1f8d5ecaed2ae661151593d63612c8dc3d63b43a56928a549c65974a8b1c2bff291c0e5e5fc904d2566604ac9a6e94e0f1e773f507ff00959a6fc42c0813a9dfbca67a992f3817edd22e460fbfddd2c1509a9859002c8d1649f75f095", @typed={0x8, 0x7d, @str=':\x00'}, @generic="08c9d6b6c149a7df6dbe1f1b08b997d0e18606af4ddede13f7769960770fedab69b9c27d1b8926913f89b210990fb0b448901e258e8c8b1ed41dd4031119a777686db90a3318dea5eab0307c375ed571181501d4ed7f5575d9844e700510477b3c4c50e41a59364441f88ce58a9f800c6b659b4e8699b8b408f8cc5327208ce6d10349e53323595c9bacdc8d190673d0155c33d6a3eea72fe4fbbac6300fad7336fb40b23d51240c04fdf8b2cf08c87ab24c95395e265d80f10a80c6c8334f", @generic="2ef41f59b57151394893f352b779c69bde9511081a5e10", @typed={0x8, 0x33, @fd=r2}]}, @typed={0x8, 0x84, @fd=r3}, @typed={0x20, 0x58, @binary="37f9c1a5a406ac87bc0b18534aa560f57dcef2317c035975ebbbcc"}, @generic="db46cce534af2ddf858eccb934b42ea04facef85", @generic="e28f30782ee64f27e893192d3ee8fae5b5c5aa975fa771c4d5598a7fb26604f53eb6a94fc3961e01fd062b6529d3c293ad2390a53cc2fe89babbbacc787462b19a3e2caff3488cdf64127871ae3d3ee029623ca8b82a97309ccb8dee1a36418b8a69b72f3c280372e8bfb3edd1d2258db2990cddc6a319ca04f6212f2bf5baca06bd097b1a332d18c432bdb0d62ea17cdac0919b447fdcd08b8404fda4b0fc07839b670daf371b54e4c677b38e01f42f68cb0cb53ed752023f4498337da8bd0f64ba82afb3338c5fb9de3d1c4d6a420076cfcad5376d7586eab21e18c747e60b0551762ea65a2771c1e5b1746dd74cd8784519f72559c73ea9bd"]}, 0x3c4}], 0x6, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r7, r6, r9}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x40, 0x4000000}, 0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002400)={{&(0x7f0000a00000/0x600000)=nil, 0x600000}, 0x1}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000002440)={0x4, [0x3db48a5a, 0x5, 0x1, 0x800]}, &(0x7f0000002480)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xffffffffffff7fff, @remote, 0x3}, r10}}, 0x30) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000002580)={0x97, 0x9, 0x6, 0x8, 0xffffffff}) mount$9p_rdma(&(0x7f00000025c0)='127.0.0.1\x00', &(0x7f0000002600)='./file0\x00', &(0x7f0000002640)='9p\x00', 0x12, &(0x7f0000002680)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@afid={'afid', 0x3d, 0xffffffff}}, {@rq={'rq', 0x3d, 0x41}}]}}) socketpair(0x8, 0x4, 0x9, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000002780)={r1, 0xade6}, 0x8) 11:49:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) 11:49:44 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000010c0)='/dev/adsp#\x00', 0x0, 0xc0042) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x7, [0x8, 0x7, 0x6c, 0x1, 0x2, 0x1000, 0x6]}, 0x12) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="23ca9bbdb6157a91ca31289cc19ba064", 0x10) finit_module(r0, &(0x7f0000000180)='wlan0wlan1{\x00', 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x33, @empty, 0x4e22, 0x2, 'ovf\x00', 0x20, 0x200000000000ff, 0x60}, 0x2c) r1 = getpgrp(0xffffffffffffffff) memfd_create(&(0x7f0000000040)="1300", 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) kcmp(r1, r2, 0x6, r0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x401, 0x210080) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 11:49:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000030}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:44 executing program 4 (fault-call:0 fault-nth:75): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 370.760756] FAULT_INJECTION: forcing a failure. [ 370.760756] name failslab, interval 1, probability 0, space 0, times 0 [ 370.772145] CPU: 1 PID: 15465 Comm: syz-executor4 Not tainted 4.18.0+ #205 [ 370.779172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.788529] Call Trace: [ 370.791146] dump_stack+0x1c9/0x2b4 [ 370.794806] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.800031] should_fail.cold.4+0xa/0x11 [ 370.804124] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.809244] ? lock_downgrade+0x8f0/0x8f0 [ 370.813432] ? kasan_check_read+0x11/0x20 [ 370.817591] ? rcu_is_watching+0x8c/0x150 [ 370.821734] ? graph_lock+0x170/0x170 [ 370.825526] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 370.830186] ? find_held_lock+0x36/0x1c0 [ 370.834237] ? __lock_is_held+0xb5/0x140 [ 370.838330] ? check_same_owner+0x340/0x340 [ 370.842674] ? rcu_note_context_switch+0x680/0x680 [ 370.847607] __should_failslab+0x124/0x180 [ 370.851834] should_failslab+0x9/0x14 [ 370.855622] __kmalloc+0x2b2/0x720 [ 370.859154] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.864528] ? match_number.isra.0+0xbf/0x280 [ 370.869029] match_number.isra.0+0xbf/0x280 [ 370.873352] ? match_strdup+0xa0/0xa0 [ 370.877162] ? match_wildcard+0x3c0/0x3c0 [ 370.881308] ? __kmalloc+0x272/0x720 [ 370.885017] match_int+0x23/0x30 [ 370.888402] parse_options+0x127c/0x29d0 [ 370.892482] ? clear_qf_name+0x150/0x150 [ 370.896529] ? __kmalloc+0x594/0x720 [ 370.900237] ? crypto_larval_alloc+0x1d0/0x1d0 [ 370.904818] ? out_of_line_wait_on_bit+0x213/0x3c0 [ 370.909760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.915323] ? crypto_shash_init_tfm+0x11b/0x160 [ 370.920088] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 370.925095] ? map_id_range_down+0x1ee/0x430 [ 370.929492] ? __put_user_ns+0x60/0x60 [ 370.933391] ext4_fill_super+0x218b/0xdc10 [ 370.937625] ? plist_requeue+0x650/0x650 [ 370.941674] ? find_held_lock+0x36/0x1c0 [ 370.945734] ? ext4_calculate_overhead+0x11c0/0x11c0 [ 370.950825] ? format_decode+0xaf0/0xaf0 [ 370.954883] ? graph_lock+0x170/0x170 [ 370.958675] ? string+0x225/0x2d0 [ 370.962116] ? widen_string+0x2e0/0x2e0 [ 370.966076] ? sget_userns+0x2e3/0xf40 [ 370.969950] ? find_held_lock+0x13f/0x1c0 [ 370.974089] ? bdev_name.isra.8+0x1a1/0x1f0 [ 370.978405] ? pointer+0x157/0x990 [ 370.981936] ? netdev_bits+0xb0/0xb0 [ 370.985646] ? format_decode+0x1b1/0xaf0 [ 370.989708] ? set_precision+0xe0/0xe0 [ 370.993589] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.999122] ? vsnprintf+0x20d/0x1b60 [ 371.002912] ? pointer+0x990/0x990 [ 371.006447] ? snprintf+0xae/0xe0 [ 371.009895] ? vsprintf+0x40/0x40 [ 371.013341] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 371.018353] ? set_blocksize+0x2c1/0x340 [ 371.022425] mount_bdev+0x30c/0x3e0 [ 371.026042] ? ext4_calculate_overhead+0x11c0/0x11c0 [ 371.031130] ? mount_bdev+0x30c/0x3e0 [ 371.034918] ? ext4_calculate_overhead+0x11c0/0x11c0 [ 371.040020] ext4_mount+0x34/0x40 [ 371.043488] mount_fs+0xae/0x328 [ 371.046882] vfs_kern_mount.part.33+0xdc/0x4e0 [ 371.051468] ? may_umount+0xb0/0xb0 [ 371.055081] ? _raw_read_unlock+0x22/0x30 [ 371.059228] ? __get_fs_type+0x97/0xc0 [ 371.063116] do_mount+0x581/0x30e0 [ 371.066671] ? kmem_cache_alloc_trace+0x275/0x730 [ 371.071508] ? copy_mount_string+0x40/0x40 [ 371.075748] ? copy_mount_options+0x5f/0x380 [ 371.080155] ? rcu_read_lock_sched_held+0x108/0x120 [ 371.085184] ? kmem_cache_alloc_trace+0x324/0x730 [ 371.090030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.095577] ? _copy_from_user+0xdf/0x150 [ 371.099740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.105287] ? copy_mount_options+0x285/0x380 [ 371.109794] ksys_mount+0x12d/0x140 [ 371.113428] __x64_sys_mount+0xbe/0x150 [ 371.117391] do_syscall_64+0x1b9/0x820 [ 371.121285] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 371.126676] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.131608] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 371.136611] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 371.141611] ? recalc_sigpending_tsk+0x180/0x180 [ 371.146354] ? kasan_check_write+0x14/0x20 [ 371.150578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.155431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.160616] RIP: 0033:0x459aba [ 371.163808] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 371.182709] RSP: 002b:00007faee8c5fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 371.190408] RAX: ffffffffffffffda RBX: 00007faee8c5fb30 RCX: 0000000000459aba [ 371.197668] RDX: 00007faee8c5fad0 RSI: 0000000020000100 RDI: 00007faee8c5faf0 [ 371.204934] RBP: 0000000020000100 R08: 00007faee8c5fb30 R09: 00007faee8c5fad0 [ 371.212199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 371.219469] R13: 0000000000000000 R14: 00000000004c9bfd R15: 000000000000004b 11:49:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="657874348c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000004c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013001108000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x2c}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x1200000000, 0x4) 11:49:45 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0) 11:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0xf, {0x3}}, 0x14}}, 0x0) 11:49:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x12, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 4 (fault-call:0 fault-nth:76): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:45 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x3, 0x4) r0 = socket$inet(0x10, 0x8000000003, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x210080) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1}}, 0x1e) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 11:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000038f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 371.361201] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x100000000000000, {0x3}}, 0x14}}, 0x0) 11:49:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sync_file_range(r0, 0xffffffff00000000, 0x1ff, 0x3) fchmod(r0, 0x100) r1 = semget$private(0x0, 0x0, 0xe0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x3ff, 0x1800}, {0x3, 0x48000000, 0x1000}, {0x3, 0x6, 0x800}], 0x3, &(0x7f00000000c0)={r2, r3+30000000}) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 11:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f8}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xd, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) [ 371.608989] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 371.688916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.766144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:49:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000006c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000035f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x3002000000000000, {0x3}}, 0x14}}, 0x0) 11:49:45 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6be, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={r2, r3, 0x6, 0x2}, 0x10) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000740)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0)) unshare(0x6010100) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) mount(&(0x7f0000000700)='./control\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0xfffffffffffffffd}) r5 = creat(&(0x7f0000000040)='./control/file1\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fgetxattr(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="62747266732e6367726f757065743075731f42090047625c5e328471367657152613d4d28c2fe8795ca799cd21f01402aca782eca8ab7b873996c00b12936ef93b8747fb988c0f97dfa6847573c3411fedb76b544f1463e98661b97f4cff97ba7b6cd8ef1bfdb90295789d307e"], &(0x7f0000000340)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x42, @tick=0x7269, 0x5, {0x6, 0x7}, 0x10001, 0x3, 0x3}) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffdfffffffffffe) fchmod(r4, 0x20) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f00000004c0)="485004dbff7d377f61e695cb9d5c9aa882d4649ecb3d6540e2df3c2685adfb2d4ac077aadb87", 0x26) close(r1) 11:49:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x11, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='\nxt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) ptrace$setopts(0x4205, r2, 0x2, 0xa07000) 11:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0xf00000000000000, {0x3}}, 0x14}}, 0x0) [ 371.930586] IPVS: ftp: loaded support on port[0] = 21 11:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010017000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000005f80), 0x0, &(0x7f0000005a80)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x8}, 0x8) 11:49:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x5, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='%xt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 11:49:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 372.229943] IPVS: ftp: loaded support on port[0] = 21 11:49:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x9, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434f4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 11:49:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010037f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)="6264657600d2998e2bb6ea053ea071c36986354b48b298b7b749cec342148fa169896a6c74d685fa20275b52e3e9c2c8500bc9c10a799b8d9ebeb9e605610e05bee673d859ecc889f07515a038f5434ffcacc72cd849d76e657007000000c98bd957ce293f78a24f2ce979dbfcd8469fc6b00d2397d976218fba879b9d682907a3222fd4ecba994ebcd438a2ab790c8a30364899d39309a52a62d5864a99bdc6d6c18ebd03d8be1bc211e0317e4e9450317d61011bc9e53d084049ae000000", 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x490100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000140)={0x8001, 0x1, 0x197b, @random="330e6116492e", 'bcsh0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x60d, 0x2, &(0x7f0000000200)}) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000440)) umount2(&(0x7f00000004c0)='./file0\x00', 0x2) 11:49:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='e\nt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000013}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010049f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/154, 0x9a}], 0x6, 0x0, 0x0, 0x2}, 0x20) getpeername$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0xffffffffffffff1b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7afb", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x100, 0x0) openat$cgroup_int(r3, &(0x7f0000000640)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 11:49:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 11:49:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000d000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000280)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x4) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xa0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xf9, 0x100, 0x5}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r1, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x0, 0x2, 0x2}, 0xadec}}, 0x18) 11:49:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x5801}}, 0x14}}, 0x0) 11:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='e%t4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 5: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) keyctl$clear(0x7, r0) set_mempolicy(0xc002, &(0x7f0000000180)=0xfff, 0x8000) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r1, 0x0, &(0x7f0000000100)={0x2, 0x4}, &(0x7f0000000140)) 11:49:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010097ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf}}, 0x14}}, 0x0) 11:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x7, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ex\n4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000002000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100f9f20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="68634782cf1a0fd3d3e78c1029799aea1539a67a64909f9d0d2e57d19252e59546eb86828d4814d987e16953cec13f3756d83f1d679751b7172775dc44b68e61378a5f4898e214539744be4b0bd509c5e00f6b6b946ea46beeb912e2ce06f8c36752be05416f804e9b511f5cb8a1678d4b27dbabad514ffd75fdca9e03e191f47390998097e6626c0772f00f16a6a9233182212c8211c7babc298298824bc26b3539308cce7fa7f068a66102b58bb53faee4db71959274a86bb720e4dae8d3f4b2b88bf28b374deebfa22fd82498cee6008e1c30383087e1a90510e802c422527baf208386a4f54b821feb13192319", 0xef}, {&(0x7f0000000280)="b117fbf60f25adc3886f941432cc411de956e9388b8de12d7f5f9f", 0x1b}, {&(0x7f00000002c0)="8ceb75c80ded098b98d05e036413cf5286f7901bbc8260654c1d5f3c800bd16600c473028271df899a", 0x29}, {&(0x7f0000000340)="683b47dbad1150f5f54ecfceacdaaac23b2eeaa917", 0x15}, {&(0x7f00000003c0)="80e0ba255b317f971a219952d5885279fbeec11c82a65795deced8660cdb3978eba7a9a2cdd87d5a98bde5607ff5015f9e282d0d66ac722e18163d22099a7e5f9da6aeeacbb9550b6ab7dd61d6710344e1f212cfc482878860e621", 0x5b}], 0x5, &(0x7f0000000440), 0x0, 0x20000000}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b014", 0xc5}], 0x1, &(0x7f0000000200)}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x398, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0) [ 374.668063] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0x13, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x34000}}, 0x14}}, 0x0) 11:49:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x100000000}, &(0x7f0000000180)=0x8) mlock(&(0x7f0000761000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="9273079897c044ab68023b4774643c7da782a352f19c100af12b4be8d998bdf33d525536e201e38ef9e13cbdf9298db9944fe7cc40f7c9d92ba42ce0e6679faa9c4e9daeaf7fec1724d2d44aa6c9d4d159d9d3b5508c5d7d857b15401360148826e75fa262d1733a7428d433483b0c49174ec9057b48bb6b2ef6bd9b97b2b2a16b11071c019f038a9a42b32e2b1fe285bbe16f96cfc410870abe4928442506d0a0dbf350f3d205ddf8b431f70b46ffced5d1dc1057b9bbca626dfe357819ecbe5db3055194a93e289af20cd2ef2ca01758508b85ab7420e807f29f6150") sendfile(r0, r1, &(0x7f0000000000), 0x100000080000000) pipe(&(0x7f00000000c0)) 11:49:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x100000001, 0x4, &(0x7f0000001440)=[{&(0x7f0000000140)="d82e226a4483e25668bfaa63bcfab8f26c6ea35d2239e465ab3c6d02025b260cbdf7ce1acda85045630bf6c573cbdfcb451f627dd1a4d959e9fd2ba91ade332fd421e0dac7b7dca5c32421a09fe8c7e7ddcbe1a8bb2e8c0d9f96b3ce2c605918b27f7404ff7c6022ecedfb1d90374c4f2db0cc6b7d49b7bec0c3a43cf8890f76862e811269e94d9697edc4ed443a78f8c29e390f0618bfc86289406a04537fa632c3cc707368b3a268", 0xa9, 0x5}, {&(0x7f0000000200)="359f6bb8f2708064712a37eae2b1053b0211b421bf2c5838dd4594a4b76389568ef281d997fcb5e9fcee47cde00dec502902e836df37e3544c5da63e69ed754272c8ef15b2d599f3a9f9053461a89c2b583dcd34653f414546966dd164b3120ad448db10b45fb7147bd600a50dd0c46ca80283154d8053bb05912e4e35bcbf85a8a54043918503e280d1318a9eb5dc7141cdfaaa18bc8088b5ca7f8f9f5285955413ae0ab4cf797067984f5c6f8e5f8bf6bf0163af8fbbbda93ed8c73ab0d6666a01b54496577b2c80a67292f1681256386346d3e63e98facebab6d3c9e9bc127f0a9b604e5487d3a380cf7951cf71bad897bec7c6fa7ce0cdb56b15d83a6356e3ba0115536703836f25c98bf83fa3a1444171d1b8b6e482e7e30ac08515c76d7749ec623210224e86ac14417f6226c585799c9888f37c95a42249784c77270ee97cd871885832d21568e04d96ffcb431ad9d5ca4f2bc1419c4bc7deb1bc415a11b9bdc336c4dd6a7254fd1a4493cc2948f651768e13fd5ec266a2b9fb193b7c490ad8f518916145ced556b0d5be1da5a6b65f52763271f7a646b28c8c79efbd85d4cbaba136276b4835df342dac5b2f6e8336194e37b1cfd82743b319694752f865635e85e9742069e6abdaca96d6e32362d0cf113ea7c0908c9d3806bd48de9c57c5c3a58a18f2e3cbe55feda71dece6a1eb752705312d97c8a26f183a965897a4796783f587898064693a4139947b09632e0614d0c8266f5d21e61c2f8cf2cef40edc4e016ea242aa8846b90f243ef3a5cbfecc1b5db9e574710185badb1e8823b2ab9fa0b244f82e62b47da0f7cd40ac4948e4f10bd53b3c140391fbc201e38592c73bcf8f336bd436a990b6f7436bc5da7cef8ffdbab007f9b57ecde95a1bcacfe87244fdfa4d0a3382c6e869647f3240b72cfce5ada37513bf9e4a00906d95cc11280f251bf1ac7a143528a447fb530930eae37b6e02b60744e840b72f784a94eb79064b2da6d8cc5183ded6ef547b7ab0ded9a479b19834e197891b7e8863a5625515202892c2173beee22e89ab9602dd802513cdbc635a85b1733d720094ab9f44a17699c6e62511fe78c68d18980729f73eb230c7582ba4ea179ffe7dbfa7c45d8ffd49cce2f0124f2f86c45515c7f41be7fc3c5cf87e51307521a3488e05195353ef0039b5edc3d0f775b3b646eb79a61b817ffa63433befe0f6da8841c29cb0e7747bfa04c80c42349c064254574a7e1f5277177694bcbf58246e8c57270d8c12de8367c4487917a4926ed3b76358dbefd9a21c978380f9eef652e057a4c9105fcefb1583c2aabe698e1b6a435f1b3de950c267b88b2cd07683b600b81640f5c74dedc2ffd14bd7b569ff26c9c123fe76640e934892c76abf5a20fa2d709341401e724e0848099fb52ec135e8b61c94c60dc76e454ea3b5dd9fb45d7641a314a8915c029c9788320da3acf536aef9d7f5714ec009993e7a45cabef27bf78d126b5f1c167333f53ac0fac3614d8fb90305508dd56a1bf6cf970d221c1bd96c7f33dae00742586bf94e61084433042c1f848186c9dc2406fd67500c5730ae6f6e2ea501e3649d8575835c003eb648d66d790ee4d91beae43ccf276bfb5131a54cecc295229fbc4dcce39618135756f329e9cbc4f8d9c6ce34f2c31a92866302f88e34d1d07f4b0020f1bb36ff2aa088bb1c3409382a8753a5816b72a1fc0a9aebcd1dbc969e621be3c8b9ee7cdb3506d0f282fdf5bcb54f18c11084c9f6b23367fc70b119c7cb59b0d323d9533ae49c8f27edc1e862c7e7549f459c5601f9de2bbae2fe74e95a83cc5a259a0767a72c868f16931209e180c8e93d1bf68a222700232317278c5b1d1c51351f396d2cd566b7e511b44a54cb7f563e832707afe4cf242de34feda609d8fe20b8b81ef959929200964362c80ade36c0619cefd348ce951d476ceeed227ec3f468a55f5aa5ad215e6d5a0f08889d1582d9bfe67ba5666bc2dbc7c92e3a13c2937c80c2464c8d49291f8ea0f1edc2ed86dea71971a94718ea0479e69c96c5a9a67a617eff091e790e2f3514bb3ae017cc4478c1c751702f982e0e0037ca884288aec6f84789b93d4434322b5a217408374646a4e8c218ae76e9c23e35ccf3ab2fe33c2c4f8d23419e8d489c47c547a6260431f704f5fb5e230345aa0c8551e2bab0dfb61d37c87c7d49b6ff162af94f1025531da79cf3d37dd993e454b93531e963e4b7ad209d6431b760ba54c5dc77712f4ca9006d16852a3419fd54f380ad18736bdd2344abdceb9b289d915be678b27e2ffac10d0123ee0333dbeafa1882e2b6984be9aa3e3fe4dd51062c68684982e7e49ced6c110c3d75e08e05434898d9e3264ea07eaab7f89845e2c0fdd120e4af98592ec58067293061e70bea3b24f6cb12ab46902ec89eb3e19dec9afd15b6fdaa0fed6e37c37bf193d39a30be3c180afac09734ca7e14724af9e57399b0ad83fff89e93767bd366d4ef7826050a204b9d9c9811ace3726fc3880c69bfb7c5c26a9f2f471c58136f0c949c68b603dd252ed280bf1230685b2eccfeb207bc545bacea500904e63814e7191bfaf3b23e8c018923778e76d1729548336d7a45b5b35a97eb141c0e164a7e2c1404990050c46a3146909503471296e0e4a893c64a6f7565bc4eff8dda608583215eb50b13b9e6d626479c17b7010d155cb2e4559dd940ba72e9cd62570c6aac2449b99d68bb5410725424f61ef2c03459849a871b00ebd6336fa2d89a4886ebeb98fbf2d99dcd91b3c15781fe6d9329f1ea20fc8693bbe5f314254b100ba1cec06b5ef27e5b5d04b59b8f9630d5019c5b37464016d7f17666fe9f8d5adb3b7833f9352d2c2e4545452bdd9f9a6107c5dc3b148be9c7640f46df2996e8ec555f1fd213653126416aa94ec12a874884c7ce7d80824755e6f524f0efaa5e765b659686f48f6a1b54f3740a47491b6b3f423b8f022bf98430e94b3b26056094b0cb152718aa29f1e0a9240f55bb9b5fe7c6f15babbf0582bb6e2641efb8078cbca366358b4d762925939c85ca7cd7915f9bae1aadc53167d68d721a1b19f14be562ce92e4ceb98291eddb104eff19b8c6be7201c02accb564557e88d94e2a37ef1428da32b2fb87dd0e1bde4b8e74c3e61746d211ae7108978f9fb4e4458432497e24096c03b21fdea590325309286212ce3628b4e0d963f84a71c6a8cd0b116306e0a4cf1f243d2691f411b598259fbdfc7605191adcc588740ac59307d0fc4813af185f0b57fc72ab9f74a8c84ac98a42fa1de8c963db362ed8e0113d1c1b1c1ef88cba988c42167e2aef6f041ca97041d83036a2126a14f287ea861aafef5ab769409a22769721c9fbf71e9974231cbd35d4dede6c949110f14167682aa8f3832fa75f88e533553b2e387157133559bb566df2e0a92314769ca16b0390bfaa7b95a1cdec5232f0fa050190ed8c869419cf48d7998113197d02f81f654a98e4dac30c0211ef36e6aae6148c2061c118d4bcbba17c2170ec995c1a6c26eef9460775fcde246757debed73ccc9c479147a531095f0addf3d9518e5d94aa16930e3617f0c51d9c2d736b9e96bcc6c0cc46bd8a7a2beb1f0f13590097e94fe1ab8aa99571f7f3b8aa573b356246917463263afdd014e59e12e266bfc5c0b9d3ec974aad590f6625c1e0ebca687742121db778563ecdd06f7db87c7cca7cc9df5821a33a0e5d63d058b0591d6489217bb7b537f27ecc83eadba667a8258e0785c9833c8f483a1004adfe3a5eb36befb1ae6fc200af29a7ddcb29792c1ee3d0ce6f9bf0414afd5dfcfd168880e3ea866fd001e50a97ccc670831c3b352c07f0813d51aa41e8f2018b61bd3e8c58b3bac5315ed5366ecc0794aba50decd5cc94ad1d657e0a480918a64603891e279643b74e94f42223c1108b3ee451d8f256bde72cf4153715d7188c6ee1b561dd5cad62dc518138d81a92d30083f2f378e4e7fdb0e06e97bc2c2673fc1d2f374c255d13c7c3d17ca61f68fc503af6f01aa7cbc3bde24a446ad4c7057cb7729912cfe91be5bace73623ae9c91d0b52b2723683537623971c255df20d960fad8e3163a2689d5498a854293a2958ccbb1eb16b591dc4ca6450528923805c8645dc51edd9d00f0c7d5a77119dec3bdcd71a6ff0870acecc684fbb48b6eaf34954689c22ff793eb1732078ec0fc810ef9d7206fd9a75ca876a25a4ba435d914c173354c57b149efa867e20c65f951c71af7ff4c0dd62b9b48e7c96f6b13be9e7d3455e2de0ca06d9bbecfc28b33bbabd9f2a8a2b270262c92a96f00f14437c38ea5369dfe2447b46c35d0faf582ca6ebe3ad8043a74646b7158e3ae90ac8b9ab69067f9945a816849d2a39394e975f967a49a472145759cf39cd5acb87bfda0e1133bcb6ee5d0b631353a374b1bbdecd46d02dbde57c2a1cd2be3980d6163d88aae86e39f64f9934ad1247117d0121ef0f457881444ef347e909a047e2e48093021d6542e0bd44fec8356438273662c3460a9c0ac1c5685ab9d76ade375fcc27a63f92b103a4c14622a61c8bb834a370c51ee56502589be2eb827ddcbd6778690d02fb2879512b017ae8f228a41e04f9f53dc25b4a4597da8acfb930cb0d9456cf62eae3728cd27bb53da63dd47d646213f2292efb5065f71a06e95a24b051433d8214109af70447d4c263b780975fb86e165a5a6020962587ab50103bbaeae4783b603b08d8a41cee845a417db56dc6983ed31446630d948fe53451df959ae9b5a2e0e82a62eb4ef15d8f6a57c6a42ce704897a9e1b51209a282bbc011f9c942f242cdb20c1ceac54aad9cb53d69a307c23cd5637a62f08cc6a3e6e847a1f50275c6ad6940b12c5c390290843321e77831dc531069e9f8f4232092c3da3edd45d59d98526a67f36cd1c1153a8546b1fd91976150579c8596348040f994e4350fef78187cea0ac338b40acb80615343488be6d55453d1b8f51cc7215a801a549d5462a9b2c5a51153501e1571c06ea6b713f5372ed40583acb70865d27c8c6b9cbaf1428a83a01d91793f3f92234a0efb54480ae86657f6e6d787ca61511e477ebc3dcd56efe1a1da4a771b0a6582c99636cfc3e9ec18d3298847b0c7c679d410cf66cb3de4d3cc9818c0de78d99523a143fce07ea8c2c15e5e16da3add3fe8e7f51e36cbf1a61157ea9d883e8a70b8041b067d3216779e33a8f94e3930c820336fcbc13fe4d2bcd3205a38d05e4119a99cbcf7f2deeda4b921e5bb1c71e4130ab40d4b48f1201b2e3e6a7bae81c7134a48a16bf0150c351f4069ce76ae6dd150848526c649ead766bab5a8110ba3d53957678c5d5c1e7963d2b878e9c86a93651ee014e12893be4c4b605994b0bc5eb547251eb6194b40bec9fe018b6e92d90ab04f15616af877be1e8fc3e92ca388cd7b0151781441ded5b9570b0609b9eaef1b16cf900b166fa575fa121c4190ad9b4ae1e271b05d9a5ec5ed73cbd3aaefcfc4e4f6fca703d42703fc24f89e1cab03335256804434457cf6be63298dfdc90bd285069ffefd400d74898ed3b0d8b6da5d9ab448c5540e9c0cfba133ed28b84bca2eb70acc683686895d0129900d31a42091002770ce2bab267578222a0cec63c7ab3f9e1183ccca92188b3776c4b293434bb72d0e0329bdb0ea2a8da84b0a058d1663681cffc17fcced1efbe04165a39d59e891393a67ae0aa19defb2f0b64b0004c0dd1e786ab266733cbc0bbfe2d53172008ecb1197e16cee3423d39df22442ef87792e0ca8127fdf3886d2108", 0x1000, 0xfff}, {&(0x7f0000001200)="eac4e5f7958cd51b", 0x8}, {&(0x7f0000001380)="2d78a82d074d76c595cf276d5f06b2361b41b8c7ca754a236963e020df4a4b816d1a0fa7cdb5f343a8a6203c4fc03db023ab08b3f69ce918509a9560485ecda3051c5bebc265086739ce92d43ed7d6ce7f5d427854eeadff1f85773081af1943a772e590327f606b6b6ceff0b9e1893139f91bece3a14d793641df11aebdee50b4d56346c04ee41c74dbe2060a819e850e2e22ad16c5368776fbcb7a18a07a8c31f6b145b3918b50e505f150c0a5889dfab336a790b265", 0xb7, 0x20000000}], 0x1000, &(0x7f00000014c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d302c726f6469722c757466383d302c756e695f786c0674653d302c6e66733d6e6f7374616c655f726f2c00"]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001340)={r0, &(0x7f0000001180), &(0x7f0000001280)=""/130}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000000c0)=""/127}, 0x18) 11:49:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f44c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ex%4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100e4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 