 714.067594][T19068] usb 6-1: Using ep0 maxpacket: 8 17:28:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xd2a8ee4da2c4913f, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) 17:28:13 executing program 4: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) 17:28:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x20, 0x1c, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x20}}, 0x0) 17:28:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x0) [ 714.151926][T24683] loop3: detected capacity change from 0 to 140 [ 714.177178][ T3830] blk_print_req_error: 24 callbacks suppressed [ 714.177197][ T3830] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:28:13 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0xfffffffffffffed0) 17:28:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0xa}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 17:28:13 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xc6, 0x4d, 0x40, 0x10b8, 0x1fa8, 0x7c54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x85, 0x9d, 0x4f, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) [ 714.187421][T19068] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 17:28:13 executing program 2: io_setup(0x0, 0x0) io_setup(0x0, &(0x7f00000005c0)) [ 714.282761][ T3830] buffer_io_error: 22 callbacks suppressed [ 714.282778][ T3830] Buffer I/O error on dev loop3, logical block 0, async page read 17:28:13 executing program 4: r0 = syz_clone(0x30a00580, 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x29, &(0x7f0000000080)={0x0, 0x0, 0xffffffff}) [ 714.356382][ T3830] loop3: unable to read partition table [ 714.399335][T24683] EXT4-fs (loop3): bad geometry: block count 1280 exceeds size of device (70 blocks) [ 714.417408][T19068] usb 6-1: New USB device found, idVendor=1110, idProduct=9022, bcdDevice=73.7f [ 714.441862][T19068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.481084][T19068] usb 6-1: Product: syz [ 714.500006][T19068] usb 6-1: Manufacturer: syz [ 714.519313][T19068] usb 6-1: SerialNumber: syz [ 714.543503][T19068] usb 6-1: config 0 descriptor?? [ 714.598683][T19068] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9022) Rev (0X737F): Eagle II [ 714.642426][ T3690] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 714.777040][T19068] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 715.037038][ T3690] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 715.207514][ T3690] usb 2-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=7c.54 [ 715.216585][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.229623][ T3690] usb 2-1: Product: syz [ 715.233793][ T3690] usb 2-1: Manufacturer: syz [ 715.240203][ T3690] usb 2-1: SerialNumber: syz [ 715.252471][ T3690] usb 2-1: config 0 descriptor?? 17:28:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3}, {}]}) 17:28:14 executing program 0: r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000001440)=[{}], 0x1, 0x0, 0x0, 0x0) 17:28:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$link(0x8, r3, 0xfffffffffffffffd) 17:28:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/btqca', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x81) 17:28:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=@ipv4_newnexthop={0x20, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0xffffffef}]}, 0x20}}, 0x0) 17:28:14 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/113) 17:28:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae6a, 0x0) [ 715.334021][T24702] loop3: detected capacity change from 0 to 140 [ 715.365248][T24702] EXT4-fs (loop3): bad geometry: block count 1792 exceeds size of device (70 blocks) 17:28:14 executing program 5: r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "a83bee2ee05123f8d25ecd039c880b036dc1d1af707997ac80dcdcf23842cc220ae906ee648ec49fe0221d7424ce74c3b9a73d1c1fedb65ff118a5ead795e0db"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) [ 715.517244][ T3690] dvb-usb: found a 'DiBcom NIM8096MD reference design' in cold state, will try to load a firmware [ 715.613270][ T3690] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 715.634651][ T3690] dib0700: firmware download failed at 7 with -22 [ 715.660751][T19068] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 715.678196][T19068] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 715.681099][ T3690] usb 2-1: USB disconnect, device number 2 [ 715.704525][T20260] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 715.721523][T19068] usb 6-1: USB disconnect, device number 12 [ 715.728333][T20260] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 715.751781][T20260] ------------[ cut here ]------------ [ 715.757965][T20260] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 715.766216][T20260] WARNING: CPU: 0 PID: 20260 at fs/sysfs/group.c:278 sysfs_remove_group+0x126/0x170 [ 715.776079][T20260] Modules linked in: [ 715.780479][T20260] CPU: 0 PID: 20260 Comm: kworker/0:3 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 715.790846][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 715.801214][T20260] Workqueue: events request_firmware_work_func [ 715.807714][T20260] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 715.814246][T20260] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 80 3d df 89 e8 44 2a 37 07 <0f> 0b eb 98 e8 71 a9 c9 ff e9 01 ff ff ff 48 89 df e8 64 a9 c9 ff [ 715.834617][T20260] RSP: 0018:ffffc90006b0f970 EFLAGS: 00010286 [ 715.840941][T20260] RAX: 0000000000000000 RBX: ffffffff8a41f640 RCX: 0000000000000000 [ 715.849416][T20260] RDX: ffff88807acb0000 RSI: ffffffff81610608 RDI: fffff52000d61f20 [ 715.858029][T20260] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 715.866020][T20260] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888078caa008 [ 715.874500][T20260] R13: ffffffff8a41fbe0 R14: 1ffff92000d61f41 R15: ffff88807c6ca0a8 [ 715.882771][T20260] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 715.891815][T20260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.898673][T20260] CR2: 00007fedbe7c4d20 CR3: 000000007f6b1000 CR4: 00000000003506f0 [ 715.906662][T20260] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.914686][T20260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 715.923201][T20260] Call Trace: [ 715.926492][T20260] [ 715.929477][T20260] dpm_sysfs_add+0x1f4/0x290 [ 715.934150][T20260] device_add+0xa82/0x1e90 [ 715.938688][T20260] ? lockdep_init_map_type+0x21a/0x7f0 [ 715.944570][T20260] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 715.951343][T20260] ? __init_waitqueue_head+0x6b/0xd0 [ 715.956682][T20260] firmware_fallback_sysfs+0x2d5/0xba0 [ 715.962214][T20260] _request_firmware+0xbca/0x1190 [ 715.967322][T20260] ? assign_fw+0x640/0x640 17:28:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "a83bee2ee05123f8d25ecd039c880b036dc1d1af707997ac80dcdcf23842cc220ae906ee648ec49fe0221d7424ce74c3b9a73d1c1fedb65ff118a5ead795e0db"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) 17:28:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x2c, 0x25, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x17, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x7, &(0x7f0000013800)) 17:28:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x5, 0xf3, &(0x7f0000000080)=""/243, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) 17:28:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}]}, 0x24}}, 0x0) 17:28:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_newnexthop={0x20, 0x12, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 17:28:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) [ 715.971772][T20260] request_firmware_work_func+0xdd/0x230 [ 715.977481][T20260] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 715.983855][T20260] process_one_work+0x991/0x1610 [ 715.988915][T20260] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 715.994326][T20260] ? rwlock_bug.part.0+0x90/0x90 [ 715.999331][T20260] ? _raw_spin_lock_irq+0x41/0x50 [ 716.004408][T20260] worker_thread+0x665/0x1080 [ 716.009286][T20260] ? __kthread_parkme+0x15f/0x220 [ 716.041579][T20260] ? process_one_work+0x1610/0x1610 [ 716.048777][T24722] loop3: detected capacity change from 0 to 140 [ 716.068627][T20260] kthread+0x2e9/0x3a0 [ 716.080884][T20260] ? kthread_complete_and_exit+0x40/0x40 