374.754196] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000000f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e000000000000}}, 0x14}}, 0x0) 11:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x200000d0, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:48 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$peek(0x2, r1, &(0x7f0000000140)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/155, 0x9b}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") pwrite64(r0, &(0x7f0000000040), 0x6a17, 0x0) 11:49:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='extc\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e}}, 0x14}}, 0x0) 11:49:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x801, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x1, 0x5, 0x3, 'queue0\x00', 0xea3}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x7, 0xfffffffffffffff8, 0x80, 0x8000, 0x0, 0x8, 0x1, 0x6, 0x1ff, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {}, 0x6, {0x2, 0x0, @local}, 'gre0\x00'}) 11:49:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600000, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r2 = accept$alg(r0, 0x0, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000140)="fbdc5f5fb1c34af34d858339b20b6934a6b885e066cdc587fbcab5efe67346cf3970238dddcf2ca82d974465136fc7abbfb526971c4481d09319a0481bdb09383c25a82b9795cc81f25754fe7493163972f87d1e14bcaf8764dcc9a336156417452a19061cff73ad7d717191a0196151400b76e31a1c396a323cd3cc07a4f97adcf5719fac30c991b2dcfaab9fc6f3033d16b34f65da1cefee4aab5b19a02b2f46", 0xa1}], 0x1) read(r1, &(0x7f0000000200)=""/93, 0xfffffffffffffe15) 11:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000000f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 375.409722] IPVS: ftp: loaded support on port[0] = 21 [ 375.472498] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 375.499749] IPVS: ftp: loaded support on port[0] = 21 11:49:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x3002}}, 0x14}}, 0x0) 11:49:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext+\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f433}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x20000150) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x200, 0xffffffffffff7bc6, 0x1, 0x2, 0x3, 0x3, 0xfffffffffffffffa, 0x17, 0x40, 0x355, 0x401, 0x5, 0x38, 0x1, 0x9, 0x9, 0x7}, [{0x4, 0xc61, 0xffffffffffffa73d, 0x4d4d, 0x3, 0x7f, 0x3}, {0x1, 0xff, 0x4, 0x6, 0xffffffffffffffff, 0x2, 0x1f, 0x7fff}], "69669aaec156d8c57fec780039c5674a8bb8def0d512d92d364cc18d5261a19b4f9a2ddaa97a8f352ec6c40c677add3319c4035d9fcd9c69cedf98d145d8c76280f89f5d472de1ac8f715444ad083c7187d7793242de79642ea48188d3c23a24f1f8257926a13b0e52832d1272151727da03211fcb3bdaa9fd7ce68c3507197fd2b10a", [[], [], [], [], [], [], [], [], []]}, 0xa33) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000b7c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b780)={&(0x7f000000ae40)={0x14}, 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x882f, &(0x7f0000000180)={0x20}, 0x8) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x0, 0x2, {0x0, 0x3, 0x100, 0x1, 0x6}}) 11:49:49 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x5, 0x24440) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x200}, 0x8) fremovexattr(r1, &(0x7f0000000280)=@known='security.ima\x00') r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x101, 0x210000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x80}, @in6={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, [], 0x1f}, 0xff}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @rand_addr=0x7f}], 0x68) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) 11:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 375.528100] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff9e}}, 0x14}}, 0x0) 11:49:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000000000000000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsh0\x00', 'ip6_vti0\x00', 'nr0\x00', 'veth1_to_bridge\x00', @dev, [], @broadcast, [], 0xb8, 0xb8, 0x108, [@limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x210) 11:49:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000200)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010003000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext^\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 375.832109] ebt_limit: overflow, try lower: 0/0 11:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010002f30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 375.891983] ebt_limit: overflow, try lower: 0/0 11:49:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x40030000000000}}, 0x14}}, 0x0) [ 376.197384] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 376.333822] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) acct(&(0x7f0000000000)='./file0\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x20, {{0x2, 0x4e21, @loopback}}}, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x40286608, &(0x7f0000000200)={0x405}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0xfffffffffffeffff}) 11:49:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext7\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:50 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) r1 = shmget$private(0x0, 0x1000, 0x24, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/154) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 11:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x400300}}, 0x14}}, 0x0) 11:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 376.451446] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups) 11:49:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004309}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x92b9, 0x200000) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x4, 0x4, 0x1, 0x9, 0x7, 0x34e, 0x98, 0x4, 0x5, 0x3, 0x6, 0x31, 0x7fffffff}, {0x2, 0x8e, 0x6, 0x100, 0x4, 0x10000, 0x8, 0x43e, 0x1, 0x6, 0xfff, 0x2, 0x10000000000000}, {0x6, 0x100, 0x4, 0x7f, 0x3, 0x9, 0xffffffffffff0001, 0x9bb, 0x4, 0x80, 0x3, 0x7f, 0x759f}], 0x7c4}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) read(r1, &(0x7f0000a16000)=""/71, 0x47) 11:49:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf00}}, 0x14}}, 0x0) 11:49:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='extd\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2448c0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r2, r1, 0x0, 0x1}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 376.638207] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups) 11:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fff20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0xa6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x80008) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) 11:49:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x8080, 0x0) fsync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x7fff) fallocate(r2, 0x3, 0x9, 0x1000001) fcntl$setlease(r1, 0x400, 0x3) lseek(r2, 0x0, 0x4) 11:49:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010087000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x1000000}}, 0x14}}, 0x0) 11:49:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf010000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffd0e, &(0x7f0000000080)}, 0x10) r2 = socket$inet(0x2, 0x5, 0x4000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={r3, 0x3f}, &(0x7f00000005c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) iopl(0x20) 11:49:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578741600", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000009d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 377.325046] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 377.467372] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff7f}}, 0x14}}, 0x0) 11:49:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @empty, r1}, 0xc) 11:49:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010005000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0xcc, 0x2, 0x1, 0x2, 0x8, r2}) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pkey_free(0xffffffffffffffff) 11:49:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext\n\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fef2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffffff0}}, 0x14}}, 0x0) 11:49:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400400, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000280)={0xd79, 0x1, 0x10000, 0x8001, 0x7, 0xa9a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4c6, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:51 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8800000000000000) setpgid(r4, r4) 11:49:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x20) readahead(r0, 0x8, 0xfffffffffffffff9) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x9, 0x2) 11:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000004f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010047f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext-\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x200000000000000}}, 0x14}}, 0x0) [ 378.286395] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 378.582501] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x2800000000001, 0x84) getpeername(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000000)=0x80) getsockopt$inet_buf(r0, 0x0, 0x16, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) 11:49:52 executing program 3: prctl$getreaper(0x25, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = msgget(0x1, 0x400) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/154) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000067100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000100"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf00000000000000}}, 0x14}}, 0x0) 11:49:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="76feffff01000000f85901bbb9f40b6ab581daef978a2e80375d8ce41beb8b00b5d2403dd61629d0a7"], 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7ff000000000, 0x0, 0x845, 0x7ff, 0x0, 0x6, 0x10010, 0x3, 0x0, 0x0, 0x3, 0x401, 0xd32, 0x1, 0xbdc7, 0x9a8, 0x1, 0x6, 0x9, 0x17, 0x8, 0x100, 0x400, 0x401, 0xef, 0x2, 0xa799, 0x6c, 0xdb, 0x200, 0xb9, 0x93a, 0x7fff, 0x20000000000, 0x4, 0x4, 0x0, 0x8, 0x0, @perf_config_ext={0x9e, 0x4}, 0x0, 0x7, 0x8001, 0x4, 0x0, 0x5, 0x8}, r1, 0x3, 0xffffffffffffff9c, 0x1) 11:49:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010012000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x9effffff00000000}}, 0x14}}, 0x0) 11:49:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010043f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:52 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffff, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0xa83c}, &(0x7f0000000300)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000006000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext%\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fcf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 379.277375] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 379.474086] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434f5", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff7f00000000}}, 0x14}}, 0x0) 11:49:53 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext\a\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x900, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x280, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200)=0x8, 0x4) modify_ldt$write(0x1, &(0x7f0000000300)={0x8000, 0x1000, 0xffffffffffffffff, 0x9, 0x80000001, 0x3, 0x6, 0x89, 0x0, 0x8}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000009002}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010033f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x2000000}}, 0x14}}, 0x0) 11:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000025c0000000000000032d375e9974c94602931cdee877ca97e95514887e0563ade4685076fc65db5a6ecef5f7eddda6aa8a895aa91cb2048b42b19649078d16e8454320b3d2ecca3aaa11d2ae368f8e2e70ada7287b10b5b6a77af64a00bb6d8bd4f5f16ebe185ff39e9a1f638d5db"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet6_opts(r0, 0x29, 0x100000000000037, &(0x7f0000000180)=@hopopts={0xbb, 0x0, [], [@pad1]}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x0, @multicast2}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x79bb, 0x100}, &(0x7f00000002c0)=0x10) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:53 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x80000}}, 0x14}}, 0x0) [ 379.973091] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 379.989201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 11:49:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) 11:49:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = shmget(0x0, 0x1000, 0x15, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) 11:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffffffffffff000}}, 0x14}}, 0x0) [ 380.381009] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000015}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x200000c8) 11:49:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 380.461941] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:54 executing program 3: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)="288811ffb3faa487f7ddbcbc413783af54dcbca1517ef7e64588829f46a8e9681115f7da6de70c8f5bd846cd4631891eb16d181e88bcb57decd7842944c62da3d4a8eb562db7030670a3dfca784f996e8904dc196f8f698c6f8822f0e87e7c5be40d286b89cd651cea30ebf97c382603be3e0d7a41ffdef65278036e62875b59e63fb595ae86a67f8bd302c9f08e79") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x200000000000034c, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x1000000000}, 0x48) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8, 0x10800) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f30a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffffffffff}}, 0x14}}, 0x0) 11:49:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000039f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0}}, 0x14}}, 0x0) 11:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f309}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 380.811985] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 380.832339] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000008f5}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x8000000000000}}, 0x14}}, 0x0) 11:49:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010030000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$FICLONE(r1, 0x40049409, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01006c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000040f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffff00000000}}, 0x14}}, 0x0) [ 381.163633] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:55 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434f5", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007f30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = accept4(r0, &(0x7f0000000200)=@un=@abs, &(0x7f0000000180)=0x80, 0x80800) connect$vsock_dgram(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x9effffff}}, 0x14}}, 0x0) 11:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100ffffff7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:55 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743402", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 381.554783] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 381.574844] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f8f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) read$eventfd(r0, &(0x7f00000000c0), 0x200000c8) 11:49:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x30020000}}, 0x14}}, 0x0) 11:49:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x44000) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:55 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000018}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 381.971935] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000074}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffff}}, 0x14}}, 0x0) 11:49:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sync_file_range(r0, 0x10000, 0xfffffffffffffffe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffffffffffff8001, 0x45, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000000000000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:56 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01003ff40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 382.107474] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 382.126479] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="5183525f85715070000000000000") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@loopback, r1}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x82000) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000002c0)={0x1, 0xff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000300)=0x9, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000280)={0x5, 0x8001}) [ 382.190070] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01007a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000016}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf000}}, 0x14}}, 0x0) 11:49:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 382.261059] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 382.523641] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 382.568226] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="6578743406", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000043f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffff}}, 0x14}}, 0x0) 11:49:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206, 0x0, 0x0, [], r1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockname(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000200)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:56 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010002000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 382.650118] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 382.680542] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 382.740921] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000009f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x230}}, 0x14}}, 0x0) 11:49:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x200000000003) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:56 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 382.913320] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f0f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 383.010173] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434f6", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xec0}}, 0x14}}, 0x0) 11:49:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000023f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000001f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x1, 0x10000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x42007f73, 0x9, 0x8b}, 0xe) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000010000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 383.294622] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x301) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x3002000000000000}}, 0x14}}, 0x0) 11:49:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:57 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000007a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2ef}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 383.387070] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000007c0)=0x6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000000082ec6487b77571da775993f70f2915206d8aedd4a8796397b984ca9d72e50cf8d37fbfe50c4027b58b1724616a2fd47dd1f8b07d3ebd82e0763439f3e987be381cb093e8c66ebf493ce544c12e21a85336e976e1379fe1d633adf9ec7be3045aff343c83aec871990f9ea5be2da8ec692b43a634b73259a670432822f91dc7e"], &(0x7f0000000300)=0x87) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r2, 0x1, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000780)={0x1, 0x0, {0x34, 0x2c, 0x15, 0x16, 0x9, 0x5, 0x3, 0x55, 0xffffffffffffffff}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x20041, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e24, 0x4, @mcast2, 0x400}}, 0xfb4, 0x7fffffff, 0x8, "55e46ce174c4b7fab8b2a318a4ddf8179f772fd087dbddbf54fe0895de601dfc0a4c2339a353b3df55f32c9c9d8a29fff684363aae3b288b621a0bda2d8f76f81a5f259f3294d64725a977f302c0b73d"}, 0xd8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf010000000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0x50, &(0x7f0000000800)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)=r5, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r6 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x840) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200)) [ 383.608808] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 383.689744] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000600000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffff000}}, 0x14}}, 0x0) 11:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010001000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000000180)='syzkaller\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000280)={0xc61b, 0x4, 0x400, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00004000000000bf610000001300008510000002000000bf010000000000009500000000000000150100000077847399d9b3573b4d000000b7000000004c0000000000000000000000000000000029fd2dce553fd3e375ee09f418f9d41a6dfc9ec96501495b4abd0368c75e8318bee892148be39cfe718bf30da8db509d0be956f2d5a36a3ee75a8076a12b6eeaea784bf647ee5e68f55378649fa5990378f221904b3e815c650f1b5b8e92"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010004000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 383.868481] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:57 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x9}}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) lseek(r0, 0x0, 0x4) 11:49:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf000000}}, 0x14}}, 0x0) 11:49:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010010000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 383.965175] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 384.213870] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 384.256611] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000067, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x200000000000, 0xce, &(0x7f0000000580)=""/206}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x3, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e0000}}, 0x14}}, 0x0) 11:49:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000019}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(0xffffffffffffffff) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:49:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000018}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) dup(r0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x200000c8) 11:49:58 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x820008912, &(0x7f0000000180)="0a5cc8170031c7597358fbdf0000a2e694c847765f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x100000000000000}}, 0x14}}, 0x0) 11:49:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01004df40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e0000}}, 0x14}}, 0x0) [ 384.657348] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 384.748609] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010030000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x8}}, 0x14}}, 0x0) 11:49:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000b00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe3f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:58 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 384.867403] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 384.886326] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000006}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 384.972538] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f435}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}}, 0x0) 11:49:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) socketpair$inet(0x2, 0x7, 0xfffffffffffffff8, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x0, 0x80000001, 0x7, 0x540019e6, 0x4, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x7f, 0x5, 0x4, 0x2}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x1840}, &(0x7f0000000580)=0x8) 11:49:59 executing program 2: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 385.075585] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 385.172537] 9pnet: Insufficient options for proto=fd 11:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001600}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010004670200}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 385.210446] 9pnet: Insufficient options for proto=fd 11:49:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:49:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x230}}, 0x14}}, 0x0) 11:49:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x740, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000240)={0x200, 0xfffffffffffffff7, 0xfffffffffffffffa, {r3, r4+30000000}, 0xfffffffffffffffd, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01003cf40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 385.401651] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 385.420441] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003e04}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 385.519514] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffffff0}}, 0x14}}, 0x0) 11:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) r4 = getpid() kcmp(r3, r4, 0x4, r0, r1) [ 385.584599] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 385.698258] 9pnet: Insufficient options for proto=fd 11:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000002f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 385.798219] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 385.893489] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:49:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010012000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:49:59 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:49:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e}}, 0x14}}, 0x0) 11:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f6}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:49:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 385.963601] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 385.984232] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fffffffd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x2000000}}, 0x14}}, 0x0) [ 386.064667] 9pnet: Insufficient options for proto=fd [ 386.074450] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000047f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getuid() r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$KDSETMODE(r2, 0x4b3a, 0x100000000) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 386.155924] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf000000}}, 0x14}}, 0x0) 11:50:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e0000}}, 0x14}}, 0x0) 11:50:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) open_by_handle_at(r1, &(0x7f0000000200)={0xcd, 0xfff, "667cc49902aeb22df5c6e189b7b0eeaee8d6c1da3a96e3122665fd64399b4f4fc7dce246da0c5fc22ce13de8a76baad772d671d9eeff6287ea0a13e56772c31f1fb8ff48f6a925627999fec4ca701555c3081e3f3ade20816036be72d9cf3d69ec9e8b96e6cc3059a4a86110b45209776d67f04bdd49fd1df194a1c68a3ba3a261ab3bfb4952eff1f9fba8ef861381a4d1b1c99736ba3d2daec064a04ab979bc0c98e00b86c9439b660eb8097ab367c4c1682817df671147710a0a1956c74076ae5be656d9"}, 0x220000) 11:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fbf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 386.494854] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 386.514434] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x428, 0x108, 0x268, 0x268, 0x108, 0x0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "70b21a4f12131958c6eb9e27e0510e5629b861bca0af211f0ab0dca9e07c"}}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@quota={0x38, 'quota\x00', 0x0, {0x0, 0x0, 0xfffffffffffff001, 0x8000}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x7, 0xea51, 0xfffffffffffffc01, 0x7, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x8, 0x4, 0x7118}, {0x200, 0x4, 0x1}, 0x4, 0x2181}}}, {{@ipv6={@ipv4={[], [], @loopback}, @mcast2, [0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip_vti0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x4, 0x7, 0x2}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 386.595271] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fff2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f448}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x3002}}, 0x14}}, 0x0) 11:50:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:00 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 386.712106] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4#', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf00}}, 0x14}}, 0x0) 11:50:01 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f0000000140)=[{0x7f, 0x1, 0x2, 0x83f}, {0x1, 0x100000000, 0xd6f}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x20000000000000ed, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="0b687c1fc4b98fdc3607232897", @ANYRESOCT=0x0, @ANYRESDEC, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16], @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffffffffffe, 0xce, &(0x7f0000000480)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf16000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000000000000095000000020000000058689ec75905d3031fd17853b75f3b9de19f53ce277cdd35e37e19812701a5c64e757527e5d4269b3c52f3f6429553005e365208becb8b7786c2937ec4cdfc5649fcf5e4467214dc077642eb9b10619cb6b3ab924900"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = dup(r0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000600)=""/67) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x50, &(0x7f0000000200)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fef20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 387.063078] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 387.081640] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 387.160586] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x19000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x9effffff00000000}}, 0x14}}, 0x0) 11:50:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000943}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 387.255260] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 387.325049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003df4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 387.467951] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 387.573172] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x3002000000000000}}, 0x14}}, 0x0) 11:50:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0x60000) getsockname$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:01 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01001a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 387.644773] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 387.662222] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000f000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 387.734582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 387.758526] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x8000000000000}}, 0x14}}, 0x0) 11:50:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="dfcd0200ff010004d766f42ac43cf4973cd84716f5f82a73aaaeb758812d2d121dc3c75c1634aa98900ff14f"], &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r3, 0xff}, &(0x7f0000000280)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 387.852750] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434a0", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6000000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 388.103490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\t', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x1000000}}, 0x14}}, 0x0) 11:50:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000060}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = shmget$private(0x0, 0x2000, 0x435, &(0x7f0000ffb000/0x2000)=nil) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x5e, "2765e9117b81bbc1dc10a1d5ab61d2b1c470cf71f2a2853e36f595b79de756cddbde2b3bea65cae8cc2cf548190d32976ab06ef987cb76c71917d6612490d121c08841603ffeadff6fc45e05aeb431e800c191610685268bd820e88dabf5"}, &(0x7f0000000300)=0x66) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000700)={r3, 0x2, "d5ce"}, &(0x7f0000000740)=0xa) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000200)=""/72) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000006f9500000000000000150100000000000000950000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8002, 0x0) clock_adjtime(0x2, &(0x7f0000000580)={0xffff, 0x1, 0x1, 0x1000, 0x8001, 0x10000, 0x700c, 0x7, 0x5, 0x20, 0x7, 0xd86, 0x100000001, 0x45, 0xe7, 0x2, 0x0, 0x8, 0x4fa, 0x8, 0x7, 0x4, 0xc279, 0xffffffff, 0x7, 0x1}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000280)) 11:50:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xd00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 388.268141] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 388.292960] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000043e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 388.356115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 388.376141] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c16000000000000bfffff00000000008510000002000000bf0100000000000000000013fbde2e00000000b7000000000000009500000000000000999257c7af73c5db700c77ff7ee571bdc2490c6016b0b0e4638b6eba4b7c254e189320378d27a04a04195f32fd5ad2c0caa7220b1d34442ecc0000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffff}}, 0x14}}, 0x0) 11:50:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 388.451360] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9002000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4+', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100e4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 388.624105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 388.750408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="6578743404", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x0) 11:50:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000580)=""/161, 0xa1}], 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) alarm(0x9dfb) 11:50:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4h', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010036f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9effffff00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 388.968743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 11:50:03 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mixer\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000b40)="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", 0xfc, 0x4048010, &(0x7f0000000d40)={0x11, 0x9, r2, 0x1, 0x7, 0x6, @remote}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000851000fc040084335f7be9227574d87b54c79800003c00000000000500000000000000000085efffff01000000bf73d6a806e91301000000fcffe7ee0000c9000000001501000000000000b7000044d5aaacefac186fef3a327467596d"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743416", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 389.184784] 9pnet: Insufficient options for proto=fd [ 389.228932] 9pnet: Insufficient options for proto=fd 11:50:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f449}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 389.275488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\n', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x200000000000000}}, 0x14}}, 0x0) 11:50:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200)=0x7fff, 0x4) 11:50:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000014}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 389.575858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 389.581215] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf}}, 0x14}}, 0x0) 11:50:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010016000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:03 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x8040, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000005c0)={0xf9, 0x1, {0xffffffffffffffff, 0x2, 0x5234, 0x1, 0x3}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xa00020, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, "2d76626f786e6574306d696d655f74797065c33a"}}, {@cache_loose='cache=loose'}]}}) write$P9_RLINK(r0, &(0x7f0000000580)={0x7, 0x47, 0x2}, 0x7) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) accept4(r0, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80, 0x80000) 11:50:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 389.722521] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 389.860580] 9pnet: Insufficient options for proto=fd [ 389.869876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 389.966622] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 390.035610] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffff00000000}}, 0x14}}, 0x0) 11:50:04 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x101, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000002a00)=[{&(0x7f0000000580)={0x27, 0x0, 0x2, 0x2, 0x4, 0x3f, "067e71357f6ab9adaacaf1177e07778b1c1f60902d76d091b59992c50874daf9f7801854e9790993c3bcbb50640424821d5d44613c977954adc9a64dba0d55", 0x3b}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000300)="760886a9ea081c175e9bfc3caf9e0996a01eeb21", 0x14}, {&(0x7f0000000600)="1a0622ae722d4aa40a57209a3e95ea6f54c589e7a65f7913f50b5c62c89ab3b51b969788a59eac0cf74cf7dbdc4b1c8be70bffabd4c48ba68f2f5cfce70dceeb2c35fe5fe95ad459a902f88b43d5878b14410e0b034c4f150698c1ff9aff", 0x5e}, {&(0x7f0000000680)="f07895487c74bc1ef9aec64c800a51a0831c0143f2ea38eda2401f40a7ebfd6932e3921d45d527e356665f0a89d82ed04d15a9bb7cbd9a345d7ced86f1b41203f73e4e14dcc05e99c6f88f3144875e0b51cf4eaa777bfad186d46835ed28b36737358f50cb5fea38ea223f9d85a0e0f35d54e76f123072e941a44fd126fedb63eaf96d39951c83d194dbb8946d3b17e095c552fb92344360b22b31eb9d9744042ae00be8cfaa4cbc3ee666cd7152dc48a8f108e2d7060fe40ee228fc348ac0367f13823b8fe26a2beb0bd20a21e1ef87fe70f861a5569133fc67efc46cec3dd2", 0xe0}, {&(0x7f0000000780)="089f14ae615d925b32a604ba131c591229fac009f0", 0x15}, {&(0x7f00000007c0)="633fde4ef18323828c398973", 0xc}, {&(0x7f0000000800)="ad22da4562b0c79060d1678a75b2c6c846751b7ba61f51f2c32534b03d6b35f138cefcc6cc4c1f78ecd2409cf31888", 0x2f}, {&(0x7f0000000840)="95e1172397f72abae41b67fc757d6dcd8b1ca31639c4544bbeca5981c64100b6bbd9c271c47524f674f73f40d7dbaaa0c1d5968bfe3949a67633a9314c8ac090034a68f10fdf29f2403a4d71aacba5cc6153bc8890625d0d48f06d1e69ab2d56a9524a97eb8f791d5f07fbd1654be1ee2ba343aff2152361248b71385ea03b0156d1ac6e414b", 0x86}, {&(0x7f0000000900)="c8c146f25ce19ad2a1c9328d01590ddd93c374bed2093718f492598c18775f961a35fc8e3b0e2e8447736f766d56f559e916b005dcc34d6af3337a1ec873182d237cc19b280badfa3e2dfe7d733961d8e90b74e0e9ec9b24b97f3c0efd637cabf669ef30135fd2bf936df657f13cdddace24e08502f6dc80672af9aeda1b0aa522d0a0864eece251898d6c5bf81f823ffbf2276a48c49373664c1b3e16bca545c35312d5f5825ffa648226427b1516a813763b322b10c84de0e1153d76fba37b8a0851ef07746e16f66255f1ca3eaf7608eaf5ca", 0xd4}, {&(0x7f0000000a00)="ff03494ed9ae3ca265544b97054adec844f34e38838f1f4a9acaedadb2724d601d68c394d931d8a67c5a96b3dc3c9848d82623966e310f223ea928b0305922cfcadb76f09b", 0x45}], 0x9, &(0x7f0000000b40)={0xd8, 0x11f, 0x7, "3058f55b6c318fc27e6fe0b0795e0d0eb25a203af4ff80af28808b515a00eb71a4bbc11e2c5f98a238efbcdc66293308336fe0eb6c4703c2541787308b8a5eefedeb7a1befca9586a592cf26833162432e0e95f0d7c4f43363546edc9ad1fd69ed3764b84ccb608f3ed2eeb4c86cbb4d7c4205cc357c9af27872b64eacafcb05a71c76ac4ec8c59bbec9d515df2846946ed83bddc4b4a6671c48974aa7ad625defe875bc27fc6977aefb04f80e85ece8f5f893926fe76a479c138a1fec65127290ee241fa519cb"}, 0xd8, 0x1}, {&(0x7f0000000c40)={0x27, 0x0, 0x0, 0x7, 0x7, 0x2, "db718c877e1038157fe37521db24c89b2b2e33782bbbe9ea06e8451f67b508ad841e3e441255414eb8fd563e97dba46c9b84f428502331137eacab2c5e20eb", 0x39}, 0x60, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="82651ebb793c0a91850ff32a8c161103a45f2b1a0dfa6c0c198917a2d64e8305b0187e05a4b529da4296fa9fb93988f7aca1dca1b881ce48a256b89971821a5ae079e7f46c3d38111bb346dff4ae542c11401565868e9c2b358abaac2f815313df9b7fdc256e7d5d420c3619827148a660be49b69d439cafc24356887d67940a465cad4a", 0x84}, {&(0x7f0000000d80)="ff8492656a7e0b6b34f486bada2f2fda0f79d73b2b7ccf17d6b277327a0f4debd9e381f354255d1aed5486fc5e199a1645e1c0539796d30e9cd7fbdf2eec9d356fcf3ec67d52bcc0af1d6ad83f502024cbe47908e1b5ce213d", 0x59}, {&(0x7f0000000e00)="ee8ffe2ffafcfcbda2cd645cf00b3c66afc98bf8f80c2f2f5d2500f7a08caa3288e7c5a6f9114d6dcb2fd8647567a134b3be408a4317818121697f074a0ee805a26a0670e7c661b94050dfd32e43de72e1a841831495da53a0a40851135ac2ebab218bc9390d1fa2a242293e2d4339863f128a2c5cf9157745e64f12648f3f995844d8b99e15cdb6bfe9a9991bfc6f03aa300581b73da4e0746f7a4890", 0x9d}, {&(0x7f0000000ec0)="7e24b27d1af2b2784a9341bf75b4cc4c5611bd3c892848b44dfe21b7fb4e7001290254cca8a2915d2686063023ec8d820140f715cd17c0efc2", 0x39}, {&(0x7f0000000f00)="e8933656ca183aa3c535e2ad8f886db5f485bc8359fef848a69b993967dec3b26647b553428d514387ec34afebd1df1b5346bc455cdbb6b91b", 0x39}], 0x5, &(0x7f0000001080)={0xe0, 0x109, 0x80, "6854391783f8d74a884e35902144921ae917b1ae1e7fd483d9f4493f1179f54b17558ee308266f46b5fa4d2468f250f72d25091f0e1e6be59ffe52a62021e64135b07983e5f0af19ce7cf1c83a6592066e18094276f3106a1d6be579e7b7b1c69ea4fb8bc637ed7f256b7073652468349fc47251d326ab2f57ce62bff81c21ac8781afd4baab92803bdb1428b4d088b3da5ac56bfee83a54cf022db341900fadc63e052979c139646894dd15664f7b81413f68db5b45cdc6e8e03236b276006d1e801c1d844a7403fbf9c3bc"}, 0xe0, 0x4000800}, {&(0x7f0000001180)={0x27, 0x0, 0x1, 0x3, 0x400, 0x400, "67817362fcad8626fc5bea6b1c6fbc8f55c50706b7907bbc618c47ed96f186c8c76dd32ec9da989e1fe4099ebe1c8efa18034fe48d4f124957470600c0975f", 0x6}, 0x60, &(0x7f0000001300)=[{&(0x7f0000001200)="1b46a628ede5bd2338190a1a29876d63ae972b5d4cf0ff3c717cf220de77f47ce968c60fc58e56deb03b88407d354c434aef4f59e5795de586cfdeb96fa08eea78be740c6ed609cae3399a88646fa8ae35ee3bfb938e30c233e85085e620dfe3663c0e93745ffce68fa50b08ddf7122c6ce084c996ecd8c8328573d7b1aa4ee3f07af58f14d98618227a71128485d28acc51aee504174e859ed4c1ef55786a740c4d62155bdb3bde0c33bb4adc0314", 0xaf}, {&(0x7f0000000fc0)}, {&(0x7f00000012c0)="671ddb73e8cbc748506bcaee003d0c417dd3dd51342915f359d40c2d2d7ed7f99e70fd866b921ec6", 0x28}], 0x3, 0x0, 0x0, 0x20000000}, {&(0x7f0000001340)={0x27, 0x0, 0x2, 0x7, 0xff, 0x401, "be8ebb530325b167de92e3b7bfdbc869eaf6d88b0303a49fd801e513d42890713f0c4b97f8c6a02916bf6a543da92cad849e2dfae1f9dc4005fc30100c1a72", 0x18}, 0x60, &(0x7f00000016c0)=[{&(0x7f00000013c0)="ac3f246e69eeb3536a0e6c3a93df29d901a57f2863c24ecf57d47c314408b4a8249769546212a71ecbcf14018d693f5d82b5752548dc8b1424924a683be8648f6973f2fc1c1ac24914e32a2fd84cd8eb4925a16a53e79282e9735b6d85c723404967422a308c9328ddd515f0b5a1a7ddf56d0f1ade31c8e0fbf7d52d5ce09c628d01adb8ffa804668d87c3be12452d8f6ee3b942b43f63dff5d866bcf019a3efdd93caa24de8b3a5fc5afae96cb3ad9574474b2c42fc876f858cebcdc6c9e2bf3906e9c27619ba8f0a642e008c32db408e913de6d8235455124748925969a6deb8768e918a1db82da33d1ec18d0d", 0xee}, {&(0x7f00000014c0)="8844ecdcc911b7225d4989db11df8fe98980235572b9858c155b44bec7e0b749c3b72872051909f9f992fc51f8b61743e41cce0695c670e6fbb5206d308079309a4476e1", 0x44}, {&(0x7f0000001540)="fb10e4da94a3576b197be6c333ab728c267a637d77c4c5216e336d22e2938a069280be21510039a22f1185d18a1012011d80bde407ea9d48fa0c90cf4d630914f2cf37704974ed9b304ce9fd4b062c0b9ea865c48dc106241222d564b35707e3987e5c1d9b9c452a67a80181683f153e0bb58edbdc7d0b76b778b1cce9420dc2f4000712b6d5244bbfe050bf244f41e1676f97ecaac640ae94a9088971b3b07657c7d187370b51c15cf133e8654a1305a22b4eb1b74619c4fcc5a55fcab387d53d36700447e02d1ab0b220e1a7f230dd7b7d4375640f1ed17e78077faefa", 0xde}, {&(0x7f0000001640)="4740e01880f625a5729b018292f0dcef0fe185fc96a0f0d0b7fd57b8455f77d5d3bb7df37bc1974740e385d8eea28fcc", 0x30}, {&(0x7f0000001680)="0ac5d470e35d684a8bf2dda62affe1ea5ffdeeb2cc060f1b7291914c813e5afc8f2a5ce4e0637b31b7", 0x29}], 0x5, &(0x7f0000001740)={0xb8, 0x119, 0x80, "fa23af75b132be9f4c72d6dd2df9b2025e2393e3b81fc23ab02cc9aa6ab47c96c860cf71c92dad62874c74e81d16b1cea2ebbb27a7c0f429ea4962442eb601e0f3f61acfa0ebd2d51d036b76cb28b44e60da028009c163666c1a06a6dd1022abb541705cb4dde44f94464a507f51cbd4ed2a1a8a77e59703b56ea75fbdb4d9596f01189b3a7a3a916bedb493dab025fa6c0eeaeeb84d000a2f432ad80090b77ef14124"}, 0xb8}, {&(0x7f0000001800)={0x27, 0x1, 0x2, 0x7, 0x6, 0x8, "cf7c300276f99cb409cf948cc92871b4b7b346efda7394a1e6507346f1caaf47505fb08bf645a4bbb5938450d2d29a0496668b37538f8b7c549bf8a65f4d85", 0x3b}, 0x60, &(0x7f0000001980)=[{&(0x7f0000001880)="6c828c6319dc6c8d71c2179933efca42f7a8df75360a952009328240b274f2ea199e219f785cebd6044aebcfb4888616182f9b8258b3febd44277ed930d5e6ab3f3a46d02d57002ec27022421f92f107a71811b19966070e1eb22727f42e202ab900e6875e0c4953f5333a02ea318b75b827524d3d2d4058962c7372e033791d173666a542b20eda903a824d474012ff52bb01e51ebb4fcb5627e5edb4f584d96daa9841efa4f19b6ad391d9dc196acf85f219e992897b70b55c94d3e014a8b4065c54cf3e98d1a4ba66737b", 0xcc}], 0x1, &(0x7f00000019c0)={0x1010, 0x117, 0x3, "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"}, 0x1010, 0x1}], 0x5, 0x44) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000200)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003ff4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9effffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x9effffff}}, 0x14}}, 0x0) [ 390.192677] 9pnet: Insufficient options for proto=fd [ 390.198727] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000008f5}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 390.269728] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfff2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x1, 0x80000000, 0x2, 0x5}) 11:50:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffff000}}, 0x14}}, 0x0) 11:50:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4-', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000013}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf000}}, 0x14}}, 0x0) 11:50:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:04 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x4, &(0x7f0000000840)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000900)='/dev/full\x00', 0x800, 0x0) io_cancel(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000880)="9151d835ce2f4188a0e33ed154055c8171046e8d1aa5b83b752fc415e12f7e19d90647427689379016d7fad9a3596cb70260cd46a8bb0c68345596a48145de0c9d9adfa24b8786c2ae327bb46a48446b3805cc59b15ca28f65d521ffe89ed403d03099f14e94eae06ba469266c9ce13a", 0xfffffffffffffd7f, 0xffffffff, 0x0, 0x0, r3}, &(0x7f0000000980)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000800)={{0x1f8, 0x8, 0x4, 0x3, 0x2, 0x8000}, 0x8000}) r6 = fcntl$dupfd(r4, 0x406, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000006c0), &(0x7f0000000700)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) fcntl$notify(r6, 0x402, 0x11) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x101000, 0x0) 11:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 390.720852] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 390.741756] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x34000}}, 0x14}}, 0x0) [ 390.831481] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf4f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 390.896167] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffffffffff}}, 0x14}}, 0x0) 11:50:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="6578743405", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010038f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x40030000000000}}, 0x14}}, 0x0) 11:50:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfaf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffef6, &(0x7f0000000580)}, 0xfffffffffffffec1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 391.328075] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 391.349678] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff7f00000000}}, 0x14}}, 0x0) [ 391.434576] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000046f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x89d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 391.501138] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x100000001, @empty, 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x4}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x3ff}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0xaebe, @empty, 0x80000000}], 0xa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4z', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x30020000}}, 0x14}}, 0x0) 11:50:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434c0", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000042f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0}}, 0x14}}, 0x0) 11:50:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf9f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x100000000000000}}, 0x14}}, 0x0) 11:50:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000017}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743404", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e000000000000}}, 0x14}}, 0x0) [ 392.430112] nla_parse: 9 callbacks suppressed [ 392.430121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010006000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x47f, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e21, 0x9, @loopback, 0x4}}, {{0xa, 0x4e24, 0x8000, @remote, 0x2}}}, 0x108) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0x885a0fa727d9a2be) 11:50:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffff}}, 0x14}}, 0x0) 11:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434fd", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x80000}}, 0x14}}, 0x0) [ 392.633620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010011000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16f7cb752edfcbf455808910d5ae003c00000000000000bf610010000002000000bf0100000000000000000000000000031501000000000000b7000000000000009500000000001000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000580)={r2, 0x9}, 0x8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40001, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200), 0x4) flock(r1, 0x4) setsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000280)='kF$m0', 0x5) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x4, {0x1000, 0x8, 0xeda, 0x1ff, 0x4, 0x6}, 0x0, 0x4}, 0xe) 11:50:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434f4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf303}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff9e}}, 0x14}}, 0x0) [ 392.957222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 393.092475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b700000000e200009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x2, 0x23fffb) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000200)=0x8) fchmod(r2, 0x49) 11:50:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003bf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434fb", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xec0}}, 0x14}}, 0x0) 11:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fc}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 393.185522] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 393.205085] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 393.268392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000200)={0x7fffffff, 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000240)={0x10003, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 11:50:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf00000000000000}}, 0x14}}, 0x0) 11:50:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1200000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000851000000cec75bc7edc430000000000bf610000000000008510000002000000bf010000000e000095000000b7000000000000009500000000000000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='syzkaller\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x400300}}, 0x14}}, 0x0) [ 393.526451] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 393.562547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 393.741809] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xd00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff7f}}, 0x14}}, 0x0) 11:50:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f440}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 393.907132] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 393.928554] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 393.996201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 394.015552] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xec0}}, 0x0) 11:50:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x8, 0x200) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000200)) [ 394.068637] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xf}}, 0x0) 11:50:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 394.236827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 394.287188] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100ffffff9e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xa}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socketpair(0xe, 0x0, 0x401, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000200)={0x5, 0x100000001, 0x9c, 0x0, 0x0, [], [], [], 0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000feffffffffffff0000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xfffffdef}}, 0x0) [ 394.514694] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 394.534609] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 394.611479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 394.642609] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000087}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x20000194}}, 