17:28:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_newnexthop={0x24, 0x2d, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}]}, 0x24}}, 0x0) 17:28:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000010c0)={0x14, r1, 0x84a47807b7c8d995}, 0x14}}, 0x0) 17:28:15 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1, 0x4) 17:28:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "a83bee2ee05123f8d25ecd039c880b036dc1d1af707997ac80dcdcf23842cc220ae906ee648ec49fe0221d7424ce74c3b9a73d1c1fedb65ff118a5ead795e0db"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) 17:28:15 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) [ 716.089216][T24722] EXT4-fs (loop3): bad geometry: block count 2048 exceeds size of device (70 blocks) [ 716.129554][T20260] ret_from_fork+0x1f/0x30 [ 716.134072][T20260] 17:28:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "a83bee2ee05123f8d25ecd039c880b036dc1d1af707997ac80dcdcf23842cc220ae906ee648ec49fe0221d7424ce74c3b9a73d1c1fedb65ff118a5ead795e0db"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) 17:28:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3e00}}, 0x1c}}, 0x0) [ 716.176937][T20260] Kernel panic - not syncing: panic_on_warn set ... [ 716.183583][T20260] CPU: 0 PID: 20260 Comm: kworker/0:3 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 716.193320][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 716.203411][T20260] Workqueue: events request_firmware_work_func [ 716.209609][T20260] Call Trace: [ 716.212903][T20260] [ 716.215851][T20260] dump_stack_lvl+0xcd/0x134 [ 716.220478][T20260] panic+0x2d7/0x636 [ 716.224436][T20260] ? panic_print_sys_info.part.0+0x10b/0x10b [ 716.230466][T20260] ? __warn.cold+0x248/0x2c4 [ 716.235092][T20260] ? sysfs_remove_group+0x126/0x170 [ 716.240325][T20260] __warn.cold+0x259/0x2c4 [ 716.244789][T20260] ? __wake_up_klogd.part.0+0x99/0xf0 [ 716.250185][T20260] ? sysfs_remove_group+0x126/0x170 [ 716.255417][T20260] report_bug+0x1bc/0x210 [ 716.259792][T20260] handle_bug+0x3c/0x60 [ 716.263976][T20260] exc_invalid_op+0x14/0x40 [ 716.268508][T20260] asm_exc_invalid_op+0x1b/0x20 [ 716.273385][T20260] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 716.279223][T20260] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 80 3d df 89 e8 44 2a 37 07 <0f> 0b eb 98 e8 71 a9 c9 ff e9 01 ff ff ff 48 89 df e8 64 a9 c9 ff [ 716.298853][T20260] RSP: 0018:ffffc90006b0f970 EFLAGS: 00010286 [ 716.304942][T20260] RAX: 0000000000000000 RBX: ffffffff8a41f640 RCX: 0000000000000000 [ 716.312935][T20260] RDX: ffff88807acb0000 RSI: ffffffff81610608 RDI: fffff52000d61f20 [ 716.320931][T20260] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 716.328919][T20260] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888078caa008 [ 716.336912][T20260] R13: ffffffff8a41fbe0 R14: 1ffff92000d61f41 R15: ffff88807c6ca0a8 [ 716.344916][T20260] ? vprintk+0x88/0x90 [ 716.349022][T20260] dpm_sysfs_add+0x1f4/0x290 [ 716.353647][T20260] device_add+0xa82/0x1e90 [ 716.358109][T20260] ? lockdep_init_map_type+0x21a/0x7f0 [ 716.363596][T20260] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 716.369873][T20260] ? __init_waitqueue_head+0x6b/0xd0 [ 716.375202][T20260] firmware_fallback_sysfs+0x2d5/0xba0 [ 716.380701][T20260] _request_firmware+0xbca/0x1190 [ 716.385788][T20260] ? assign_fw+0x640/0x640 [ 716.390249][T20260] request_firmware_work_func+0xdd/0x230 [ 716.395916][T20260] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 716.402290][T20260] process_one_work+0x991/0x1610 [ 716.407272][T20260] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 716.412678][T20260] ? rwlock_bug.part.0+0x90/0x90 [ 716.417639][T20260] ? _raw_spin_lock_irq+0x41/0x50 [ 716.422706][T20260] worker_thread+0x665/0x1080 [ 716.427428][T20260] ? __kthread_parkme+0x15f/0x220 [ 716.432480][T20260] ? process_one_work+0x1610/0x1610 [ 716.437710][T20260] kthread+0x2e9/0x3a0 [ 716.441811][T20260] ? kthread_complete_and_exit+0x40/0x40 [ 716.447477][T20260] ret_from_fork+0x1f/0x30 [ 716.451945][T20260] [ 716.455341][T20260] Kernel Offset: disabled [ 716.463789][T20260] Rebooting in 86400 seconds..