0x0) 11:50:08 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 394.739678] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @rand_addr}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, @remote, @empty, 0x0, 0x6, 0x0, 0x100, 0x0, 0x100000, r2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x33fe0}}, 0x0) 11:50:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 394.940147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000200)=""/25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x3, 0x3, 0xfff, 0x0, 0x10001}) [ 394.995413] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 395.106206] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:09 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffffff87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x7ffff000}}, 0x0) 11:50:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) accept4$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x200, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newae={0x5c, 0x1e, 0x20, 0x70bd28, 0x25dfdbfd, {{@in, 0x4d3, 0x2}, @in=@multicast1, 0x5}, [@tfcpad={0x8, 0x16, 0x1ff}, @replay_thresh={0x8}, @policy_type={0xc, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="1075d71993107079938c7f0efa20c81f7fbd9a2a362ee1c8eae0d480cf30385437ca1e8de5ec02afcbb4b5ee0bc6f27ac18f03681f8c97746caa31e2e5ead3a3b3b7a3b6831ad056ec79429be5f832cee9b793be488c8c982f85241aee3046deee9d41ba9850ef", 0x67}], 0x1, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000580)) 11:50:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 395.236102] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 395.258046] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 395.349549] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 395.355336] 9pnet: Insufficient options for proto=fd 11:50:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xc0}}, 0x0) [ 395.439497] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf4f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 395.651718] 9pnet: Insufficient options for proto=fd [ 395.685944] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 395.769712] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x3e, 0x6, 0x9, 0x8, 0x6, 0x4, 0x61fdc969, 0xfea}, &(0x7f0000000200)={0x100000001, 0x1ff, 0x5, 0x6f, 0x80000000, 0x100, 0x10}, &(0x7f0000000240)={0x1ff, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffff, 0x0, 0x9, 0x7}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x24}, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x2}, 0x0) 11:50:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x43f4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4L', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 395.924791] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 395.948699] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x4}, 0x0) 11:50:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") time(&(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) set_tid_address(&(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) accept(r0, &(0x7f0000000240)=@in={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x80) 11:50:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x300}, 0x0) 11:50:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x400, 0x0) bind$alg(r2, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4H', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x8}, 0x0) 11:50:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x68}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2000, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf6100000000000002000000bf4100000000000095000000000000001501000000000000b70000000000000095000000007878003ce12a30d9af0e1239ebb8000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000280)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) 11:50:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x3}, 0x0) 11:50:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4t', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x34f4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 11:50:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x9000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9002}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\n', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x467020000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff}, 0x0) 11:50:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) fallocate(r0, 0x2, 0x4, 0x6e4ba9c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x80000}, 0x0) 11:50:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="93aaf2fc1f1ec88887f803cec7a295b291d3336fcf6ae722b7d7135f9298b6a37a8b57aaf5e9903b7efb1b12c673db24e859a0146968f47ec9b8108bf6b95705d8352b618aa44e72e2ad1c3154b7096f21eb23a997796f1542dad12f8d2370b901e9c6e7be41dec43a735233f71e841de07d31a3c694ddc3177fa952dd79d4e23f4e414c16a70bf2c35d9b18f66d33a89eee5bc41114e516d2db6bd92d4c3a9285da5e6cc43493cedf49d0b0d75ce244991a12b860b5a112f3", 0xb9}, {&(0x7f00000002c0)="71fb61039d84b09a50e7b37ce92e87fc6ecf1b331cd5a2ce80b9853aa7126046dae525a30e06cc941b47756bfa67dee5e88a86d6f76ceb3e4b5f5631b08b1a87d6182c22d5c702d33ff380bc1df50d38944e38f89cf35d5c", 0x58}, {&(0x7f0000000580)="a9eb07028c45aeb8d6d16be95c1bce18c934914f19ed24bf139942a3f4efbe6137aa43b3a95127f86e49c9df8df968a162591f80781de721b71b340f", 0x3c}, {&(0x7f00000005c0)="8ae1869fad462b50a4d8d601feb4f278d3f7694001c2324f398a39d0dc0c204786dc11b0ecc25141c57b0ffce889121932b7c1d6bfbf4696cd43cd03c36d19fdb878d1ec93f096059664458483c6335e93ee5bf83918cf96dda12c6559f47d04c4020a008cd44f4b5a04d68e95ea1c668d30827c6ce4832c088e78da7c9ec092c481c0638afb6773b54eca1a26772e63d1118f659a36b1a1d0622cf328a4dad00d8febe28a18fa2c08daf42566c6782ccfbc4ce1300579ed20dc7c1e89450cd0ed2a", 0xc2}, {&(0x7f00000006c0)="6ba369e56e486eea46dcabe5a85db261980e667167da7215389558f282f6a8b000ea4830b8242b5c8d4966fe568f3605016b997ed915c3fff35a4de93be7b2761aa170a0c5599d70aede021be2a9a90e26a649fa18476d8893d2e761473dde8cf8d9d592e2d240dc4b6864ca3d706d4d2fe7dd6308395633e5422926829aab409f77d0d28c869bd2dcf9987b875cc643ce410dc7594e6db5a56eeadcf60c5e713a14eaff230012e56742bb64c206e1ce3a002783427889f36f131bbf2c220e4593ec8dd50982635a19cadf0da9", 0xcd}, {&(0x7f00000007c0)="b326e8977f69228173b914d2f274e6f6a63876a28ace1d9cbf78020247954223b9c1d3e9ab0365bd38be80d8318d855d5fd43f5deae982df1aa23ae05db8a0a607fbf39fd8b48a7b8bbfe9aa2b9e2e975a73f95541568c7d801c052a7339f862a218decf30ba3efa23c97987b25dacc0e7901cf26f97063799c6f52e8cddbca4cf6b27d904eefe513a630c3b", 0x8c}], 0x7, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="ebf8b2ef18d872efeeb57a107170dc11c7fa52f66c83804057232c751ab000d839055b76831f13723b92c8e5f3cbc11795b7f443a2cfe2fabb235c0dfb748afa92b19f2f506c6998e7bdd3604d60346d6323895cd1eff2878a4241d4b6cd918c42ecfe5275727d812d4e76edf8cd05da835a18d68526c732c897857a581fa3bcee2ee4aea7053aec7365e1d0de30bf070d7f2cfa82f6b3f607c7499f42b08e111f43b0d9f35323dbe666620f01ca43576b6578", 0xb3}, {&(0x7f00000009c0)="5bb863cda4de79033103636654277fa4a202ee4c7c3c2e933290249a25a48380a624f7d6370325daecbb130bd80bae6360e941a6566eaa8df1ec090a134c1324c1ded3c61bb6fb8a1072d50c474c5de898160ff1e3f20aec2dbf7724", 0x5c}], 0x2, &(0x7f0000000a80)=[@iv={0x68, 0x117, 0x2, 0x51, "6ecae170ac23c1725a2442801e7d52facde63eadb2627a1c1c9a57131a1f76767a605c777a7a5c0e6c31b85b1092b450aee4159ecc051c221ad4f4aaf80db8e33f50fa2efab2ec453a09ff45f6ca391d57"}, @op={0x18}], 0x80, 0x800}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="4a2655855ab4a7a8b0e8222e9845d5ac10e1b3a9612060ae50f44cbd2760b184477c52644d7424c86a7140411944a90630803fe0ea386f5acacd2b6e7db1b59461bb3acd63663f9a1388705595b7d02d74e7dcbc7526977076106a2c2a1a9ae2cf77a9f35db7d4e0c06232d4cba832af68424042f8a9273e6c7927de9cc0a4be0e3dc9e722e1c27333dbcc09623049f3f3952b2ec7fcbe317ebb5d02860312aec1d1c8e8a881c03a90128964602614b97ade4fa42157983d1b690ec6d9512a55fdbe18a11b7454989c5973490a380f0aee1952b83d6ba8ed39331f49c8364635a75961cc185de9796d2961b62dd506", 0xef}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000c00)="59b8b6153a9045fdade0e3c6c6", 0xd}], 0x3, 0x0, 0x0, 0x20008000}, {0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000c80)="51ffbf4d4ff9cda435bfdf5ae1843a2b9229a325389a0d0613ce004fe91fee90b1ca9a58e304e4ef43f87228ae9ff8052de1fdd9886ad6b89c07af2bb81be03c940a39d0b649f68805298e2e3ad4cb308fdc5cc0646802ee99463a4f035701d545a141cc773e9e511e8c9dc321bd962d4f3d46ca7537a2ee154fe86e320b295321ddd8c8931d0e24c2bf5ee693b6647ddf37891f7201e409e781fdcb81ee69a9de36e3a4e182d8b160bfaf809d508b3fc4312279cafae4dd9dc44c58c34b52ac86ef243441ebcf3dad3502dab8c9c93c2706d274c620f02eef66398d6f11441c", 0xe0}, {&(0x7f0000000d80)="1ee3e9a40e5c8eecbd2dc873ec48193ad7d7e7b34524695af9bf23b3c124479cbe73f0f11f50d0ae93871e12d3462f20a8669b93bf034d33e92398b84d27b8e067ae7ed9c4cbd36e74f0ccba25e6e19d8902d8fceba389dddbf752a4a9dd941135f2bbc58227ffbb7c586e215f7d604b8022a4daab38b764b71eb1c4c21817803139aec6179a69bfa403d9b5bc9bc0d216c71a9e9d1b30bee8ee4cecfc5d7d2cf374c91d9ea4c6516857a4b8a9c6d9ce99ed43d76580ac5c2af3dcb749ab33b69587f6aa8e53aaf4e7f16baac53fc680671ec5581ddbad5d2129384c3621", 0xde}, {&(0x7f0000000e80)="d737bc9a7e0ecc760143abbce575ae77768431445f85fbf089a5f0676876794b7865b61b4000f77226192bb682c92eff2ef7e4d6bf6da0bb6678c41901eead27727a813d59392a3e7d820098173c75c603cf08b879e062bf4e134ff72735888528276267ce5e77404d2a9a729c2f", 0x6e}, {&(0x7f0000000f00)="fff68b5a254baaccd4095f6d944854b0af62a1d208a8b1e296910c8c35efda42f119b8812fd814c86972122b01b17c1f98cf1c717ee0f897be99a2ebf05541bba66ad4bbcd2b686a0e8e22c7456e655b2afaccff8de113a3e7968d45f2293f7a067bdfa0d63aac757d207385f43dd0139f503739606baa3b8b65c8a8e7d9878f77f9eff899279ae544eb496c7f0ae0074dde5d64a93b684a2143e6ce7a855f40384d6f5f89935db5e5344ed5100753863f09a14069224459d71c5b54e447ae026aea669b242782f53ea7089560610012a4107abd871f2c503c03c95059c51fd0a03c74651bf7fd779741cd53459d2c99fb45bbd7f526", 0xf6}, {&(0x7f0000002080)="9a07dc19334f3b5bf9ef475396bdc4b0cdbd3cdf8ecc0ee3dae99a9ab6b43767fa9c7d4cb5ad832b879616e6f77203aba2b945ceb17d8b98b5e10ad8d1ff87a84f8885e57130d124863462dc75cc14e1ba5751f013a835a96924439887a099dd5bdb4848ad", 0x65}], 0x5, &(0x7f0000002180)=[@op={0x18}, @iv={0x30, 0x117, 0x2, 0x17, "bfef9a393b3622863a746dc14161c8d5f528ceec42d202"}], 0x48}], 0x4, 0x4000) ioctl(r0, 0x5, &(0x7f0000000040)="6fa0f6fef3b30503715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x30}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2000000}, 0x0) 11:50:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x800, 0x0) mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000580)=r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="bf160000000000008510000005000000bf6100000000000085101f00020000001501000000000e00b700000000ff0700000000000000005334f7075dd7f274e76efeba43feb3c9f314a21e"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000006c0)={0x1, {0x2, 0x4e23, @rand_addr=0xe5d2}, {0x2, 0x4e20}, {0x2, 0x4e21, @remote}, 0x80, 0x8, 0xfffffffffffffb9b, 0x4, 0x0, &(0x7f0000000680)='ip6gre0\x00', 0x1, 0xffffffff, 0x5}) 11:50:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 397.615777] nla_parse: 16 callbacks suppressed [ 397.615789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 397.638500] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf000000}, 0x0) [ 397.699812] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 397.740400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 397.922196] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 397.979654] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 397.982393] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf000}, 0x0) 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x200000008080e, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000001b0000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3df4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 398.064526] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf01000000000000950000000000000000b700000000000000950000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 398.133056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 398.142109] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003bffdf0000000000bf611200000000008510000002000000bf0100000000000095000000000000001501000000000000b700000000000000950000bc41726b51"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 11:50:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3002}, 0x0) [ 398.275476] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 398.300062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743410", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 398.360953] 9pnet: Insufficient options for proto=fd 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) personality(0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000040000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x400802, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x6000, 0x8c) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)={0x2}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 398.476655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 398.594722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2}, 0x0) 11:50:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000006b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x24, {{0xa, 0x4e22, 0x8, @empty, 0xdad}}, 0x1, 0x7, [{{0xa, 0x4e20, 0x0, @mcast2, 0x1}}, {{0xa, 0x4e20, 0x1000, @mcast1, 0x100}}, {{0xa, 0x4e23, 0x2, @mcast2, 0xfff}}, {{0xa, 0x4e20, 0xc6, @loopback, 0x7fff}}, {{0xa, 0x4e21, 0x9, @remote, 0x3693}}, {{0xa, 0x4e24, 0xb75, @remote, 0x2}}, {{0xa, 0x4e24, 0x2, @local, 0x3}}]}, 0x410) 11:50:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x600000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x48f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 398.711447] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 398.738526] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 398.795122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 398.799748] 9pnet: Insufficient options for proto=fd [ 398.812991] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x40030000000000}, 0x0) [ 398.839258] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x7fff, 0x4, &(0x7f0000000640)=[{&(0x7f0000000240)="c237234a6faf84c0af6c98aade1f01b4f89109edd78cc82f09bd1099a3900cdf6c8a813865331b3afecc406a18e5a163fb0210ffdbb6ed157cf8812120f1aa816478523ad2090ce2d7d61c538bc1afc08a0fd9de6c5f3df282c26ea4e34ddc485f960a1660f41c90c01fea67d49408", 0x6f, 0xfffffffffffffffb}, {&(0x7f0000001080)="95958e8eb97a27c1e341616009d36726d805ee22e52d3f6022809d3141fc3ba81db8482f98418c68cde2832b50efe2f2b46a15833b57beaf390b13634a4b17a5d01a9a9a39c08319f3e594e33baef7dfe8b45e1bf003bfdf9223d172726e06bc803149b49d7474656dd690a9e1de876c10529808d1c8a67119822073da640e7d89b1ea9ef996a763dbaa8aafbd9e99fdcd64e269ad387fbfe44edb35eff2df12f0cb7175ce7f2aed003721f606459894cd3b9b5bc8e4af004b8b671300beb1bf6238c4b32d949a2eb77a182931568caac8c016fc97138163bc3052f8e596b08f6993b4752a4f5ca4cf6adc0363849fda537b93cdb12b0ac3a168860e9aa83dac24cc66438f7c3a62692986e4f6b9ecb6240fc9363a5a2437d1289c94d53bedd6164023876aa82936f71db75e70161fd039c787e28777d9451bc939d8db3a831e24a36ab25d5ba1f207f339cfde6885a6dbed36330244258a177ef9c2418c16ddab59185db7ffc935577fd566f0800705d1f0f4cfa285953beee12c33a33762b796862be371b61591addc98cb96ffcb45e6b77dc367c9adfbf5e72ae7a8c787ec07efff6480c75a7c948e94bc156902d67e07094a081da87dff35f6e02abead26c2277d690511e2511e0565a8849cbb31ac933c8d4fab8ad14cca2fc527c71a15f9b48d67b5a4d5c3d37f6876435446344f19ff4d1f096e5e59c8fbe5f13b11670a5d38a36655bb17a20ef3084700dc59e72398a6aea762dcc5642b96e3d16fdacca1074b585a4bcfb836a1eecea845fab9ed1740dbf669d9f6812c903ddd765dc2bb8af6866bc4b68e7a5f43ef3b2f9faee4c3541a32efaacf1c79a56618461b3c6a7befae2a0509cc78df0395a9b3eee3997bfe8bf660ecb5f5b116632b2924bd191f8d112fed631d710d7c22862a1722ac09663b2f654f9dc140e316ada59b608052b784eae2a0e08aca6596a0a76fa0650af06740a7eca06600062a1b268308c8bba6be7d8316538fdfd7bfb22bbe795a2f4f32ab83fbd33e783f0d931945e396323523f70e657cd779ed64c0c5e779dc1d3b9f3563ba11afb4586822663700c18fcecc49f76e957bbe022b8ad0dfa2a5b80188165607a20922f3c7f8bf3e91abd6c53b49d61956de8d5ced707c389be29d9e5fd9be08000a2f87857f38af8d6e62428f389a3944d2859015dcb7c9d855893c21912e661f1489faec2ce7536c142853d1559458d35501705e53ce6a2a05a0b649d261d732680cb53f827fc92e0621e6a6b42c57096d53212d82fb62ec45fca704eb74082c564ae8b6a6a44ebb8c5f67c1dc226d42d6901e4b9c54808996b355fbaa74fa1fda4c0cf2ac7d52c8b9c3c1f03175ff6c76ccf1863220f774fc975d2c54b871f77fc2820f2169c244a43ea105473d31d86c0a0e3fd9d900fc605a9afed1f3044da6be22b5ebaccdd679409e03fab2f849a66bcac26af8e53e0a0b98ec75c6f6a48b5be8c0d8b192061f0fbe126a67740c08b2a68f832a6bd2cd392671c51a22e486a3b524078575ed284a5343349d9287688072dbccb488c88dbb824bfe96f40140b876cc2743c12711f9ef91dda8d175121dd0fac885ce7704bbd6fa33315abdffece541ce2d9b0c3251f91195a2190ed456db5e847d38b74546fddc108e22d935fd90ffa3e0be1d763b8213c9a102838c9a3923e54653337fe07a99b186f18abc7cf73692b790eb0586617f01b44073fedde2b5a69a61ec44b74eb8501d2af41d8d301caf56de119489a98c19b7d6e305fbe50839388c6e4e0a79d16b96daf2194f20bce47539804f18df84e171d48e180c55c25c5a4d32e16aa8deabe6525f4aac96e6e8ed00adfab1ca156f8b1a8583631a9bec972aed366f416a95663bb38547c039a9c80d0205035c1e802b96f95e730775e9efff520a63ea88a7efaf413cc1e9944203b549575c87cb426d2b6fbf42e4009c06e567df128105e7e54bdb9705e4c9ba07177a4ecaf61fd14d88394a5cd956bd07c87daad1b0d3cf9da2243d5bdc5a96330aa61987d6357749d2f55ec6136cb66db914a6b35d134230c0170c8686660a39b2685cd2b1cf2e0a5a468b2cda4a05fde2968cbbcf34e0d9e7a97fb41c65356fc9670e2b5e03e4a82797473fbab3181243230d3b8e940122e42d2dedb28cad88f418ceb6cc56f3d9d9b183379bbd1065ffd034a41489f9db91afdb24ff0140af2306f6a35ada53aa52c92c3b33c807df62fd4558dd1ecee1839a4806733c05afdbce2cd77589a7c73fa7bd94879912a9c56e5c9f022d1284783db88028f322b7c67992a967e43a9f3855ad0683538d2742bf54ef48fd923811b7cba803bdb12f0d05769e25ec6d5cf1538d3d9568f326d9e5b3743cbb3af3310eddff80e1dc33f4f1c8fd14e57161240ba5af36a80e1efc98629bd3d4cc6c4b12aed5923ab07894ca0d96453bbc13a5d234dd814fecd9b0b72332cde40189c75933716ea977a10915e885cc65d6fae7bb005a12a1e26e260fae0b086e9107815c95d83e5d93d72fba5f8f4f573504a570c7671098d200bc73f848507edde463962d7a6e2d75a15104569623163e394e908cbddaa59ca19c68be455babf77e9e6f565c58e21fe5f0f687eee5f7d6a4c488962e0eac75911d2ad9a6a8e02082b958f6de516c0e4c2914863c23e39fe713914a0d42854e70eaa8e33b8812cb8dff820243ed6b418dd53d711f05b889adbe951ae544f054dc1c4374b808bb53a80f779b4e773f310128dfe81093bce7d0ed8f81e4756ad1db85ff54b286bbd420a260cc8e4379acc36854f5ea671542f7dc0b5592d62e4196df74dd8f9c2d2007ee3cd819a63c560453ff8119529e3289c212b50cc72cb0401eb3e798589c02791f2516dcb5a8d4ec154097854180b864fde022a945f5cb4cebd66dbca39187f61bb2f74ece1bd185681845aa187f88372befc308c4742a5738ddc026ca04ef25e3ce44a92210156609ab941c4940531f16e6af100f71f46209fe311582e71abad2f27549bbbc3569a9ece1a6fc9bbaf9343d90919b62d20d1c5eb99ac51dbf3196eeb54a0f83347276e04b3e16dcbc1d562bbe350cf44ba38b1a964e3dd3990c47079b8d22499f30aa481be941b082934fcd0c23e78ae8f66f857eea3ea5405f0ea60faad89721975518a8bc97c15b0d764f6750e2d0a1ee83bd433ee7fa4e54afa7b3584f885d4f9c5612027c0989125a7c7a6d829a6230e90673bed58c9263979f1236eea360a531e7b0fb7dc9fe2784c4d44d85c3c7d18577dc6a5a0dec0377acb6b5e4f56d5f17f86db2f85fa42cc9508f799ebaf5823c8c4b128f1a0950915f6131b13c15336d20628d8ba1fed7e0e329574a047e3b75b8b69c8bda48d57bacbeed6ea248241c688e816db8ebbf2b995a86e18dbcf1dca1353124d9801e9061b8ffbe1103231273f4dcb004560ec222ac90f0ac25d1db3526a7e90e5a5b8dad8816182bda3c9912097b4614785e95de35aa3a97dabd5a83eec3ca61323ceb46ab5d8ff6d7120bf6c1a2cede8c53f158b4522f26070b3f385430ce624e5b90799354bc245e762cf4dc49f670a70de9c98df749a3647a93100f1abecfb19989f6caf1acb39b8b0fd216067abc5c80f2198487a0bf7fe5a4869a37b752eaa187515318c6318730257b6143809c05c80ecc3e8ce3268b4dd3f48809df18669369a16a35b5f4bf4881bea59db0c1a4cc62466c285e627d34e654b9bb2a8d1b1dfdf7c0dfff1ff1947c0d3df71c433f46b59e5503e239ef33fb89253112f4ae067222e828a2b313250a214c4db1ad11ac0d536a7d74e8693c00d399bee0a0293adc07cccea005122e7c6f516fe83c2d71413cbd97870d8de33acb278c6260ce4a510a27f1666f0083a93c2aeb5f855b67797cd747bf6104f370c49087bf8d0f2242a6a2c3d664997eec8b766a0c8b80a5864eae9f4907c8e991c2431a1d907def148457af41e8d40ec2aefa50cb406301669519b27c95aa0b118dbd55acba1c6a2602c45d1fc257d5fe4d4231f8136061f1efa136e9671f0bed69b9483ecef0b46fc2258e14407528a4e6f70413692ac110e30fecd01725a94ff57c7b2943243c6c757d5accbe07ae1c9750378528b49fe2d14445a2c7f1770b587797050847b6f26b533af95099062c683c1d91b7217857019b86e397354fb25534db68bafea20b6e851cb98a1cd65d63602460df780a1d065e17d31f4188e6330bdc4a3011a81eff2a2c3ad032aa4bc84d95444d20f9e4ab91087e2261dc25de6d4fc5e0a3ecc8327b9658c285176764a1418c169bd245ee37936ffb3674b412325f7867e60d520e65c7cb234462fc9a3d8a2e95ef12ce4a2f91461ba52e92b172c5b2fe7c4e4811f2a9a953a8b601d2308b33380e0dc3da55f48427cd960d537e1094476ef0da84445d5a48de4cffc9b2afb9e5dbda7efdba6e3278ba0938b301b5d4c402b4b8dbd4bca06ba3347b66fcf63886c31755f1fd1d1a4ca3ab35b6ce088970c93cf135ea0a762af716f26c9bf7340ad1568330f83760859d6dfbb4721c35f84b8b1ac237507ba2dfb70d57f2e59c0c8661e97797e37e36be022a161e8ab27bfd7501dde55e36c4b3bd95242a28208976c74773020c6529032d3470fa5f8af354921ccdd433bb92486bfe712c1efcd78db13f33aff07fc1ff85ea002382e2b55078d911bcd898822ab2e305811a9ca5d9274a10a6edd459077f2e2426a0eafce0401df53b9501469f4f6bbc9dd24a0e65f6cb2058b10aad47197a925aef19435b50b4669e2b591da6b92184bd8a9c14edf53f89248d6523326f0e43e3cf4036d5ef5fd5acfb5706877db73304ccf637c6694ad18d51514a77b4c239bba8b155f1e91a194e1cdf7121a2f978e7c71be9d1ba2c926bd3729635e480abb5d9c624be4119a8be0c77d6ad4153f2b8858560b95b6e29af0768a04b2ead8ad31c28c049f2d667d264a286e5da9a7b4da4b3671bdf4745228825273bbf150dbc3031674069329baefb5dff302f96708e8b17ab6bac94b754b7caf1e1fac1324c95d9fb7a991fc54f687a9b975ce84b2484615bbf6d7f37288ff8da0a11e6eee1cb4bad4ef727753ce0bd060353487bb96bee0bf6c5ebaefebab86323c52ed80c62b3eefa2d2846b6b1748fc4ae7d1cd4e606b515a03fecf90e278f915acc54e436f282224004a450efb1a9862e0a4ccd11652f48a33a8e67f217fd351a2f2af9b6ca72860e7a3c7a36a5fa007887f3c5eee1c063b5c46f0ed244ad082ff577897b0e8adaac3e70f0c61c50e235ae325b6fbfa1fe3c3ed317f18532dfe6f555a88d4a8814723643e54f730cd5c795a9800ba2ebd89ee3d384ecb045321b916883d7147ca30c15315099b21d3e2d2bb104f03a02bdc3992ad20e80fa6c2ce3088cc3836236856ecb08cf5aaaa9ef52b318e9a15f5c6310b7a9cd9f399ec27207d6d7005ed1c14b64955f54ab97a03511160255c174966b2a82a20ac03437c442db435e439e1293bfe2ba4c00cf22375af7083a409f3a61d73636727415aeafa19eb79c562deeb2fcc49290514274604d6e81dccbaa6c50aa922548b828b45331ecb70e466f659975236939b64ca0d7ccfd44c52f69512ed3ee85e4ec137b0ae2e2de313c11171b639b67f0eb6729b4b3022590fb80193662fe55ea4ebff07892029ba595915e12eacf6ef70caf9719f9229ec511f15e43c494379aeac098005052326194d5f2b832f0645ed2e82b9378309fc0e537d09f8005c22fe802bed9e18bcb14f943d76b58374ae42e3cbf1f", 0x1000, 0xffffffff}, {&(0x7f0000000580)="1dd37170a6d9567926d040aaeb5232cbe31b4b548514383dc0ab893e1c3e18066eedbb87906aadadf1414769952aa7321926dfa13befcaa852cef2efcaef32cae777acac2efb905583efd004b4d9bf00b040b1d10ad0fefad42600125cc4ac25db8cbd6d9b6228634219b92e2bc2d1e28d8b4f2c4c0b712f0c9cdbc3050c5b149830dbcc5d7c7a78e32fb032bf5d9298e5856315a99b9197dfc9e89347dd50041571c2f68145337e99e9f4a7b23b84", 0xaf, 0xe240}, {&(0x7f00000002c0)="a468cbee38ccec79dde76b2c27dec113b0ec114b1f6c9bbefb39329a62488bc63f33f2c4499a62c70434126601dda21cf43e299b9275408f472113111db0f134504a6d1335", 0x45, 0x1f}], 0x4880, &(0x7f00000006c0)={[{@ref_verify='ref_verify'}, {@space_cache='space_cache'}, {@acl='acl'}, {@check_int_data='check_int_data'}, {@nospace_cache='nospace_cache'}, {@clear_cache='clear_cache'}, {@ssd_spread='ssd_spread'}]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000840)={'filter\x00', 0x52, "7cdc9b7fb3d570ec69f0d1fabe6acf1bf7d72b584a323696653fc1358f4cc9a8021439f6a581ec1ac6c0511f8c2f51ac9a682724d0fb29fdb3ae3a54d2420fe2179eb8ccfeabbf57751c7b9c4e408a43df26"}, &(0x7f00000008c0)=0x76) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000940)={0xf, 0x1f, 0x1, 0xdb3}, 0xf) r4 = getpid() ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000980)={0x2, 0x101, [{0x401}, {0x81, 0x0, 0xfffffffffffffff9}]}) ptrace$setregset(0x4205, r4, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)="4a57079fd8c5be965eb2e17b4a2758c4d20527a7d90d67d3d33415515526505efed3b7d157551d4d446d6d91306018ea76a97ee0ea6fcd4306d0ab265fe41d0f11bb3ae068043b98397a446f7ba3c22efb6430", 0x53}) 11:50:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 398.950477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) [ 399.034837] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 399.056112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 399.110717] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffff}, 0x0) [ 399.177357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000f00)={0x2, 0x0, @local}, &(0x7f0000000f40)=0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001080)=""/181, &(0x7f0000000f80)=0xb5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x490, 0x140, 0x278, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000180), {[{{@arp={@rand_addr=0x100000000, @empty, 0xff, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}, 0xffffffffffffab8e, 0xc0000000000, 0xfffffffffffffff8, 0x4, 0x400, 0x8001, 'gretap0\x00', '\x00', {}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0xd}, @multicast2, 0xff, 0x0, @mac=@random="89c1d6ae4df4", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x6, 0xd953, 0x8, 0x8, 0x7ff, 0x800, 'veth1_to_bond\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0xc0}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', 0x9}}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "91a688da9906b899339e5e865806a348cc9a725fcc6bf1477c859e4e882f"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xffffffaa, &(0x7f0000000080)}, 0xfffffe6e) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x35e, &(0x7f0000000200)=[{&(0x7f0000000cc0)="1020f5f201000700090000000300050000000000000000000100000002000000000000c400300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000028c682ac2ccc39a1596d90ec837a832dcf840a81c21b0639666ce5e6c5931b5b4e04203bd999e77c904cdf7bd622bed29a923843dc06eae332a621c8d1c9a684848", 0xaa, 0xc6}], 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r3]) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000000b00)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x3, 0x4e21, 0xb46, 0x2, 0x80, 0xa0, 0xc, r5, r6}, {0x7, 0x10001, 0x0, 0x9, 0x1f, 0x8, 0x8600, 0x7}, {0x3, 0x4, 0x7fff, 0x10001}, 0xfffffffffffffff7, 0x6e6bbe, 0x3, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0xa, @in6=@ipv4, 0x0, 0x3, 0x0, 0x80, 0x8, 0x8000, 0x100000001}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r7 = syz_open_dev$adsp(&(0x7f0000000dc0)='/dev/adsp#\x00', 0x28ddb1ff, 0x92937eb0c0c860b7) write$P9_RSYMLINK(r7, &(0x7f0000000e00)={0x14, 0x11, 0x1, {0x40, 0x1, 0x3}}, 0x14) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000c80)={0x10000, 0x10001}) 11:50:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743414", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf00}, 0x0) 11:50:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 399.449345] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 399.485447] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800) sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x34000}, 0x0) [ 399.605075] f2fs_msg: 36 callbacks suppressed [ 399.605091] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 399.616823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 11:50:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743403", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 399.746659] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 399.753778] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 11:50:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0ffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:13 executing program 2 (fault-call:14 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) [ 399.860459] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 399.867607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 11:50:13 executing program 5 (fault-call:14 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 399.967626] FAULT_INJECTION: forcing a failure. [ 399.967626] name failslab, interval 1, probability 0, space 0, times 0 [ 399.979110] CPU: 0 PID: 18626 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 399.986144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.995509] Call Trace: [ 399.998120] dump_stack+0x1c9/0x2b4 [ 400.001781] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.006994] ? dput.part.26+0x276/0x7a0 [ 400.010999] should_fail.cold.4+0xa/0x11 [ 400.015093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.018488] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 400.020234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.020257] ? _parse_integer+0x13b/0x190 [ 400.020282] ? graph_lock+0x170/0x170 [ 400.020313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.027345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 400.032849] ? _kstrtoull+0x188/0x250 [ 400.032870] ? find_held_lock+0x36/0x1c0 [ 400.032916] ? check_same_owner+0x340/0x340 [ 400.065960] ? rcu_note_context_switch+0x680/0x680 [ 400.070929] __should_failslab+0x124/0x180 [ 400.075185] should_failslab+0x9/0x14 [ 400.079000] kmem_cache_alloc+0x29c/0x710 [ 400.083166] ? lock_downgrade+0x8f0/0x8f0 [ 400.087335] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.092890] getname_flags+0xd0/0x5a0 [ 400.096717] ? trace_hardirqs_off+0xb8/0x2b0 [ 400.101144] do_renameat2+0x307/0x1120 [ 400.105046] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 400.109993] ? wait_for_completion+0x8d0/0x8d0 [ 400.114586] ? user_path_create+0x40/0x40 [ 400.118745] ? __lock_is_held+0xb5/0x140 [ 400.122832] ? __sb_end_write+0xac/0xe0 [ 400.126824] ? fput+0x130/0x1a0 [ 400.130118] ? do_syscall_64+0x9a/0x820 [ 400.134106] ? do_syscall_64+0x9a/0x820 [ 400.138095] ? lockdep_hardirqs_on+0x421/0x5c0 [ 400.140143] FAULT_INJECTION: forcing a failure. [ 400.140143] name failslab, interval 1, probability 0, space 0, times 0 [ 400.142690] ? trace_hardirqs_on+0xbd/0x2c0 [ 400.142707] ? __ia32_sys_read+0xb0/0xb0 [ 400.142727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.142742] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 400.142776] __x64_sys_rename+0x5e/0x80 [ 400.176744] do_syscall_64+0x1b9/0x820 [ 400.180645] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 400.186028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.190976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.195837] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 400.200867] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 400.205914] ? prepare_exit_to_usermode+0x291/0x3b0 [ 400.210962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.215834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.221030] RIP: 0033:0x457089 [ 400.224226] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.243137] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 400.250876] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 400.258159] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 400.265436] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.272708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 400.279978] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000000 [ 400.287288] CPU: 1 PID: 18637 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 400.294313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.303671] Call Trace: [ 400.306270] dump_stack+0x1c9/0x2b4 [ 400.309924] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.315128] ? dput.part.26+0x276/0x7a0 [ 400.319122] should_fail.cold.4+0xa/0x11 [ 400.323201] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.328351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.333916] ? _parse_integer+0x13b/0x190 [ 400.338084] ? graph_lock+0x170/0x170 [ 400.341911] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.347462] ? _kstrtoull+0x188/0x250 [ 400.351274] ? find_held_lock+0x36/0x1c0 [ 400.355858] ? check_same_owner+0x340/0x340 [ 400.360191] ? rcu_note_context_switch+0x680/0x680 [ 400.365131] __should_failslab+0x124/0x180 [ 400.369398] should_failslab+0x9/0x14 [ 400.373205] kmem_cache_alloc+0x29c/0x710 [ 400.377356] ? lock_downgrade+0x8f0/0x8f0 [ 400.381515] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.387062] getname_flags+0xd0/0x5a0 [ 400.390863] ? trace_hardirqs_off+0xb8/0x2b0 [ 400.395282] do_renameat2+0x307/0x1120 [ 400.399182] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 400.404121] ? wait_for_completion+0x8d0/0x8d0 [ 400.408730] ? user_path_create+0x40/0x40 [ 400.412878] ? __lock_is_held+0xb5/0x140 [ 400.416966] ? __sb_end_write+0xac/0xe0 [ 400.420946] ? fput+0x130/0x1a0 [ 400.424235] ? do_syscall_64+0x9a/0x820 [ 400.428213] ? do_syscall_64+0x9a/0x820 [ 400.432193] ? lockdep_hardirqs_on+0x421/0x5c0 [ 400.436779] ? trace_hardirqs_on+0xbd/0x2c0 [ 400.441102] ? __ia32_sys_read+0xb0/0xb0 [ 400.445170] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.450535] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 400.455652] __x64_sys_rename+0x5e/0x80 [ 400.459633] do_syscall_64+0x1b9/0x820 [ 400.463527] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 400.468895] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.473836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.478682] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 400.483729] ? prepare_exit_to_usermode+0x291/0x3b0 [ 400.488759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.493631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.498845] RIP: 0033:0x457089 [ 400.502041] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.520940] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 400.528651] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 400.535923] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 400.543215] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.550482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 400.557749] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000000 [ 400.606627] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 400.638452] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 400.720198] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x43e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e0000}, 0x0) 11:50:14 executing program 2 (fault-call:14 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3f, 0x200) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000740)=""/22, 0x16) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c0000000000007d38610000000000008510000002000000bf0100000000000095000000000000001501000000000000ac050000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xffffffffffffffad, &(0x7f0000000080)}, 0xdc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/keycreate\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) r6 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x400000000000009, 0x101001) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000640)="11f17cc6c38fb924201d01146e209ecce951349dd6ac7eb4") fcntl$setpipe(r1, 0x407, 0x800) getsockname(r4, &(0x7f0000000680)=@pppol2tpv3, &(0x7f0000000700)=0x80) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/net\x00') bind$xdp(r4, &(0x7f00000005c0)={0x2c, 0x1, r5, 0x6, r6}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:14 executing program 5 (fault-call:14 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 400.775446] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 400.875736] FAULT_INJECTION: forcing a failure. [ 400.875736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.887596] CPU: 1 PID: 18677 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 400.887757] FAULT_INJECTION: forcing a failure. [ 400.887757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.894632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.915777] Call Trace: [ 400.918380] dump_stack+0x1c9/0x2b4 [ 400.922017] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.927211] ? __lock_acquire+0x7fc/0x5020 [ 400.931462] should_fail.cold.4+0xa/0x11 [ 400.935534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.940643] ? __lock_acquire+0x7fc/0x5020 [ 400.944887] ? mark_held_locks+0x160/0x160 [ 400.949141] ? mark_held_locks+0x160/0x160 [ 400.953383] ? print_usage_bug+0xc0/0xc0 [ 400.957451] ? __lock_acquire+0x7fc/0x5020 [ 400.961692] ? dput.part.26+0x276/0x7a0 [ 400.965675] ? graph_lock+0x170/0x170 [ 400.969482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.975027] ? should_fail+0x246/0xd86 [ 400.978928] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.984043] __alloc_pages_nodemask+0x365/0xd10 [ 400.988720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.994264] ? _parse_integer+0x13b/0x190 [ 400.998419] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 401.003448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 401.008997] ? _kstrtoull+0x188/0x250 [ 401.012803] ? find_held_lock+0x36/0x1c0 [ 401.016888] ? trace_hardirqs_off+0xb8/0x2b0 [ 401.021311] cache_grow_begin+0x91/0x710 [ 401.025383] kmem_cache_alloc+0x63a/0x710 [ 401.029545] getname_flags+0xd0/0x5a0 [ 401.033351] ? trace_hardirqs_off+0xb8/0x2b0 [ 401.037764] do_renameat2+0x307/0x1120 [ 401.041664] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 401.046604] ? wait_for_completion+0x8d0/0x8d0 [ 401.051190] ? user_path_create+0x40/0x40 [ 401.055339] ? __lock_is_held+0xb5/0x140 [ 401.059427] ? __sb_end_write+0xac/0xe0 [ 401.063409] ? fput+0x130/0x1a0 [ 401.066701] ? do_syscall_64+0x9a/0x820 [ 401.070680] ? do_syscall_64+0x9a/0x820 [ 401.074657] ? lockdep_hardirqs_on+0x421/0x5c0 [ 401.079244] ? trace_hardirqs_on+0xbd/0x2c0 [ 401.083568] ? __ia32_sys_read+0xb0/0xb0 [ 401.087637] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.093004] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 401.098120] __x64_sys_rename+0x5e/0x80 [ 401.102107] do_syscall_64+0x1b9/0x820 [ 401.106006] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.111376] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.116307] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 401.121330] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.126350] ? recalc_sigpending_tsk+0x180/0x180 [ 401.131112] ? kasan_check_write+0x14/0x20 [ 401.135354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.140211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.145400] RIP: 0033:0x457089 [ 401.148601] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.167512] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 401.175232] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 401.182502] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 401.189778] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.197052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 401.204336] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000001 [ 401.211643] CPU: 0 PID: 18674 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 401.218664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.228492] Call Trace: [ 401.231098] dump_stack+0x1c9/0x2b4 [ 401.234739] ? dump_stack_print_info.cold.2+0x52/0x52 [ 401.239954] ? __lock_acquire+0x7fc/0x5020 [ 401.244212] should_fail.cold.4+0xa/0x11 [ 401.248285] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.253403] ? __lock_acquire+0x7fc/0x5020 [ 401.257657] ? mark_held_locks+0x160/0x160 [ 401.261917] ? mark_held_locks+0x160/0x160 [ 401.266178] ? print_usage_bug+0xc0/0xc0 [ 401.266850] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 401.270252] ? __lock_acquire+0x7fc/0x5020 [ 401.270271] ? dput.part.26+0x276/0x7a0 [ 401.270292] ? graph_lock+0x170/0x170 [ 401.270313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.270331] ? should_fail+0x246/0xd86 [ 401.270357] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.305372] __alloc_pages_nodemask+0x365/0xd10 [ 401.310054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.310073] ? _parse_integer+0x13b/0x190 [ 401.310092] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 401.310109] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 401.310125] ? _kstrtoull+0x188/0x250 [ 401.310144] ? find_held_lock+0x36/0x1c0 [ 401.310174] ? trace_hardirqs_off+0xb8/0x2b0 [ 401.342621] cache_grow_begin+0x91/0x710 [ 401.346704] kmem_cache_alloc+0x63a/0x710 [ 401.350880] getname_flags+0xd0/0x5a0 [ 401.354712] ? trace_hardirqs_off+0xb8/0x2b0 [ 401.359433] do_renameat2+0x307/0x1120 [ 401.363345] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 401.368292] ? wait_for_completion+0x8d0/0x8d0 [ 401.372882] ? user_path_create+0x40/0x40 [ 401.377054] ? __lock_is_held+0xb5/0x140 [ 401.381143] ? __sb_end_write+0xac/0xe0 [ 401.385132] ? fput+0x130/0x1a0 [ 401.388419] ? do_syscall_64+0x9a/0x820 [ 401.392402] ? do_syscall_64+0x9a/0x820 [ 401.396388] ? lockdep_hardirqs_on+0x421/0x5c0 [ 401.400980] ? trace_hardirqs_on+0xbd/0x2c0 [ 401.405311] ? __ia32_sys_read+0xb0/0xb0 [ 401.409382] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.414754] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 401.419876] __x64_sys_rename+0x5e/0x80 [ 401.423881] do_syscall_64+0x1b9/0x820 [ 401.427794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.433168] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.438114] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 401.443316] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.448350] ? recalc_sigpending_tsk+0x180/0x180 [ 401.453123] ? kasan_check_write+0x14/0x20 [ 401.457377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.462240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.467440] RIP: 0033:0x457089 [ 401.470648] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.489567] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 401.497298] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 401.504581] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 401.511860] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.519137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:50:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x400300}, 0x0) 11:50:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x30020000}, 0x0) 11:50:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:15 executing program 2 (fault-call:14 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 401.526417] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000001 11:50:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x8}, 0x0) 11:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 401.633160] FAULT_INJECTION: forcing a failure. [ 401.633160] name failslab, interval 1, probability 0, space 0, times 0 [ 401.644506] CPU: 0 PID: 18708 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 401.651536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.660914] Call Trace: [ 401.663540] dump_stack+0x1c9/0x2b4 [ 401.667197] ? dump_stack_print_info.cold.2+0x52/0x52 [ 401.672402] ? find_held_lock+0x36/0x1c0 [ 401.676496] should_fail.cold.4+0xa/0x11 11:50:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 401.680585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.680613] ? lock_downgrade+0x8f0/0x8f0 [ 401.680640] ? kasan_check_read+0x11/0x20 [ 401.680662] ? dput.part.26+0x276/0x7a0 [ 401.698028] ? find_held_lock+0x36/0x1c0 [ 401.702119] ? check_same_owner+0x340/0x340 [ 401.706446] ? filename_parentat.isra.58+0x424/0x570 [ 401.711564] ? rcu_note_context_switch+0x680/0x680 [ 401.716504] ? getname+0x20/0x20 [ 401.719883] __should_failslab+0x124/0x180 [ 401.724150] should_failslab+0x9/0x14 [ 401.727962] kmem_cache_alloc+0x29c/0x710 [ 401.732127] getname_flags+0xd0/0x5a0 [ 401.735952] ? trace_hardirqs_off+0xb8/0x2b0 [ 401.740377] do_renameat2+0x36e/0x1120 [ 401.744289] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 401.749239] ? wait_for_completion+0x8d0/0x8d0 [ 401.753832] ? user_path_create+0x40/0x40 [ 401.757989] ? __lock_is_held+0xb5/0x140 [ 401.762081] ? fput+0x130/0x1a0 [ 401.762108] ? do_syscall_64+0x9a/0x820 [ 401.769352] ? do_syscall_64+0x9a/0x820 [ 401.773340] ? trace_hardirqs_on+0xbd/0x2c0 [ 401.777668] ? __ia32_sys_read+0xb0/0xb0 [ 401.781742] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.787118] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 401.792240] __x64_sys_rename+0x5e/0x80 [ 401.796234] do_syscall_64+0x1b9/0x820 [ 401.800141] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.805527] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.810468] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 401.815497] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.820524] ? recalc_sigpending_tsk+0x180/0x180 [ 401.825288] ? kasan_check_write+0x14/0x20 [ 401.829540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.834396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.839634] RIP: 0033:0x457089 [ 401.842830] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.861739] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 401.869455] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 401.876725] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 401.883999] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.891275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 401.898565] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002 11:50:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf}, 0x0) 11:50:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3ff4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000200)="812a11c15d6efa64f85df1b2648f6557a0589e6a49c0d2a8a3e8a6013f66ec565ce11faff76f30f9e28bd58e87bc65838bc670ae77bfda321dc06ed8005f05d107be1695ee1e2b5a39d86cde9e9c961a7dde8132d68667c01b61745f698eed8e8eb77a0bafe7d0bfd7c6147cdfda471f2a44d1d426655b88a3987d7f7041a0ac03a2f8", &(0x7f0000001080)=""/4096}, 0x18) 11:50:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4f3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:16 executing program 5 (fault-call:14 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:16 executing program 2 (fault-call:14 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 402.155869] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 402.218921] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 402.247706] FAULT_INJECTION: forcing a failure. [ 402.247706] name failslab, interval 1, probability 0, space 0, times 0 [ 402.259323] CPU: 0 PID: 18749 Comm: syz-executor5 Not tainted 4.18.0+ #205 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) [ 402.266348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.275709] Call Trace: [ 402.278317] dump_stack+0x1c9/0x2b4 [ 402.281978] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.287191] ? mark_held_locks+0x160/0x160 [ 402.291450] ? print_usage_bug+0xc0/0xc0 [ 402.295548] should_fail.cold.4+0xa/0x11 [ 402.299633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.299669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.310292] ? walk_component+0x3fe/0x2630 [ 402.314551] ? graph_lock+0x170/0x170 [ 402.318362] ? mark_held_locks+0x160/0x160 [ 402.322617] ? find_held_lock+0x36/0x1c0 [ 402.326693] ? __lock_is_held+0xb5/0x140 [ 402.330782] ? check_same_owner+0x340/0x340 [ 402.335119] ? rcu_note_context_switch+0x680/0x680 [ 402.340066] __should_failslab+0x124/0x180 [ 402.344316] should_failslab+0x9/0x14 [ 402.348126] kmem_cache_alloc+0x29c/0x710 [ 402.352287] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 402.356974] __d_alloc+0xc8/0xd50 [ 402.360440] ? shrink_dcache_for_umount+0x2b0/0x2b0 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) [ 402.365470] ? d_alloc_parallel+0x1eb0/0x1eb0 [ 402.369979] ? d_lookup+0x269/0x340 [ 402.373614] ? d_lookup+0x269/0x340 [ 402.377251] ? lockdep_hardirqs_on+0x421/0x5c0 [ 402.381850] ? lock_rename+0x236/0x290 [ 402.385752] ? lookup_dcache+0x22/0x140 [ 402.389739] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 402.394854] ? lock_release+0x9f0/0x9f0 [ 402.398843] ? check_same_owner+0x340/0x340 [ 402.403181] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 402.408208] d_alloc+0x96/0x380 [ 402.411493] ? __d_lookup+0x9e0/0x9e0 [ 402.415305] ? __d_alloc+0xd50/0xd50 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e}, 0x0) [ 402.419030] ? lock_rename+0x236/0x290 [ 402.422947] __lookup_hash+0xd9/0x190 [ 402.426763] do_renameat2+0x6ce/0x1120 [ 402.430675] ? user_path_create+0x40/0x40 [ 402.434830] ? __lock_is_held+0xb5/0x140 [ 402.438945] ? do_syscall_64+0x9a/0x820 [ 402.442953] ? do_syscall_64+0x9a/0x820 [ 402.446956] ? trace_hardirqs_on+0xbd/0x2c0 [ 402.451287] ? __ia32_sys_read+0xb0/0xb0 [ 402.455365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.460742] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 402.465850] ? ksys_mount+0xa8/0x140 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x200000000000000}, 0x0) [ 402.469582] __x64_sys_rename+0x5e/0x80 [ 402.473592] do_syscall_64+0x1b9/0x820 [ 402.477495] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.482879] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.487838] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 402.492871] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.497917] ? recalc_sigpending_tsk+0x180/0x180 [ 402.502691] ? kasan_check_write+0x14/0x20 [ 402.506956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.511819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.517023] RIP: 0033:0x457089 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffff000}, 0x0) [ 402.520232] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.539149] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 402.546881] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 402.554174] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 402.561463] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.568746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 402.576052] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002 [ 402.608618] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 402.618086] FAULT_INJECTION: forcing a failure. [ 402.618086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.629495] nla_parse: 13 callbacks suppressed [ 402.629506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 402.629930] CPU: 1 PID: 18748 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 402.649934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.659298] Call Trace: [ 402.659327] dump_stack+0x1c9/0x2b4 [ 402.659354] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.659385] ? __follow_mount_rcu.isra.35.part.36+0x890/0x890 [ 402.676649] should_fail.cold.4+0xa/0x11 [ 402.680721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.685837] ? map_id_up+0x19e/0x3e0 [ 402.689563] ? make_kprojid+0x30/0x30 [ 402.693368] ? find_held_lock+0x36/0x1c0 [ 402.697455] ? mark_held_locks+0x160/0x160 [ 402.701700] ? from_kgid+0x87/0xc0 [ 402.705252] ? graph_lock+0x170/0x170 [ 402.709065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.714605] ? security_capable+0x99/0xc0 [ 402.718767] ? graph_lock+0x170/0x170 [ 402.722573] ? find_held_lock+0x36/0x1c0 [ 402.726642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.732202] ? should_fail+0x246/0xd86 [ 402.736097] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.741208] __alloc_pages_nodemask+0x365/0xd10 [ 402.745881] ? lock_downgrade+0x8f0/0x8f0 [ 402.750048] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 402.755065] ? dput.part.26+0x276/0x7a0 [ 402.759047] ? find_held_lock+0x36/0x1c0 [ 402.763128] ? trace_hardirqs_off+0xb8/0x2b0 [ 402.767545] cache_grow_begin+0x91/0x710 [ 402.771616] kmem_cache_alloc+0x63a/0x710 [ 402.775777] getname_flags+0xd0/0x5a0 [ 402.779577] ? trace_hardirqs_off+0xb8/0x2b0 [ 402.783993] do_renameat2+0x36e/0x1120 [ 402.787890] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 402.792835] ? wait_for_completion+0x8d0/0x8d0 [ 402.797421] ? user_path_create+0x40/0x40 [ 402.801598] ? __lock_is_held+0xb5/0x140 [ 402.805683] ? fput+0x130/0x1a0 [ 402.808966] ? do_syscall_64+0x9a/0x820 [ 402.812944] ? do_syscall_64+0x9a/0x820 [ 402.817011] ? trace_hardirqs_on+0xbd/0x2c0 [ 402.821333] ? __ia32_sys_read+0xb0/0xb0 [ 402.825400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.830769] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 402.835881] __x64_sys_rename+0x5e/0x80 [ 402.839869] do_syscall_64+0x1b9/0x820 [ 402.843768] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.849136] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.854077] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 402.859110] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.864136] ? recalc_sigpending_tsk+0x180/0x180 [ 402.868912] ? kasan_check_write+0x14/0x20 [ 402.873160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.878017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.883208] RIP: 0033:0x457089 [ 402.886404] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.905316] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 402.913032] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 11:50:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x230}, 0x0) 11:50:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 402.920300] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 402.927566] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.934856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 402.942127] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000003 [ 403.034852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:17 executing program 5 (fault-call:14 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000d640)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f000000d740)=0xe8) sendmmsg(r0, &(0x7f000000dd00)=[{{&(0x7f0000000200)=@ax25={0x3, {"2edec176f5be72"}, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="dfba97a3e59739334eaba191c3eb20ba60d4213ab2691173a0c3bbf3273cae0110bff639e8ed2aee5b23b6a9fe7052a244daa0862d8a0a81204a785cc7e35092757fbba2908a62bcc76fefcd74dad511bb7fb2bd0879d68be9fef8ad6c002f2d723b27a55f26f2a589e8325626215742f5bdb29d7dc5bad30b6efe8689836f9765eb12d314ad28d20f78815583c847b50ffc0dfe7ad3a84fbf2b30efc52b7fe649d3a616618c048d5db6431e0504e36983ffa0974394", 0xb6}, {&(0x7f0000000580)="b861ab354b85b40d385f88cb671adb170e5dbe58c00ce17a14d4a5cfbb935dbd54903946445d2c4255c350ed29eb42c7b89a8185afc04bd08b4902de211c92d72f96b8f05c0efa2710e5fa62de88820bdf8897209cbba30d73fde9a447cf4d5ef7108ded0e3c18d84796c4118a8479ef8d620b141fafebfd71c9e3e7d6670ac574fb188eb5c3169c827d6b0454a788d01a3506054ccdd4d785b5d4d70d0376f10da213bafd5f9e211a3f6ce22a4d65bf92149f9c45eb0ea7cb5fe5e90c201cdc77bcfe4017ebde79581f6660171c6c1ef9d9", 0xd2}], 0x2, &(0x7f0000000680)=[{0xf8, 0x1ff, 0xd5, "9927c7cd44d520d58467f0112add7ca81bd36c242a001197442665a40813e360a8a2862ef42be16e9afc3cf25a841df1108cebde537881205a730b0381184dc4aaae1cee00290b43d5c89e1f334cdb4d9fcad0239df1cd832b2046abb0a0b9fa8657b77f626579682e385bf4feb5cd324e0bd9ec7c59e76b6122f9e9f76b491685af2a731e1822e5b9641e9661dad6ebd50d3980eaac6efb20992e1cf66ffda3abc12351e3cbb21453faf9a2286d879ab7b6de28d74cb05c2c7a4965fbaae55457ee1484b4921c58ba6e4637c49dae33d6a51d1afff63c791e4b3bc006824e07c7d9f3"}, {0x20, 0xff, 0x9, "78002e65fdb06a8e2253f9a693eb"}], 0x118, 0x40080}, 0x1}, {{&(0x7f000000d780)=@can={0x1d, r1}, 0x80, &(0x7f000000da80)=[{&(0x7f000000d800)="cbd509d744b518", 0x7}, {&(0x7f000000d840)="8e4c769070a4b52dc2120dde34ca0f403aa71ed2bb71aeba9bcc5c08989e80ee74b77f09db0a4a5c2de6ebc78c7987b92f4ce3cf9f", 0x35}, {&(0x7f000000d880)="b6fbb2cb52718e69b2135fa6fc3d26de7f802a4519d450f28191ce933593bb3f6cf628c73fb3e70057d76ca331287c6bb68c968e8c77da0aec6e595795fdc990658c869ff07584d0b32e5f2027a835349df4c08e99c7b51b86b0391a973625be201c7f05c000a87b93a7a1cf90dbe632bfbb9a4b0d39244bc8a8bc11fd9da368d80a6a0a0ed073f9e99e53c1fceb7844a06e9c9d16c66596959f30b224a1c9291eab41f8c28084e3d211142f424fb643eb6a805c178f4c63ed4a10268e19e9fb25fff5b050ec36bb01cac61beaab29b9a5593e7b0c87ccde0b4ca0d14b73e157f1195837d636a8c7", 0xe8}, {&(0x7f000000d980)="ff2ffbafbaaf2ab5c4a2851db5a11985d9e036014623548a1e2c254e567350dee02963bbffc4f9b3c4356ecc058aedf652eafb3145c1bc917bc5e9614746c47f8e059df33c2c2d4b55a592537d31b7c448038716dfa23ebff37a658c02142ceed05e6841c06bbe13ece6a26e4944b7d70a42d3fa2434469549ea2f705a46c00ea2f60d3783e89a0b0e9323f033e2f769559f2bb5e6c228944c8bcf60a5303ea5d58aa1330d3039a9c99083059624fe235a9ad4369f759ae5f2dea307d9f7b88d51ad73c32b85cf4c80", 0xc9}], 0x4, &(0x7f000000dac0)=[{0x90, 0x116, 0x1c00000000000000, "6e38d40dbf3e0611534c335acefe4fcbf8a8730e6d6badfdc2116a8519e5e69dac5d1baef28f98b77ca118872c2e59c7fb3ba701169ceebae5dc92309903da1eac38c58c16f51ee04b7e7c24f2f918ce18d6740db276c1fee67222f968f9c3cb99028a08eb87c63a193a6ce25aa0e67284cf9f59f9b47187816b9d"}], 0x90, 0x40}, 0xffff}, {{&(0x7f000000db80)=@ax25={0x3, {"6f4451df92603c"}, 0x4}, 0x80, &(0x7f000000dc40)=[{&(0x7f000000dc00)="bc4378d2a0fe762a776770de3e5731d7fc5817", 0x13}], 0x1, &(0x7f000000dc80)=[{0x78, 0x0, 0x200, "dcd78ea2d78ac877efdec2d34e470af08bb9630d87c7a8209d4ebe22d803a96b919f97fc6a876bc372bcbf49b90607d649525e4482420a6b3d695b738ba6592260a7f1a8e8e399824ca14e52406c3c8027e97a0337ab6379b2360884e147e38aceb9"}], 0x78, 0x20000000}, 0x80}], 0x3, 0x800) ioctl(r0, 0x8912, &(0x7f0000000880)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000007c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000840)={r2, 0x4, 0x20, 0x20, 0x800}, &(0x7f00000008c0)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:17 executing program 2 (fault-call:14 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 11:50:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf43f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 403.207773] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 403.275235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 403.283918] FAULT_INJECTION: forcing a failure. [ 403.283918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.295817] CPU: 0 PID: 18814 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 403.302853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.312222] Call Trace: [ 403.314832] dump_stack+0x1c9/0x2b4 [ 403.318492] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.323705] ? __follow_mount_rcu.isra.35.part.36+0x890/0x890 [ 403.329613] should_fail.cold.4+0xa/0x11 [ 403.333687] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.338796] ? map_id_up+0x19e/0x3e0 [ 403.342521] ? make_kprojid+0x30/0x30 [ 403.346325] ? find_held_lock+0x36/0x1c0 [ 403.350402] ? mark_held_locks+0x160/0x160 [ 403.355738] ? from_kgid+0x87/0xc0 [ 403.359293] ? graph_lock+0x170/0x170 [ 403.363111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.368660] ? security_capable+0x99/0xc0 [ 403.372820] ? graph_lock+0x170/0x170 [ 403.376639] ? find_held_lock+0x36/0x1c0 [ 403.380720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.386294] ? should_fail+0x246/0xd86 [ 403.390195] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.395312] __alloc_pages_nodemask+0x365/0xd10 [ 403.399988] ? lock_downgrade+0x8f0/0x8f0 [ 403.404147] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 403.409170] ? dput.part.26+0x276/0x7a0 [ 403.413153] ? find_held_lock+0x36/0x1c0 [ 403.417243] ? trace_hardirqs_off+0xb8/0x2b0 [ 403.421667] cache_grow_begin+0x91/0x710 [ 403.425740] kmem_cache_alloc+0x63a/0x710 [ 403.429910] getname_flags+0xd0/0x5a0 [ 403.433721] ? trace_hardirqs_off+0xb8/0x2b0 [ 403.438138] do_renameat2+0x36e/0x1120 [ 403.442041] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 403.446985] ? wait_for_completion+0x8d0/0x8d0 [ 403.451574] ? user_path_create+0x40/0x40 [ 403.455731] ? __lock_is_held+0xb5/0x140 [ 403.459816] ? fput+0x130/0x1a0 [ 403.463105] ? do_syscall_64+0x9a/0x820 [ 403.467086] ? do_syscall_64+0x9a/0x820 [ 403.471070] ? trace_hardirqs_on+0xbd/0x2c0 [ 403.475398] ? __ia32_sys_read+0xb0/0xb0 [ 403.479473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.484841] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 403.489956] __x64_sys_rename+0x5e/0x80 [ 403.493950] do_syscall_64+0x1b9/0x820 [ 403.497844] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 403.503215] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.508147] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 403.513167] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 403.518187] ? recalc_sigpending_tsk+0x180/0x180 [ 403.522951] ? kasan_check_write+0x14/0x20 [ 403.527202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.532058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.537251] RIP: 0033:0x457089 [ 403.540450] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.559356] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 403.567067] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 403.574335] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 403.581605] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.588879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 403.596163] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000003 [ 403.624574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 403.637617] FAULT_INJECTION: forcing a failure. [ 403.637617] name failslab, interval 1, probability 0, space 0, times 0 [ 403.648989] CPU: 0 PID: 18822 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 403.656024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.665387] Call Trace: [ 403.667998] dump_stack+0x1c9/0x2b4 [ 403.671645] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.676853] ? mark_held_locks+0x160/0x160 [ 403.681189] ? print_usage_bug+0xc0/0xc0 [ 403.685276] should_fail.cold.4+0xa/0x11 [ 403.685302] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.685325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.685343] ? walk_component+0x3fe/0x2630 [ 403.685377] ? graph_lock+0x170/0x170 [ 403.708103] ? mark_held_locks+0x160/0x160 [ 403.712360] ? find_held_lock+0x36/0x1c0 [ 403.716437] ? __lock_is_held+0xb5/0x140 [ 403.720517] ? check_same_owner+0x340/0x340 [ 403.724851] ? rcu_note_context_switch+0x680/0x680 [ 403.729794] __should_failslab+0x124/0x180 [ 403.734042] should_failslab+0x9/0x14 [ 403.737852] kmem_cache_alloc+0x29c/0x710 [ 403.742011] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 403.746695] __d_alloc+0xc8/0xd50 [ 403.750163] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 403.755191] ? d_alloc_parallel+0x1eb0/0x1eb0 [ 403.759686] ? d_lookup+0x269/0x340 [ 403.763315] ? d_lookup+0x269/0x340 [ 403.766950] ? lockdep_hardirqs_on+0x421/0x5c0 [ 403.771537] ? lock_rename+0x236/0x290 [ 403.775423] ? lookup_dcache+0x22/0x140 [ 403.779401] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 403.784508] ? lock_release+0x9f0/0x9f0 [ 403.788485] ? check_same_owner+0x340/0x340 [ 403.792813] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 403.797839] d_alloc+0x96/0x380 [ 403.801123] ? __d_lookup+0x9e0/0x9e0 [ 403.804941] ? __d_alloc+0xd50/0xd50 [ 403.808655] ? lock_rename+0x236/0x290 [ 403.812551] __lookup_hash+0xd9/0x190 [ 403.816360] do_renameat2+0x6ce/0x1120 [ 403.820269] ? user_path_create+0x40/0x40 [ 403.824421] ? __lock_is_held+0xb5/0x140 [ 403.828508] ? do_syscall_64+0x9a/0x820 [ 403.832484] ? do_syscall_64+0x9a/0x820 [ 403.836464] ? trace_hardirqs_on+0xbd/0x2c0 [ 403.840790] ? __ia32_sys_read+0xb0/0xb0 [ 403.844859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.850224] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 403.855335] __x64_sys_rename+0x5e/0x80 [ 403.859323] do_syscall_64+0x1b9/0x820 [ 403.863219] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 403.868588] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.873519] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 403.878546] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 403.883565] ? recalc_sigpending_tsk+0x180/0x180 [ 403.888327] ? kasan_check_write+0x14/0x20 [ 403.892571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.897425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.902616] RIP: 0033:0x457089 [ 403.905814] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:50:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x1000000}, 0x0) 11:50:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9e080000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 403.924723] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 403.932447] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 403.939723] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 403.946993] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.954259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 403.961529] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000004 11:50:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf44b}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:18 executing program 5 (fault-call:14 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0}, 0x0) [ 404.023427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 404.126973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 404.161690] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xec0}, 0x0) [ 404.202596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 404.215621] 9pnet: Insufficient options for proto=fd [ 404.219945] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 404.277917] 9pnet: Insufficient options for proto=fd [ 404.294484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 404.341898] FAULT_INJECTION: forcing a failure. [ 404.341898] name failslab, interval 1, probability 0, space 0, times 0 [ 404.353317] CPU: 1 PID: 18865 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 404.360351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.369714] Call Trace: [ 404.372326] dump_stack+0x1c9/0x2b4 [ 404.375977] ? dump_stack_print_info.cold.2+0x52/0x52 [ 404.381180] ? mark_held_locks+0x160/0x160 [ 404.385434] ? print_usage_bug+0xc0/0xc0 [ 404.389522] should_fail.cold.4+0xa/0x11 [ 404.393617] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 404.398740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.404299] ? walk_component+0x3fe/0x2630 [ 404.408579] ? graph_lock+0x170/0x170 [ 404.412402] ? mark_held_locks+0x160/0x160 [ 404.416666] ? find_held_lock+0x36/0x1c0 [ 404.416731] ? __lock_is_held+0xb5/0x140 [ 404.416767] ? check_same_owner+0x340/0x340 [ 404.429180] ? rcu_note_context_switch+0x680/0x680 [ 404.434125] __should_failslab+0x124/0x180 [ 404.438374] should_failslab+0x9/0x14 [ 404.442186] kmem_cache_alloc+0x29c/0x710 [ 404.446345] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 404.451037] __d_alloc+0xc8/0xd50 [ 404.454506] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 404.459538] ? d_alloc_parallel+0x1eb0/0x1eb0 [ 404.464041] ? d_lookup+0x269/0x340 [ 404.467680] ? d_lookup+0x269/0x340 [ 404.471321] ? lockdep_hardirqs_on+0x421/0x5c0 [ 404.475921] ? lock_rename+0x236/0x290 [ 404.479825] ? lookup_dcache+0x22/0x140 [ 404.483808] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 404.488943] ? lock_release+0x9f0/0x9f0 [ 404.492936] ? check_same_owner+0x340/0x340 [ 404.497276] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 404.502312] d_alloc+0x96/0x380 [ 404.505602] ? __d_lookup+0x9e0/0x9e0 [ 404.509417] ? __d_alloc+0xd50/0xd50 [ 404.513160] ? lock_rename+0x236/0x290 [ 404.517071] __lookup_hash+0xd9/0x190 [ 404.520890] do_renameat2+0x6ce/0x1120 [ 404.524814] ? user_path_create+0x40/0x40 [ 404.528977] ? __lock_is_held+0xb5/0x140 [ 404.533073] ? do_syscall_64+0x9a/0x820 [ 404.537061] ? do_syscall_64+0x9a/0x820 [ 404.541052] ? trace_hardirqs_on+0xbd/0x2c0 [ 404.545385] ? __ia32_sys_read+0xb0/0xb0 [ 404.549469] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.554845] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 404.559966] ? ksys_ioctl+0x81/0xd0 [ 404.563616] __x64_sys_rename+0x5e/0x80 [ 404.567607] do_syscall_64+0x1b9/0x820 [ 404.571515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 404.576891] ? syscall_return_slowpath+0x5e0/0x5e0 [ 404.581839] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 404.586887] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 404.591922] ? recalc_sigpending_tsk+0x180/0x180 [ 404.596682] ? kasan_check_write+0x14/0x20 [ 404.600935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.605788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.611001] RIP: 0033:0x457089 [ 404.614221] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.633155] RSP: 002b:00007ff597060c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 404.640893] RAX: ffffffffffffffda RBX: 00007ff5970616d4 RCX: 0000000000457089 [ 404.648194] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 404.655466] RBP: 0000000000930280 R08: 0000000000000000 R09: 0000000000000000 [ 404.662761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 404.670030] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000004 [ 404.753487] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x6, &(0x7f00000002c0)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESDEC=r0], &(0x7f0000000180)="73e26f797a84836c6c657200", 0x0, 0xce, &(0x7f0000000480)=""/206, 0x0, 0x0, [], 0x0, 0x100000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1700000000000085100000050000003c00000000000000bf6100000000000085100000023bf8d88bdc077590a1000000bf010000000000009500000000aa000015010036de4e2400b700000000000000950000000000ac8b9c2d7bf2d2edf27f4f7a5226b50000649b24a2355bfd3a242b2ba64c0b5cbcc4f2aa017a38c4bb96353036c4c405c6275b659440cbc6f5a43a336765a2c53ca84f0267959da74a5f5c"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) fcntl$dupfd(r1, 0x406, r2) 11:50:18 executing program 2 (fault-call:14 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 11:50:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:18 executing program 5 (fault-call:14 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 404.995618] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3002000000000000}, 0x0) [ 405.072676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 405.081507] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 405.109510] FAULT_INJECTION: forcing a failure. [ 405.109510] name failslab, interval 1, probability 0, space 0, times 0 [ 405.112173] FAULT_INJECTION: forcing a failure. [ 405.112173] name failslab, interval 1, probability 0, space 0, times 0 [ 405.120869] CPU: 0 PID: 18898 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 405.139012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.148363] Call Trace: [ 405.150966] dump_stack+0x1c9/0x2b4 [ 405.154602] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.159805] ? kernel_text_address+0x79/0xf0 [ 405.164216] ? __kernel_text_address+0xd/0x40 [ 405.168721] should_fail.cold.4+0xa/0x11 [ 405.172792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.177919] ? save_stack+0xa9/0xd0 [ 405.181561] ? save_stack+0x43/0xd0 [ 405.185208] ? kasan_kmalloc+0xc4/0xe0 [ 405.189118] ? kasan_slab_alloc+0x12/0x20 [ 405.193274] ? graph_lock+0x170/0x170 [ 405.197083] ? graph_lock+0x170/0x170 [ 405.200890] ? find_held_lock+0x36/0x1c0 [ 405.204989] ? __lock_is_held+0xb5/0x140 [ 405.209066] ? check_same_owner+0x340/0x340 [ 405.213394] ? lock_downgrade+0x8f0/0x8f0 [ 405.217551] ? rcu_note_context_switch+0x680/0x680 [ 405.222501] __should_failslab+0x124/0x180 [ 405.227194] should_failslab+0x9/0x14 [ 405.231002] kmem_cache_alloc_trace+0x2b5/0x730 [ 405.235674] ? do_raw_spin_lock+0xc1/0x200 [ 405.239936] p9_fid_create+0x49/0x280 [ 405.243742] p9_client_walk+0x124/0xaa0 [ 405.247720] ? find_held_lock+0x36/0x1c0 [ 405.251788] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 405.257417] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 405.262439] ? lock_downgrade+0x84c/0x8f0 [ 405.266594] ? v9fs_fid_add+0x200/0x200 [ 405.270574] ? kasan_check_read+0x11/0x20 [ 405.274728] ? do_raw_spin_unlock+0xa7/0x2f0 [ 405.279139] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 405.283735] v9fs_vfs_lookup+0x1f7/0x4a0 [ 405.287801] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 405.292039] ? d_alloc+0x290/0x380 [ 405.295586] ? v9fs_vfs_create+0x130/0x130 [ 405.299825] ? lock_rename+0x236/0x290 [ 405.303729] __lookup_hash+0x12e/0x190 [ 405.307626] do_renameat2+0x6ce/0x1120 [ 405.311534] ? user_path_create+0x40/0x40 [ 405.315686] ? __lock_is_held+0xb5/0x140 [ 405.319776] ? do_syscall_64+0x9a/0x820 [ 405.323763] ? do_syscall_64+0x9a/0x820 [ 405.327744] ? trace_hardirqs_on+0xbd/0x2c0 [ 405.332074] ? __ia32_sys_read+0xb0/0xb0 [ 405.336143] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.341510] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 405.346626] __x64_sys_rename+0x5e/0x80 [ 405.350609] do_syscall_64+0x1b9/0x820 [ 405.354503] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.360096] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.365030] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 405.370057] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.375079] ? recalc_sigpending_tsk+0x180/0x180 [ 405.379841] ? kasan_check_write+0x14/0x20 [ 405.384088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.388962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.394157] RIP: 0033:0x457089 [ 405.397359] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.416264] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 405.423985] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 405.431262] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 405.438536] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 405.445809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 405.453084] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000005 [ 405.460459] CPU: 1 PID: 18899 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 405.467502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.476863] Call Trace: [ 405.479473] dump_stack+0x1c9/0x2b4 [ 405.483124] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.483142] ? kernel_text_address+0x79/0xf0 [ 405.483157] ? __kernel_text_address+0xd/0x40 [ 405.483181] should_fail.cold.4+0xa/0x11 [ 405.500127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 405.501309] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.501332] ? save_stack+0xa9/0xd0 [ 405.501348] ? save_stack+0x43/0xd0 11:50:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x100000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 405.501362] ? kasan_kmalloc+0xc4/0xe0 [ 405.501376] ? kasan_slab_alloc+0x12/0x20 [ 405.501395] ? graph_lock+0x170/0x170 [ 405.501415] ? graph_lock+0x170/0x170 [ 405.537813] ? find_held_lock+0x36/0x1c0 [ 405.541893] ? __lock_is_held+0xb5/0x140 [ 405.545989] ? check_same_owner+0x340/0x340 [ 405.550326] ? lock_downgrade+0x8f0/0x8f0 [ 405.554492] ? rcu_note_context_switch+0x680/0x680 [ 405.559448] __should_failslab+0x124/0x180 [ 405.559468] should_failslab+0x9/0x14 [ 405.559483] kmem_cache_alloc_trace+0x2b5/0x730 [ 405.559500] ? do_raw_spin_lock+0xc1/0x200 [ 405.559522] p9_fid_create+0x49/0x280 [ 405.580236] p9_client_walk+0x124/0xaa0 [ 405.584231] ? find_held_lock+0x36/0x1c0 [ 405.588324] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 405.593959] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 405.599030] ? lock_downgrade+0x84c/0x8f0 [ 405.603189] ? v9fs_fid_add+0x200/0x200 [ 405.607175] ? kasan_check_read+0x11/0x20 [ 405.611333] ? do_raw_spin_unlock+0xa7/0x2f0 [ 405.615757] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 405.620363] v9fs_vfs_lookup+0x1f7/0x4a0 11:50:19 executing program 3: prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$TIOCSBRK(r2, 0x5427) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 405.624446] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 405.628694] ? d_alloc+0x290/0x380 [ 405.632247] ? v9fs_vfs_create+0x130/0x130 [ 405.636492] ? lock_rename+0x236/0x290 [ 405.640399] __lookup_hash+0x12e/0x190 [ 405.644311] do_renameat2+0x6ce/0x1120 [ 405.648225] ? user_path_create+0x40/0x40 [ 405.652386] ? __lock_is_held+0xb5/0x140 [ 405.656487] ? do_syscall_64+0x9a/0x820 [ 405.660474] ? do_syscall_64+0x9a/0x820 [ 405.664465] ? trace_hardirqs_on+0xbd/0x2c0 [ 405.668806] ? __ia32_sys_read+0xb0/0xb0 [ 405.672885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.678278] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 405.683400] __x64_sys_rename+0x5e/0x80 [ 405.683420] do_syscall_64+0x1b9/0x820 [ 405.683447] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.683467] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.701606] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 405.706631] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.711652] ? recalc_sigpending_tsk+0x180/0x180 [ 405.716412] ? kasan_check_write+0x14/0x20 [ 405.720663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.725515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.730707] RIP: 0033:0x457089 [ 405.733919] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.752822] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 405.760537] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 405.767808] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 405.775078] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 405.782353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 405.789633] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000005 11:50:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 405.828570] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 11:50:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:19 executing program 2 (fault-call:14 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 405.962475] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 406.028938] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 406.104166] FAULT_INJECTION: forcing a failure. [ 406.104166] name failslab, interval 1, probability 0, space 0, times 0 [ 406.115747] CPU: 1 PID: 18943 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 406.122769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.122784] Call Trace: [ 406.122809] dump_stack+0x1c9/0x2b4 [ 406.122835] ? dump_stack_print_info.cold.2+0x52/0x52 [ 406.122872] should_fail.cold.4+0xa/0x11 [ 406.147721] ? find_held_lock+0x36/0x1c0 [ 406.151798] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 406.156928] ? mark_held_locks+0x160/0x160 [ 406.161175] ? mark_held_locks+0x160/0x160 [ 406.165421] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 406.170542] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 406.175664] ? print_usage_bug+0xc0/0xc0 [ 406.179736] ? print_usage_bug+0xc0/0xc0 [ 406.183830] ? do_raw_spin_lock+0xc1/0x200 [ 406.188095] ? mark_held_locks+0x160/0x160 [ 406.192344] ? __lock_acquire+0x7fc/0x5020 [ 406.196595] ? graph_lock+0x170/0x170 [ 406.200412] ? graph_lock+0x170/0x170 [ 406.204245] __should_failslab+0x124/0x180 [ 406.208491] should_failslab+0x9/0x14 [ 406.212308] kmem_cache_alloc+0x47/0x710 [ 406.216384] ? find_held_lock+0x36/0x1c0 [ 406.220479] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 406.226208] radix_tree_extend+0x295/0x650 [ 406.230472] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 406.236374] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 406.241062] ? mark_held_locks+0x160/0x160 [ 406.245305] ? is_bpf_text_address+0xd7/0x170 [ 406.249816] idr_get_free+0x9ad/0x10c0 [ 406.253744] ? radix_tree_clear_tags+0xc0/0xc0 [ 406.258342] ? save_stack+0xa9/0xd0 [ 406.261985] ? save_stack+0x43/0xd0 [ 406.265620] ? kmem_cache_alloc_trace+0x152/0x730 [ 406.270470] ? p9_fid_create+0x49/0x280 [ 406.274462] ? p9_client_walk+0x124/0xaa0 [ 406.278622] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 406.282882] ? do_renameat2+0x6ce/0x1120 [ 406.286994] ? __x64_sys_rename+0x5e/0x80 [ 406.291162] ? do_syscall_64+0x1b9/0x820 [ 406.295261] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.300643] ? graph_lock+0x170/0x170 [ 406.304465] ? find_held_lock+0x36/0x1c0 [ 406.308546] ? graph_lock+0x170/0x170 [ 406.312357] ? mark_held_locks+0xc9/0x160 [ 406.316522] ? kmem_cache_alloc_trace+0x275/0x730 [ 406.318672] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 406.321379] ? lock_acquire+0x1e4/0x4f0 [ 406.321396] ? p9_fid_create+0x1bc/0x280 [ 406.321418] idr_alloc_u32+0x201/0x3f0 [ 406.321452] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 406.346579] ? trace_hardirqs_on+0x2c0/0x2c0 [ 406.350998] ? kasan_check_write+0x14/0x20 [ 406.355222] ? do_raw_spin_lock+0xc1/0x200 [ 406.359453] p9_fid_create+0x1d7/0x280 [ 406.363330] p9_client_walk+0x124/0xaa0 [ 406.367300] ? find_held_lock+0x36/0x1c0 [ 406.371363] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 406.376989] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 406.382002] ? lock_downgrade+0x84c/0x8f0 [ 406.386135] ? v9fs_fid_add+0x200/0x200 [ 406.390098] ? kasan_check_read+0x11/0x20 [ 406.394243] ? do_raw_spin_unlock+0xa7/0x2f0 [ 406.398661] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 406.403254] v9fs_vfs_lookup+0x1f7/0x4a0 [ 406.407322] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 406.411542] ? d_alloc+0x290/0x380 [ 406.415070] ? v9fs_vfs_create+0x130/0x130 [ 406.419301] ? lock_rename+0x236/0x290 [ 406.423201] __lookup_hash+0x12e/0x190 [ 406.427109] do_renameat2+0x6ce/0x1120 [ 406.431015] ? user_path_create+0x40/0x40 [ 406.435169] ? __lock_is_held+0xb5/0x140 [ 406.439229] ? do_syscall_64+0x9a/0x820 [ 406.443200] ? do_syscall_64+0x9a/0x820 [ 406.447175] ? trace_hardirqs_on+0xbd/0x2c0 [ 406.451499] ? __ia32_sys_read+0xb0/0xb0 [ 406.455571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.460936] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 406.466047] __x64_sys_rename+0x5e/0x80 [ 406.470008] do_syscall_64+0x1b9/0x820 [ 406.473883] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 406.479273] ? syscall_return_slowpath+0x5e0/0x5e0 [ 406.484204] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 406.489232] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 406.494243] ? recalc_sigpending_tsk+0x180/0x180 [ 406.498995] ? kasan_check_write+0x14/0x20 [ 406.503256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.508110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.513293] RIP: 0033:0x457089 [ 406.516493] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.535421] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 406.543152] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 406.550404] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 406.557662] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.564967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 406.572227] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000006 11:50:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 11:50:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:20 executing program 5 (fault-call:14 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x12b) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', r2}) 11:50:20 executing program 2 (fault-call:14 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 406.680230] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 406.761666] FAULT_INJECTION: forcing a failure. [ 406.761666] name failslab, interval 1, probability 0, space 0, times 0 [ 406.771264] FAULT_INJECTION: forcing a failure. [ 406.771264] name failslab, interval 1, probability 0, space 0, times 0 [ 406.772900] CPU: 0 PID: 18972 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 406.772938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.800692] Call Trace: [ 406.803288] dump_stack+0x1c9/0x2b4 [ 406.806938] ? dump_stack_print_info.cold.2+0x52/0x52 [ 406.812148] should_fail.cold.4+0xa/0x11 [ 406.816211] ? find_held_lock+0x36/0x1c0 [ 406.820279] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 406.825387] ? mark_held_locks+0x160/0x160 [ 406.829625] ? mark_held_locks+0x160/0x160 [ 406.833864] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 406.838969] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 406.844080] ? print_usage_bug+0xc0/0xc0 [ 406.848148] ? print_usage_bug+0xc0/0xc0 [ 406.852213] ? do_raw_spin_lock+0xc1/0x200 [ 406.856455] ? mark_held_locks+0x160/0x160 [ 406.860702] ? __lock_acquire+0x7fc/0x5020 [ 406.864952] ? graph_lock+0x170/0x170 [ 406.868760] ? graph_lock+0x170/0x170 [ 406.872571] __should_failslab+0x124/0x180 [ 406.876815] should_failslab+0x9/0x14 [ 406.880619] kmem_cache_alloc+0x47/0x710 [ 406.884683] ? find_held_lock+0x36/0x1c0 [ 406.888760] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 406.894477] radix_tree_extend+0x295/0x650 [ 406.898722] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 406.904607] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 406.909284] ? mark_held_locks+0x160/0x160 [ 406.913521] ? is_bpf_text_address+0xd7/0x170 [ 406.918021] idr_get_free+0x9ad/0x10c0 [ 406.921941] ? radix_tree_clear_tags+0xc0/0xc0 [ 406.926527] ? save_stack+0xa9/0xd0 [ 406.930158] ? save_stack+0x43/0xd0 [ 406.933801] ? kmem_cache_alloc_trace+0x152/0x730 [ 406.938674] ? p9_fid_create+0x49/0x280 [ 406.942649] ? p9_client_walk+0x124/0xaa0 [ 406.946812] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 406.951048] ? do_renameat2+0x6ce/0x1120 [ 406.955112] ? __x64_sys_rename+0x5e/0x80 [ 406.959260] ? do_syscall_64+0x1b9/0x820 [ 406.963323] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.968691] ? graph_lock+0x170/0x170 [ 406.972500] ? find_held_lock+0x36/0x1c0 [ 406.976566] ? graph_lock+0x170/0x170 [ 406.980372] ? mark_held_locks+0xc9/0x160 [ 406.984527] ? kmem_cache_alloc_trace+0x275/0x730 [ 406.989372] ? lock_acquire+0x1e4/0x4f0 [ 406.993348] ? p9_fid_create+0x1bc/0x280 [ 406.997416] idr_alloc_u32+0x201/0x3f0 [ 407.001311] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 407.006155] ? trace_hardirqs_on+0x2c0/0x2c0 [ 407.010567] ? kasan_check_write+0x14/0x20 [ 407.014803] ? do_raw_spin_lock+0xc1/0x200 [ 407.019042] p9_fid_create+0x1d7/0x280 [ 407.022948] p9_client_walk+0x124/0xaa0 [ 407.026949] ? find_held_lock+0x36/0x1c0 [ 407.031020] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 407.036645] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 407.041663] ? lock_downgrade+0x84c/0x8f0 [ 407.045817] ? v9fs_fid_add+0x200/0x200 [ 407.049793] ? kasan_check_read+0x11/0x20 [ 407.054005] ? do_raw_spin_unlock+0xa7/0x2f0 [ 407.058418] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 407.063012] v9fs_vfs_lookup+0x1f7/0x4a0 [ 407.067073] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 407.071307] ? d_alloc+0x290/0x380 [ 407.074854] ? v9fs_vfs_create+0x130/0x130 [ 407.079085] ? lock_rename+0x236/0x290 [ 407.082997] __lookup_hash+0x12e/0x190 [ 407.086892] do_renameat2+0x6ce/0x1120 [ 407.090841] ? user_path_create+0x40/0x40 [ 407.094991] ? __lock_is_held+0xb5/0x140 [ 407.099082] ? do_syscall_64+0x9a/0x820 [ 407.103062] ? do_syscall_64+0x9a/0x820 [ 407.107043] ? trace_hardirqs_on+0xbd/0x2c0 [ 407.111364] ? __ia32_sys_read+0xb0/0xb0 [ 407.115429] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.120796] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 407.125918] __x64_sys_rename+0x5e/0x80 [ 407.129916] do_syscall_64+0x1b9/0x820 [ 407.133821] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 407.139186] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.144119] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 407.149137] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 407.154156] ? recalc_sigpending_tsk+0x180/0x180 [ 407.158950] ? kasan_check_write+0x14/0x20 [ 407.163195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.168059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.173250] RIP: 0033:0x457089 [ 407.176451] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.195358] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 407.203072] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 407.210337] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 407.217604] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.225358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 407.232625] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000006 [ 407.239926] CPU: 1 PID: 18975 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 407.246951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.256302] Call Trace: [ 407.258899] dump_stack+0x1c9/0x2b4 [ 407.262543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.267737] ? print_usage_bug+0xc0/0xc0 [ 407.271811] should_fail.cold.4+0xa/0x11 [ 407.275879] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.280992] ? print_usage_bug+0xc0/0xc0 [ 407.285058] ? __lock_acquire+0x7fc/0x5020 [ 407.289294] ? print_usage_bug+0xc0/0xc0 [ 407.293364] ? graph_lock+0x170/0x170 [ 407.297167] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 407.301850] ? find_held_lock+0x36/0x1c0 [ 407.305923] ? graph_lock+0x170/0x170 [ 407.309731] ? kasan_check_write+0x14/0x20 [ 407.313971] ? prep_compound_page+0x231/0x380 [ 407.318473] ? find_held_lock+0x36/0x1c0 [ 407.322545] __should_failslab+0x124/0x180 [ 407.326787] should_failslab+0x9/0x14 [ 407.330587] kmem_cache_alloc+0x47/0x710 [ 407.334647] ? lock_downgrade+0x8f0/0x8f0 [ 407.338809] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 407.344528] radix_tree_extend+0x295/0x650 [ 407.348770] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 407.354663] ? __lock_acquire+0x7fc/0x5020 [ 407.359412] idr_get_free+0x9ad/0x10c0 [ 407.363318] ? kasan_kmalloc+0xc4/0xe0 [ 407.367211] ? radix_tree_clear_tags+0xc0/0xc0 [ 407.371795] ? p9_client_walk+0x124/0xaa0 [ 407.375948] ? __lookup_hash+0x12e/0x190 [ 407.380013] ? do_renameat2+0x6ce/0x1120 [ 407.384077] ? __x64_sys_rename+0x5e/0x80 [ 407.388230] ? do_syscall_64+0x1b9/0x820 [ 407.392297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.397670] ? print_usage_bug+0xc0/0xc0 [ 407.401734] ? do_raw_spin_lock+0xc1/0x200 [ 407.405977] ? graph_lock+0x170/0x170 [ 407.409785] ? mark_held_locks+0x160/0x160 [ 407.414022] ? print_usage_bug+0xc0/0xc0 [ 407.418089] ? __lock_acquire+0x7fc/0x5020 [ 407.422330] ? __lock_is_held+0xb5/0x140 [ 407.426444] idr_alloc_u32+0x201/0x3f0 [ 407.430343] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 407.435190] ? p9_idpool_get+0x23/0x70 [ 407.439094] idr_alloc+0x111/0x1b0 [ 407.442643] ? idr_alloc_u32+0x3f0/0x3f0 [ 407.446710] ? do_raw_spin_lock+0xc1/0x200 [ 407.450965] p9_idpool_get+0x3d/0x70 [ 407.454710] p9_client_prepare_req.part.9+0xeb/0xba0 [ 407.459824] ? delete_node+0x311/0xce0 [ 407.463724] ? p9_free_req.isra.8+0x140/0x140 [ 407.468220] ? idr_destroy+0x1c0/0x1c0 [ 407.472112] ? radix_tree_clear_tags+0xc0/0xc0 [ 407.476703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.482244] ? replace_slot+0x153/0x500 [ 407.486234] p9_client_rpc+0x1c2/0x1400 [ 407.490225] ? plist_requeue+0x650/0x650 [ 407.494295] ? graph_lock+0x170/0x170 [ 407.498108] ? p9_client_prepare_req.part.9+0xba0/0xba0 [ 407.503484] ? find_held_lock+0x36/0x1c0 [ 407.507552] ? mark_held_locks+0xc9/0x160 [ 407.511728] ? _raw_spin_unlock_irq+0x27/0x70 [ 407.516228] ? _raw_spin_unlock_irq+0x27/0x70 [ 407.520731] ? lockdep_hardirqs_on+0x421/0x5c0 [ 407.525314] ? trace_hardirqs_on+0xbd/0x2c0 [ 407.529637] ? kasan_check_read+0x11/0x20 [ 407.533789] ? p9_fid_create+0x1e2/0x280 [ 407.537853] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 407.542959] ? kasan_check_write+0x14/0x20 [ 407.547200] ? do_raw_spin_lock+0xc1/0x200 [ 407.551452] p9_client_walk+0x208/0xaa0 [ 407.555439] ? find_held_lock+0x36/0x1c0 [ 407.559507] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 407.565134] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 407.570153] ? lock_downgrade+0x84c/0x8f0 [ 407.574307] ? v9fs_fid_add+0x200/0x200 [ 407.578286] ? kasan_check_read+0x11/0x20 [ 407.582446] ? do_raw_spin_unlock+0xa7/0x2f0 [ 407.586857] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 407.591455] v9fs_vfs_lookup+0x1f7/0x4a0 [ 407.595522] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 407.599880] ? d_alloc+0x290/0x380 [ 407.603442] ? v9fs_vfs_create+0x130/0x130 [ 407.607689] ? lock_rename+0x236/0x290 [ 407.611583] __lookup_hash+0x12e/0x190 [ 407.615479] do_renameat2+0x6ce/0x1120 [ 407.619383] ? user_path_create+0x40/0x40 [ 407.623534] ? __lock_is_held+0xb5/0x140 [ 407.627622] ? do_syscall_64+0x9a/0x820 [ 407.631601] ? do_syscall_64+0x9a/0x820 [ 407.635583] ? trace_hardirqs_on+0xbd/0x2c0 [ 407.639916] ? __ia32_sys_read+0xb0/0xb0 [ 407.643986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.649350] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 407.654463] __x64_sys_rename+0x5e/0x80 [ 407.658450] do_syscall_64+0x1b9/0x820 [ 407.662341] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 407.667710] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.672641] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 407.677659] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 407.682696] ? recalc_sigpending_tsk+0x180/0x180 [ 407.687456] ? kasan_check_write+0x14/0x20 [ 407.691699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.696550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.701741] RIP: 0033:0x457089 [ 407.704947] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.723848] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 407.731562] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 407.738827] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 407.746105] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.753371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:50:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 407.760638] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000007 11:50:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff9e}, 0x0) 11:50:21 executing program 5 (fault-call:14 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 407.817505] nla_parse: 6 callbacks suppressed [ 407.817515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fa}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:21 executing program 2 (fault-call:14 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 407.945797] FAULT_INJECTION: forcing a failure. [ 407.945797] name failslab, interval 1, probability 0, space 0, times 0 [ 407.957040] CPU: 1 PID: 18997 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 407.957049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.957055] Call Trace: [ 407.957078] dump_stack+0x1c9/0x2b4 [ 407.957099] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.957120] ? print_usage_bug+0xc0/0xc0 [ 407.979524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 407.979673] should_fail.cold.4+0xa/0x11 [ 408.001353] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.001373] ? print_usage_bug+0xc0/0xc0 [ 408.001388] ? __lock_acquire+0x7fc/0x5020 [ 408.001402] ? print_usage_bug+0xc0/0xc0 [ 408.001422] ? graph_lock+0x170/0x170 [ 408.022638] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 408.027329] ? find_held_lock+0x36/0x1c0 [ 408.031409] ? graph_lock+0x170/0x170 [ 408.035232] ? kasan_check_write+0x14/0x20 [ 408.039479] ? prep_compound_page+0x231/0x380 11:50:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffff97}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 408.043993] ? find_held_lock+0x36/0x1c0 [ 408.048067] __should_failslab+0x124/0x180 [ 408.052318] should_failslab+0x9/0x14 [ 408.056129] kmem_cache_alloc+0x47/0x710 [ 408.060202] ? lock_downgrade+0x8f0/0x8f0 [ 408.060406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 408.064370] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 408.064391] radix_tree_extend+0x295/0x650 [ 408.064412] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 408.064441] ? __lock_acquire+0x7fc/0x5020 [ 408.064461] idr_get_free+0x9ad/0x10c0 [ 408.096790] ? kasan_kmalloc+0xc4/0xe0 [ 408.100698] ? radix_tree_clear_tags+0xc0/0xc0 [ 408.105296] ? p9_client_walk+0x124/0xaa0 [ 408.109464] ? __lookup_hash+0x12e/0x190 [ 408.113534] ? do_renameat2+0x6ce/0x1120 [ 408.117605] ? __x64_sys_rename+0x5e/0x80 [ 408.121758] ? do_syscall_64+0x1b9/0x820 [ 408.121777] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.121798] ? print_usage_bug+0xc0/0xc0 [ 408.121814] ? do_raw_spin_lock+0xc1/0x200 [ 408.121835] ? graph_lock+0x170/0x170 [ 408.121850] ? mark_held_locks+0x160/0x160 [ 408.121866] ? print_usage_bug+0xc0/0xc0 [ 408.151695] ? __lock_acquire+0x7fc/0x5020 [ 408.155956] ? __lock_is_held+0xb5/0x140 [ 408.160043] idr_alloc_u32+0x201/0x3f0 [ 408.163955] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 408.168808] ? p9_idpool_get+0x23/0x70 [ 408.172710] idr_alloc+0x111/0x1b0 [ 408.176265] ? idr_alloc_u32+0x3f0/0x3f0 [ 408.180342] ? do_raw_spin_lock+0xc1/0x200 [ 408.184594] p9_idpool_get+0x3d/0x70 [ 408.188335] p9_client_prepare_req.part.9+0xeb/0xba0 [ 408.193455] ? delete_node+0x311/0xce0 [ 408.197365] ? p9_free_req.isra.8+0x140/0x140 [ 408.201889] ? idr_destroy+0x1c0/0x1c0 [ 408.205800] ? radix_tree_clear_tags+0xc0/0xc0 [ 408.210401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.215956] ? replace_slot+0x153/0x500 [ 408.219960] p9_client_rpc+0x1c2/0x1400 [ 408.223950] ? plist_requeue+0x650/0x650 [ 408.228030] ? graph_lock+0x170/0x170 [ 408.231851] ? p9_client_prepare_req.part.9+0xba0/0xba0 [ 408.237233] ? find_held_lock+0x36/0x1c0 [ 408.241311] ? mark_held_locks+0xc9/0x160 [ 408.245483] ? _raw_spin_unlock_irq+0x27/0x70 [ 408.249994] ? _raw_spin_unlock_irq+0x27/0x70 [ 408.254497] ? lockdep_hardirqs_on+0x421/0x5c0 [ 408.259093] ? trace_hardirqs_on+0xbd/0x2c0 [ 408.263423] ? kasan_check_read+0x11/0x20 [ 408.267579] ? p9_fid_create+0x1e2/0x280 [ 408.271641] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 408.276750] ? kasan_check_write+0x14/0x20 [ 408.280986] ? do_raw_spin_lock+0xc1/0x200 [ 408.285232] p9_client_walk+0x208/0xaa0 [ 408.289207] ? find_held_lock+0x36/0x1c0 [ 408.293273] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 408.298902] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 408.303941] ? lock_downgrade+0x84c/0x8f0 [ 408.308094] ? v9fs_fid_add+0x200/0x200 [ 408.312071] ? kasan_check_read+0x11/0x20 [ 408.316219] ? do_raw_spin_unlock+0xa7/0x2f0 [ 408.320630] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 408.325220] v9fs_vfs_lookup+0x1f7/0x4a0 [ 408.329314] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 408.333546] ? d_alloc+0x290/0x380 [ 408.337091] ? v9fs_vfs_create+0x130/0x130 [ 408.341326] ? lock_rename+0x236/0x290 [ 408.345238] __lookup_hash+0x12e/0x190 [ 408.349141] do_renameat2+0x6ce/0x1120 [ 408.353048] ? user_path_create+0x40/0x40 [ 408.357199] ? __lock_is_held+0xb5/0x140 [ 408.361319] ? do_syscall_64+0x9a/0x820 [ 408.365295] ? do_syscall_64+0x9a/0x820 [ 408.369272] ? trace_hardirqs_on+0xbd/0x2c0 [ 408.373602] ? __ia32_sys_read+0xb0/0xb0 [ 408.377670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.383036] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 408.388152] __x64_sys_rename+0x5e/0x80 [ 408.392130] do_syscall_64+0x1b9/0x820 [ 408.396034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.401401] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.406463] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 408.411483] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.416504] ? recalc_sigpending_tsk+0x180/0x180 [ 408.421264] ? kasan_check_write+0x14/0x20 [ 408.425511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.430367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.435557] RIP: 0033:0x457089 [ 408.438753] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.457650] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 408.465364] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 408.472633] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 408.479902] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.487184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:50:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8f3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x34f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 408.494457] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000007 [ 408.530397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 408.642196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 408.671837] FAULT_INJECTION: forcing a failure. [ 408.671837] name failslab, interval 1, probability 0, space 0, times 0 [ 408.683172] CPU: 1 PID: 19029 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 408.690207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.699568] Call Trace: [ 408.702180] dump_stack+0x1c9/0x2b4 [ 408.705834] ? dump_stack_print_info.cold.2+0x52/0x52 [ 408.707358] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 408.711059] should_fail.cold.4+0xa/0x11 [ 408.711087] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.711111] ? finish_task_switch+0x1d3/0x870 [ 408.711130] ? finish_task_switch+0x18a/0x870 [ 408.711162] ? __switch_to_asm+0x34/0x70 [ 408.741742] ? pdu_read+0x90/0xd0 [ 408.745198] ? graph_lock+0x170/0x170 [ 408.749008] ? p9pdu_readf+0xb78/0x2170 [ 408.752994] ? __switch_to_asm+0x34/0x70 [ 408.757050] ? __switch_to_asm+0x40/0x70 [ 408.761108] ? __switch_to_asm+0x40/0x70 [ 408.765176] ? p9pdu_writef+0xe0/0xe0 [ 408.768990] ? __lock_is_held+0xb5/0x140 [ 408.773051] ? check_same_owner+0x340/0x340 [ 408.777387] ? rcu_note_context_switch+0x680/0x680 [ 408.782321] __should_failslab+0x124/0x180 [ 408.786545] should_failslab+0x9/0x14 [ 408.790354] __kmalloc+0x2b2/0x720 [ 408.793898] ? p9pdu_readf+0x1936/0x2170 [ 408.797961] p9pdu_readf+0x1936/0x2170 [ 408.801849] ? p9pdu_writef+0xe0/0xe0 [ 408.805664] ? find_held_lock+0x36/0x1c0 [ 408.809731] ? mark_held_locks+0xc9/0x160 [ 408.813879] ? _raw_spin_unlock_irq+0x27/0x70 [ 408.818394] ? _raw_spin_unlock_irq+0x27/0x70 [ 408.822915] ? lockdep_hardirqs_on+0x421/0x5c0 [ 408.827503] ? trace_hardirqs_on+0xbd/0x2c0 [ 408.831818] ? p9_fid_create+0x1e2/0x280 [ 408.835890] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 408.841008] ? kasan_check_write+0x14/0x20 [ 408.845231] ? do_raw_spin_lock+0xc1/0x200 [ 408.849462] p9_client_walk+0x3ba/0xaa0 [ 408.853425] ? find_held_lock+0x36/0x1c0 [ 408.857482] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 408.863108] ? v9fs_dir_readdir+0x661/0xbc0 [ 408.867453] ? lock_downgrade+0x84c/0x8f0 [ 408.871609] ? v9fs_fid_add+0x200/0x200 [ 408.875619] ? kasan_check_read+0x11/0x20 [ 408.879784] ? do_raw_spin_unlock+0xa7/0x2f0 [ 408.884178] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 408.888780] v9fs_vfs_lookup+0x1f7/0x4a0 [ 408.892830] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 408.897052] ? d_alloc+0x290/0x380 [ 408.900578] ? v9fs_vfs_create+0x130/0x130 [ 408.904803] ? lock_rename+0x236/0x290 [ 408.908688] __lookup_hash+0x12e/0x190 [ 408.912576] do_renameat2+0x6ce/0x1120 [ 408.916485] ? user_path_create+0x40/0x40 [ 408.920624] ? __lock_is_held+0xb5/0x140 [ 408.924683] ? do_syscall_64+0x9a/0x820 [ 408.928660] ? do_syscall_64+0x9a/0x820 [ 408.932628] ? trace_hardirqs_on+0xbd/0x2c0 [ 408.936954] ? __ia32_sys_read+0xb0/0xb0 [ 408.941019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.946369] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 408.951477] __x64_sys_rename+0x5e/0x80 [ 408.955452] do_syscall_64+0x1b9/0x820 [ 408.959343] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.964711] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.969637] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 408.974680] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.979716] ? recalc_sigpending_tsk+0x180/0x180 [ 408.984477] ? kasan_check_write+0x14/0x20 [ 408.988810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.993646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.998821] RIP: 0033:0x457089 [ 409.002012] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.020948] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 409.028670] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 409.035948] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 409.043262] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.043272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 409.043281] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000008 [ 409.115051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x8000000000000}, 0x0) 11:50:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x214000, 0x0) r2 = gettid() ioctl$TIOCEXCL(r1, 0x540c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{0x9, 0x2, 0xff, 0x0, 'syz0\x00', 0xfffffffffffffffb}, 0x4, 0x3, 0x8c, r2, 0x2, 0x7bd, 'syz0\x00', &(0x7f0000000200)=['*mime_type.\x00', 'syzkaller\x00'], 0x16, [], [0x7, 0x1000, 0x8]}) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:23 executing program 5 (fault-call:14 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:23 executing program 2 (fault-call:14 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 409.191454] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 409.254976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 409.259324] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 409.287038] FAULT_INJECTION: forcing a failure. [ 409.287038] name failslab, interval 1, probability 0, space 0, times 0 [ 409.294477] FAULT_INJECTION: forcing a failure. [ 409.294477] name failslab, interval 1, probability 0, space 0, times 0 [ 409.298331] CPU: 1 PID: 19047 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 409.298355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.325883] Call Trace: [ 409.328510] dump_stack+0x1c9/0x2b4 [ 409.332146] ? dump_stack_print_info.cold.2+0x52/0x52 [ 409.337362] should_fail.cold.4+0xa/0x11 [ 409.341443] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 409.346555] ? kasan_check_write+0x14/0x20 [ 409.350801] ? finish_task_switch+0x2ca/0x870 [ 409.355773] ? pdu_read+0x90/0xd0 [ 409.359261] ? graph_lock+0x170/0x170 [ 409.363079] ? p9pdu_readf+0xb78/0x2170 [ 409.367057] ? __switch_to_asm+0x34/0x70 [ 409.371124] ? __switch_to_asm+0x40/0x70 [ 409.375188] ? __switch_to_asm+0x40/0x70 [ 409.379260] ? p9pdu_writef+0xe0/0xe0 [ 409.383071] ? __lock_is_held+0xb5/0x140 [ 409.387153] ? check_same_owner+0x340/0x340 [ 409.391485] ? rcu_note_context_switch+0x680/0x680 [ 409.396436] __should_failslab+0x124/0x180 [ 409.400677] should_failslab+0x9/0x14 [ 409.404481] __kmalloc+0x2b2/0x720 [ 409.408038] ? p9pdu_readf+0x1936/0x2170 [ 409.412112] p9pdu_readf+0x1936/0x2170 [ 409.416016] ? p9pdu_writef+0xe0/0xe0 [ 409.419830] ? find_held_lock+0x36/0x1c0 [ 409.423902] ? mark_held_locks+0xc9/0x160 [ 409.428070] ? _raw_spin_unlock_irq+0x27/0x70 [ 409.432568] ? _raw_spin_unlock_irq+0x27/0x70 [ 409.437067] ? lockdep_hardirqs_on+0x421/0x5c0 [ 409.441656] ? trace_hardirqs_on+0xbd/0x2c0 [ 409.445986] ? p9_fid_create+0x1e2/0x280 [ 409.450050] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 409.455158] ? kasan_check_write+0x14/0x20 [ 409.459399] ? do_raw_spin_lock+0xc1/0x200 [ 409.463654] p9_client_walk+0x3ba/0xaa0 [ 409.467632] ? find_held_lock+0x36/0x1c0 [ 409.471707] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 409.477337] ? v9fs_dir_readdir+0x661/0xbc0 [ 409.481670] ? lock_downgrade+0x84c/0x8f0 [ 409.485828] ? v9fs_fid_add+0x200/0x200 [ 409.489820] ? kasan_check_read+0x11/0x20 [ 409.493994] ? do_raw_spin_unlock+0xa7/0x2f0 [ 409.498408] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 409.503008] v9fs_vfs_lookup+0x1f7/0x4a0 [ 409.507072] ? v9fs_vfs_lookup+0x1f7/0x4a0 [ 409.511307] ? d_alloc+0x290/0x380 [ 409.514853] ? v9fs_vfs_create+0x130/0x130 [ 409.519091] ? lock_rename+0x236/0x290 [ 409.522990] __lookup_hash+0x12e/0x190 [ 409.526891] do_renameat2+0x6ce/0x1120 [ 409.530810] ? user_path_create+0x40/0x40 [ 409.534967] ? __lock_is_held+0xb5/0x140 [ 409.539061] ? do_syscall_64+0x9a/0x820 [ 409.543038] ? do_syscall_64+0x9a/0x820 [ 409.547023] ? trace_hardirqs_on+0xbd/0x2c0 [ 409.551349] ? __ia32_sys_read+0xb0/0xb0 [ 409.555421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.560796] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 409.565920] __x64_sys_rename+0x5e/0x80 [ 409.569903] do_syscall_64+0x1b9/0x820 [ 409.573806] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 409.579177] ? syscall_return_slowpath+0x5e0/0x5e0 [ 409.584111] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 409.589133] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 409.594151] ? recalc_sigpending_tsk+0x180/0x180 [ 409.598941] ? kasan_check_write+0x14/0x20 [ 409.603196] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.608051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.613242] RIP: 0033:0x457089 [ 409.616446] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.635348] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 409.643060] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 409.650330] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 409.657598] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.664865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 409.672134] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000008 [ 409.679432] CPU: 0 PID: 19049 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 409.686453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.695800] Call Trace: [ 409.698393] dump_stack+0x1c9/0x2b4 [ 409.702025] ? dump_stack_print_info.cold.2+0x52/0x52 [ 409.707222] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 409.711900] should_fail.cold.4+0xa/0x11 [ 409.715982] ? is_bpf_text_address+0xd7/0x170 [ 409.720481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 409.725585] ? __kernel_text_address+0xd/0x40 [ 409.730083] ? unwind_get_return_address+0x61/0xa0 [ 409.735041] ? graph_lock+0x170/0x170 [ 409.738849] ? find_held_lock+0x36/0x1c0 [ 409.742923] ? __lock_is_held+0xb5/0x140 [ 409.747006] ? check_same_owner+0x340/0x340 [ 409.751331] ? rcu_note_context_switch+0x680/0x680 [ 409.756289] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 409.761403] __should_failslab+0x124/0x180 [ 409.765643] should_failslab+0x9/0x14 [ 409.769443] kmem_cache_alloc_trace+0x2b5/0x730 [ 409.774117] ? p9_client_walk+0x57e/0xaa0 [ 409.778281] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 409.783395] p9_client_stat+0xc1/0x680 [ 409.787292] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 409.791971] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 409.797600] ? v9fs_dir_readdir+0x661/0xbc0 [ 409.801941] ? lock_downgrade+0x84c/0x8f0 [ 409.806097] v9fs_inode_from_fid+0x77/0x320 [ 409.810417] ? do_raw_spin_unlock+0xa7/0x2f0 [ 409.814829] ? v9fs_vfs_getattr+0x270/0x270 [ 409.819159] v9fs_vfs_lookup+0x3f5/0x4a0 [ 409.823231] ? d_alloc+0x290/0x380 [ 409.826777] ? v9fs_vfs_create+0x130/0x130 [ 409.831015] ? lock_rename+0x236/0x290 [ 409.834918] __lookup_hash+0x12e/0x190 [ 409.838835] do_renameat2+0x6ce/0x1120 [ 409.842739] ? user_path_create+0x40/0x40 [ 409.846915] ? schedule+0xfb/0x450 [ 409.850471] ? __schedule+0x1df0/0x1df0 [ 409.854450] ? exit_to_usermode_loop+0x8c/0x380 [ 409.859126] ? trace_hardirqs_off+0xb8/0x2b0 [ 409.863539] ? do_syscall_64+0x6be/0x820 [ 409.867602] ? trace_hardirqs_on+0x2c0/0x2c0 [ 409.872015] ? do_syscall_64+0x9a/0x820 [ 409.876014] ? do_syscall_64+0x9a/0x820 [ 409.880017] ? trace_hardirqs_on+0xbd/0x2c0 [ 409.884343] ? exit_to_usermode_loop+0x1f4/0x380 [ 409.889103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.894481] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 409.899592] __x64_sys_rename+0x5e/0x80 [ 409.903569] do_syscall_64+0x1b9/0x820 [ 409.907460] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 409.912826] ? syscall_return_slowpath+0x5e0/0x5e0 [ 409.917758] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 409.922777] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 409.927795] ? recalc_sigpending_tsk+0x180/0x180 [ 409.932552] ? kasan_check_write+0x14/0x20 [ 409.936797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.941651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.946852] RIP: 0033:0x457089 [ 409.950050] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.968953] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 409.976663] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 409.983940] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 409.991215] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.998480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:50:24 executing program 2 (fault-call:14 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) [ 410.005746] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000009 [ 410.027046] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434fc", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 410.121565] FAULT_INJECTION: forcing a failure. [ 410.121565] name failslab, interval 1, probability 0, space 0, times 0 [ 410.132807] CPU: 1 PID: 19069 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 410.139823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.149180] Call Trace: [ 410.151783] dump_stack+0x1c9/0x2b4 [ 410.155444] ? dump_stack_print_info.cold.2+0x52/0x52 [ 410.160657] ? update_load_avg+0x389/0x27d0 [ 410.165004] ? __update_load_avg_blocked_se+0x730/0x730 11:50:24 executing program 5 (fault-call:14 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 410.170402] should_fail.cold.4+0xa/0x11 [ 410.174503] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.179633] ? print_usage_bug+0xc0/0xc0 [ 410.183717] ? mark_held_locks+0x160/0x160 [ 410.187978] ? pdu_read+0xd0/0xd0 [ 410.191462] ? kasan_slab_alloc+0x12/0x20 [ 410.195631] ? kmem_cache_alloc+0x12e/0x710 [ 410.199972] ? radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 410.205859] ? radix_tree_extend+0x295/0x650 [ 410.210296] ? idr_get_free+0x9ad/0x10c0 [ 410.214382] ? idr_alloc_u32+0x201/0x3f0 11:50:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 410.218469] ? print_usage_bug+0xc0/0xc0 [ 410.222551] ? print_usage_bug+0xc0/0xc0 [ 410.226635] ? __lock_acquire+0x7fc/0x5020 [ 410.230899] ? graph_lock+0x170/0x170 [ 410.234740] ? graph_lock+0x170/0x170 [ 410.238583] ? __lock_acquire+0x7fc/0x5020 [ 410.242841] ? graph_lock+0x170/0x170 [ 410.246662] ? graph_lock+0x170/0x170 [ 410.250484] __should_failslab+0x124/0x180 [ 410.254746] should_failslab+0x9/0x14 [ 410.258569] kmem_cache_alloc+0x47/0x710 [ 410.262652] ? mark_held_locks+0x160/0x160 [ 410.266902] ? find_held_lock+0x36/0x1c0 11:50:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 410.271001] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 410.276730] radix_tree_extend+0x295/0x650 [ 410.280988] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 410.286892] ? do_raw_spin_unlock+0xa7/0x2f0 [ 410.291333] ? print_usage_bug+0xc0/0xc0 [ 410.295417] ? __lock_acquire+0x7fc/0x5020 [ 410.299679] idr_get_free+0x9ad/0x10c0 [ 410.303599] ? radix_tree_clear_tags+0xc0/0xc0 [ 410.308200] ? find_held_lock+0x36/0x1c0 [ 410.312289] ? mark_held_locks+0x160/0x160 [ 410.316539] ? lock_downgrade+0x8f0/0x8f0 [ 410.320702] ? trace_hardirqs_off+0xb8/0x2b0 [ 410.325125] ? kasan_check_read+0x11/0x20 [ 410.329285] ? do_raw_spin_unlock+0xa7/0x2f0 [ 410.333710] ? print_usage_bug+0xc0/0xc0 [ 410.337785] ? do_raw_spin_lock+0xc1/0x200 [ 410.342042] ? graph_lock+0x170/0x170 [ 410.345858] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 410.350978] ? trace_hardirqs_off+0xb8/0x2b0 [ 410.351413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 410.355405] idr_alloc_u32+0x201/0x3f0 [ 410.355427] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 410.355453] ? p9_idpool_get+0x23/0x70 [ 410.355478] idr_alloc+0x111/0x1b0 [ 410.355498] ? idr_alloc_u32+0x3f0/0x3f0 [ 410.355521] ? do_raw_spin_lock+0xc1/0x200 [ 410.384104] p9_idpool_get+0x3d/0x70 [ 410.384124] p9_client_prepare_req.part.9+0xeb/0xba0 [ 410.384141] ? __kernel_text_address+0xd/0x40 [ 410.384158] ? unwind_get_return_address+0x61/0xa0 [ 410.384178] ? p9_free_req.isra.8+0x140/0x140 [ 410.384201] ? save_stack+0xa9/0xd0 [ 410.414713] p9_client_rpc+0x1c2/0x1400 [ 410.418689] ? __lookup_hash+0x12e/0x190 [ 410.422760] ? p9_client_prepare_req.part.9+0xba0/0xba0 [ 410.428125] ? find_held_lock+0x36/0x1c0 [ 410.432198] ? graph_lock+0x170/0x170 [ 410.436006] ? mark_held_locks+0xc9/0x160 [ 410.440161] ? kmem_cache_alloc_trace+0x275/0x730 [ 410.445013] ? __lock_is_held+0xb5/0x140 [ 410.449091] ? p9_client_stat+0xc1/0x680 [ 410.453155] ? kmem_cache_alloc_trace+0x324/0x730 [ 410.458006] ? p9_client_walk+0x57e/0xaa0 [ 410.462179] p9_client_stat+0x12e/0x680 [ 410.466164] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 410.470843] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 410.476479] ? v9fs_dir_readdir+0x661/0xbc0 [ 410.480826] ? lock_downgrade+0x84c/0x8f0 [ 410.484985] v9fs_inode_from_fid+0x77/0x320 [ 410.489310] ? do_raw_spin_unlock+0xa7/0x2f0 [ 410.493722] ? v9fs_vfs_getattr+0x270/0x270 [ 410.498052] v9fs_vfs_lookup+0x3f5/0x4a0 [ 410.502114] ? d_alloc+0x290/0x380 [ 410.505654] ? v9fs_vfs_create+0x130/0x130 [ 410.509890] ? lock_rename+0x236/0x290 [ 410.513797] __lookup_hash+0x12e/0x190 [ 410.517692] do_renameat2+0x6ce/0x1120 [ 410.521595] ? user_path_create+0x40/0x40 [ 410.525742] ? __lock_is_held+0xb5/0x140 [ 410.529829] ? do_syscall_64+0x9a/0x820 [ 410.533807] ? do_syscall_64+0x9a/0x820 [ 410.537786] ? trace_hardirqs_on+0xbd/0x2c0 [ 410.542111] ? __ia32_sys_read+0xb0/0xb0 [ 410.546176] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.551539] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 410.556643] ? ksys_mount+0xa8/0x140 [ 410.560366] __x64_sys_rename+0x5e/0x80 [ 410.564351] do_syscall_64+0x1b9/0x820 [ 410.568247] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 410.573616] ? syscall_return_slowpath+0x5e0/0x5e0 [ 410.578548] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 410.583566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 410.588584] ? recalc_sigpending_tsk+0x180/0x180 [ 410.593343] ? kasan_check_write+0x14/0x20 [ 410.597583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.602445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.607635] RIP: 0033:0x457089 [ 410.610835] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.629737] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 410.637456] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 410.644751] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 410.652018] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 410.659285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 410.666557] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000a 11:50:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0) [ 410.715732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 410.799928] FAULT_INJECTION: forcing a failure. [ 410.799928] name failslab, interval 1, probability 0, space 0, times 0 [ 410.811399] CPU: 0 PID: 19095 Comm: syz-executor5 Not tainted 4.18.0+ #205 [ 410.818424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.827785] Call Trace: [ 410.830401] dump_stack+0x1c9/0x2b4 [ 410.834055] ? dump_stack_print_info.cold.2+0x52/0x52 [ 410.839268] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 410.843975] should_fail.cold.4+0xa/0x11 [ 410.848055] ? is_bpf_text_address+0xd7/0x170 [ 410.852569] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.857691] ? __kernel_text_address+0xd/0x40 [ 410.862205] ? unwind_get_return_address+0x61/0xa0 [ 410.867171] ? graph_lock+0x170/0x170 [ 410.871006] ? find_held_lock+0x36/0x1c0 [ 410.875096] ? __lock_is_held+0xb5/0x140 [ 410.879193] ? check_same_owner+0x340/0x340 [ 410.883536] ? rcu_note_context_switch+0x680/0x680 [ 410.888484] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 410.893616] __should_failslab+0x124/0x180 [ 410.897877] should_failslab+0x9/0x14 [ 410.901725] kmem_cache_alloc_trace+0x2b5/0x730 [ 410.906414] ? p9_client_walk+0x57e/0xaa0 [ 410.910587] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 410.915720] p9_client_stat+0xc1/0x680 [ 410.919635] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 410.924334] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 410.929989] ? v9fs_dir_readdir+0x661/0xbc0 [ 410.934339] ? lock_downgrade+0x84c/0x8f0 [ 410.938517] v9fs_inode_from_fid+0x77/0x320 [ 410.942859] ? do_raw_spin_unlock+0xa7/0x2f0 [ 410.947293] ? v9fs_vfs_getattr+0x270/0x270 [ 410.951649] v9fs_vfs_lookup+0x3f5/0x4a0 [ 410.955732] ? d_alloc+0x290/0x380 [ 410.959301] ? v9fs_vfs_create+0x130/0x130 [ 410.963556] ? lock_rename+0x236/0x290 [ 410.967470] __lookup_hash+0x12e/0x190 [ 410.971382] do_renameat2+0x6ce/0x1120 [ 410.975310] ? user_path_create+0x40/0x40 [ 410.979483] ? __lock_is_held+0xb5/0x140 [ 410.983596] ? do_syscall_64+0x9a/0x820 [ 410.987593] ? do_syscall_64+0x9a/0x820 [ 410.991590] ? trace_hardirqs_on+0xbd/0x2c0 [ 410.995944] ? __ia32_sys_read+0xb0/0xb0 [ 411.000110] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.005489] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 411.010614] __x64_sys_rename+0x5e/0x80 [ 411.014638] do_syscall_64+0x1b9/0x820 [ 411.018540] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.023939] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.028886] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 411.033929] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.038962] ? recalc_sigpending_tsk+0x180/0x180 [ 411.043722] ? kasan_check_write+0x14/0x20 [ 411.047971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.052845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.058040] RIP: 0033:0x457089 [ 411.061237] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.080142] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 411.087853] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089 [ 411.095125] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 411.102391] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.109659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 411.116939] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000009 [ 411.124874] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = accept4(r0, 0x0, &(0x7f0000000180), 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="05001980", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x4}, &(0x7f00000002c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf435}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743406", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:25 executing program 2 (fault-call:14 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) 11:50:25 executing program 5 (fault-call:14 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 411.222031] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 411.279637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 411.315225] FAULT_INJECTION: forcing a failure. [ 411.315225] name failslab, interval 1, probability 0, space 0, times 0 [ 411.326611] CPU: 0 PID: 19133 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 411.333633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.342993] Call Trace: [ 411.345607] dump_stack+0x1c9/0x2b4 [ 411.349262] ? dump_stack_print_info.cold.2+0x52/0x52 [ 411.354475] ? __lock_is_held+0xb5/0x140 [ 411.358830] should_fail.cold.4+0xa/0x11 [ 411.362964] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.368099] ? pdu_read+0x90/0xd0 [ 411.371580] ? graph_lock+0x170/0x170 [ 411.375404] ? p9pdu_readf+0xb78/0x2170 [ 411.379400] ? graph_lock+0x170/0x170 [ 411.383228] ? p9pdu_writef+0xe0/0xe0 [ 411.387045] ? cpuacct_stats_show+0x51/0x4f0 [ 411.391467] ? __lock_is_held+0xb5/0x140 [ 411.395570] ? check_same_owner+0x340/0x340 [ 411.399901] ? rcu_note_context_switch+0x680/0x680 [ 411.404854] ? p9pdu_readf+0xb78/0x2170 [ 411.408842] __should_failslab+0x124/0x180 [ 411.413088] should_failslab+0x9/0x14 [ 411.416892] __kmalloc+0x2b2/0x720 [ 411.420457] ? memcpy+0x45/0x50 [ 411.423759] ? p9pdu_readf+0x526/0x2170 [ 411.427746] p9pdu_readf+0x526/0x2170 [ 411.431555] ? preempt_notifier_register+0x200/0x200 [ 411.436671] ? p9pdu_writef+0xe0/0xe0 [ 411.440482] ? __switch_to_asm+0x34/0x70 [ 411.444548] ? __kprobes_text_end+0xb8058/0xb8058 [ 411.449396] ? __switch_to_asm+0x34/0x70 [ 411.453466] ? __switch_to_asm+0x40/0x70 [ 411.457531] ? __switch_to_asm+0x34/0x70 [ 411.461605] ? __switch_to_asm+0x40/0x70 [ 411.465677] ? graph_lock+0x170/0x170 [ 411.469486] ? __schedule+0x884/0x1df0 [ 411.473390] ? __lock_is_held+0xb5/0x140 [ 411.477462] ? graph_lock+0x170/0x170 [ 411.481298] p9pdu_readf+0xd5c/0x2170 [ 411.485126] ? p9pdu_writef+0xe0/0xe0 [ 411.488943] ? find_held_lock+0x36/0x1c0 [ 411.493021] ? graph_lock+0x170/0x170 [ 411.496829] ? mark_held_locks+0xc9/0x160 [ 411.500988] ? kmem_cache_alloc_trace+0x275/0x730 [ 411.505838] ? __lock_is_held+0xb5/0x140 [ 411.509921] ? p9_client_stat+0xc1/0x680 [ 411.513995] ? kmem_cache_alloc_trace+0x324/0x730 [ 411.518852] ? p9_client_walk+0x57e/0xaa0 [ 411.523011] p9_client_stat+0x264/0x680 [ 411.526998] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 411.531681] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 411.537305] ? v9fs_dir_readdir+0x661/0xbc0 [ 411.541631] ? lock_downgrade+0x84c/0x8f0 [ 411.545787] v9fs_inode_from_fid+0x77/0x320 [ 411.550113] ? do_raw_spin_unlock+0xa7/0x2f0 [ 411.554523] ? v9fs_vfs_getattr+0x270/0x270 [ 411.558852] v9fs_vfs_lookup+0x3f5/0x4a0 [ 411.562919] ? d_alloc+0x290/0x380 [ 411.566466] ? v9fs_vfs_create+0x130/0x130 [ 411.570701] ? lock_rename+0x236/0x290 [ 411.574610] __lookup_hash+0x12e/0x190 [ 411.578500] do_renameat2+0x6ce/0x1120 [ 411.582404] ? user_path_create+0x40/0x40 [ 411.586555] ? __lock_is_held+0xb5/0x140 [ 411.590639] ? do_syscall_64+0x9a/0x820 [ 411.594613] ? do_syscall_64+0x9a/0x820 [ 411.598593] ? trace_hardirqs_on+0xbd/0x2c0 [ 411.602943] ? __ia32_sys_read+0xb0/0xb0 [ 411.607011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.612378] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 411.617480] ? ksys_mount+0xa8/0x140 [ 411.621204] __x64_sys_rename+0x5e/0x80 [ 411.625186] do_syscall_64+0x1b9/0x820 [ 411.629078] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.634444] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.639380] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 411.644401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.649420] ? recalc_sigpending_tsk+0x180/0x180 [ 411.654178] ? kasan_check_write+0x14/0x20 [ 411.658422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.663280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.668473] RIP: 0033:0x457089 [ 411.671671] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.690571] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 411.698284] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 411.705556] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 411.712824] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.720090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 11:50:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e0000}, 0x0) 11:50:25 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x20000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100700050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xcace, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 411.727358] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000b 11:50:25 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 11:50:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:25 executing program 2 (fault-call:14 fault-nth:12): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=""/29) [ 411.988591] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 412.058149] FAULT_INJECTION: forcing a failure. [ 412.058149] name failslab, interval 1, probability 0, space 0, times 0 [ 412.069524] CPU: 0 PID: 19170 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 412.076557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.085928] Call Trace: [ 412.088549] dump_stack+0x1c9/0x2b4 [ 412.092205] ? dump_stack_print_info.cold.2+0x52/0x52 [ 412.097417] ? __kernel_text_address+0xd/0x40 [ 412.101955] ? unwind_get_return_address+0x61/0xa0 [ 412.106925] should_fail.cold.4+0xa/0x11 [ 412.111035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.116177] ? pdu_read+0x90/0xd0 [ 412.119652] ? graph_lock+0x170/0x170 [ 412.123472] ? p9pdu_readf+0xb78/0x2170 [ 412.127470] ? do_syscall_64+0x1b9/0x820 [ 412.131584] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.136990] ? p9pdu_writef+0xe0/0xe0 [ 412.140814] ? cpuacct_stats_show+0x55/0x4f0 [ 412.145251] ? __lock_is_held+0xb5/0x140 [ 412.149341] ? __kmalloc+0x272/0x720 [ 412.153085] ? check_same_owner+0x340/0x340 [ 412.157440] ? rcu_note_context_switch+0x680/0x680 [ 412.162399] __should_failslab+0x124/0x180 [ 412.166654] should_failslab+0x9/0x14 [ 412.170477] __kmalloc+0x2b2/0x720 [ 412.174032] ? memcpy+0x45/0x50 [ 412.177326] ? p9pdu_readf+0x526/0x2170 [ 412.181323] p9pdu_readf+0x526/0x2170 [ 412.185142] ? preempt_notifier_register+0x200/0x200 [ 412.190271] ? p9pdu_writef+0xe0/0xe0 [ 412.194098] ? __switch_to_asm+0x34/0x70 [ 412.198179] ? __kprobes_text_end+0xb8058/0xb8058 [ 412.203038] ? __switch_to_asm+0x34/0x70 [ 412.207143] ? __switch_to_asm+0x40/0x70 [ 412.211234] ? __switch_to_asm+0x34/0x70 [ 412.215318] ? __switch_to_asm+0x40/0x70 [ 412.219264] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 412.219412] ? graph_lock+0x170/0x170 [ 412.231592] ? __schedule+0x884/0x1df0 [ 412.235505] ? __lock_is_held+0xb5/0x140 [ 412.239586] ? graph_lock+0x170/0x170 [ 412.243423] p9pdu_readf+0xd5c/0x2170 [ 412.247257] ? p9pdu_writef+0xe0/0xe0 [ 412.251060] ? find_held_lock+0x36/0x1c0 [ 412.255111] ? graph_lock+0x170/0x170 [ 412.258921] ? mark_held_locks+0xc9/0x160 [ 412.263080] ? kmem_cache_alloc_trace+0x275/0x730 [ 412.267938] ? __lock_is_held+0xb5/0x140 [ 412.272008] ? p9_client_stat+0xc1/0x680 [ 412.276072] ? kmem_cache_alloc_trace+0x324/0x730 [ 412.280904] ? p9_client_walk+0x57e/0xaa0 [ 412.285058] p9_client_stat+0x264/0x680 [ 412.289036] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 412.293710] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 412.299334] ? v9fs_dir_readdir+0x661/0xbc0 [ 412.303659] ? lock_downgrade+0x84c/0x8f0 [ 412.307799] v9fs_inode_from_fid+0x77/0x320 [ 412.312105] ? do_raw_spin_unlock+0xa7/0x2f0 [ 412.316498] ? v9fs_vfs_getattr+0x270/0x270 [ 412.320824] v9fs_vfs_lookup+0x3f5/0x4a0 [ 412.324884] ? d_alloc+0x290/0x380 [ 412.328418] ? v9fs_vfs_create+0x130/0x130 [ 412.332637] ? lock_rename+0x236/0x290 [ 412.336512] __lookup_hash+0x12e/0x190 [ 412.340387] do_renameat2+0x6ce/0x1120 [ 412.344282] ? user_path_create+0x40/0x40 [ 412.348438] ? __lock_is_held+0xb5/0x140 [ 412.352535] ? do_syscall_64+0x9a/0x820 [ 412.356499] ? do_syscall_64+0x9a/0x820 [ 412.360467] ? trace_hardirqs_on+0xbd/0x2c0 [ 412.364783] ? __ia32_sys_read+0xb0/0xb0 [ 412.368839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.374193] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 412.379311] __x64_sys_rename+0x5e/0x80 [ 412.383290] do_syscall_64+0x1b9/0x820 [ 412.387176] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 412.392540] ? syscall_return_slowpath+0x5e0/0x5e0 [ 412.397462] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 412.402474] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 412.407490] ? recalc_sigpending_tsk+0x180/0x180 [ 412.412245] ? kasan_check_write+0x14/0x20 [ 412.416486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.421324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.426500] RIP: 0033:0x457089 [ 412.429679] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.448574] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 412.456278] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 412.463551] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 412.470813] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 412.478078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 412.485347] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000c 11:50:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0ffffffffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 11:50:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3f020000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x80) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f00000009c0)=""/118, 0x76}], 0x3, 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r4 = getuid() setresuid(r2, r3, r4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x4, 0x100000001, 0x4, 0x1, 0x7fffffff}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x47, 0x0, 0x4}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:26 executing program 2 (fault-call:14 fault-nth:13): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @rand_addr}, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x37f, 0x0, 0x0, 0x0, [], r1, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xb4821cb05ea7acee, &(0x7f00000002c0)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xec0}, 0x0) [ 412.572441] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 412.590952] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 412.662105] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 412.705444] FAULT_INJECTION: forcing a failure. [ 412.705444] name failslab, interval 1, probability 0, space 0, times 0 [ 412.716780] CPU: 0 PID: 19199 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 412.723801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.733160] Call Trace: [ 412.735766] dump_stack+0x1c9/0x2b4 [ 412.739431] ? dump_stack_print_info.cold.2+0x52/0x52 [ 412.744661] ? __kernel_text_address+0xd/0x40 [ 412.744684] ? unwind_get_return_address+0x61/0xa0 11:50:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 11:50:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 412.744713] should_fail.cold.4+0xa/0x11 [ 412.744741] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.744774] ? pdu_read+0x90/0xd0 [ 412.766811] ? graph_lock+0x170/0x170 [ 412.770622] ? p9pdu_readf+0xb78/0x2170 [ 412.774611] ? do_syscall_64+0x1b9/0x820 [ 412.778685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.784071] ? p9pdu_writef+0xe0/0xe0 [ 412.787888] ? cpuacct_stats_show+0x55/0x4f0 [ 412.792325] ? __lock_is_held+0xb5/0x140 [ 412.796439] ? __kmalloc+0x272/0x720 [ 412.800176] ? check_same_owner+0x340/0x340 11:50:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xfff, 0x8000) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x480, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) [ 412.804510] ? rcu_note_context_switch+0x680/0x680 [ 412.809450] __should_failslab+0x124/0x180 [ 412.813700] should_failslab+0x9/0x14 [ 412.817509] __kmalloc+0x2b2/0x720 [ 412.821062] ? memcpy+0x45/0x50 [ 412.824356] ? p9pdu_readf+0x526/0x2170 [ 412.828351] p9pdu_readf+0x526/0x2170 [ 412.832165] ? preempt_notifier_register+0x200/0x200 [ 412.832352] nla_parse: 3 callbacks suppressed [ 412.832364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 412.837280] ? p9pdu_writef+0xe0/0xe0 [ 412.837298] ? __switch_to_asm+0x34/0x70 [ 412.837315] ? __kprobes_text_end+0xb8058/0xb8058 [ 412.837330] ? __switch_to_asm+0x34/0x70 [ 412.837345] ? __switch_to_asm+0x40/0x70 [ 412.837360] ? __switch_to_asm+0x34/0x70 [ 412.837375] ? __switch_to_asm+0x40/0x70 [ 412.837392] ? graph_lock+0x170/0x170 [ 412.837411] ? __schedule+0x884/0x1df0 [ 412.862995] ? __lock_is_held+0xb5/0x140 [ 412.863010] ? __bch_submit_bbio+0x298/0x410 [ 412.863028] ? graph_lock+0x170/0x170 [ 412.863067] p9pdu_readf+0xd5c/0x2170 [ 412.863096] ? p9pdu_writef+0xe0/0xe0 [ 412.906817] ? find_held_lock+0x36/0x1c0 [ 412.910883] ? graph_lock+0x170/0x170 [ 412.914690] ? mark_held_locks+0xc9/0x160 [ 412.918840] ? kmem_cache_alloc_trace+0x275/0x730 [ 412.923687] ? __lock_is_held+0xb5/0x140 [ 412.927754] ? p9_client_stat+0xc1/0x680 [ 412.931813] ? kmem_cache_alloc_trace+0x324/0x730 [ 412.936646] ? p9_client_walk+0x57e/0xaa0 [ 412.940805] p9_client_stat+0x264/0x680 [ 412.944780] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 412.949455] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 412.955093] ? v9fs_dir_readdir+0x661/0xbc0 [ 412.959410] ? lock_downgrade+0x84c/0x8f0 [ 412.963551] v9fs_inode_from_fid+0x77/0x320 [ 412.967870] ? do_raw_spin_unlock+0xa7/0x2f0 [ 412.972297] ? v9fs_vfs_getattr+0x270/0x270 [ 412.976622] v9fs_vfs_lookup+0x3f5/0x4a0 [ 412.980667] ? d_alloc+0x290/0x380 [ 412.984199] ? v9fs_vfs_create+0x130/0x130 [ 412.988435] ? lock_rename+0x236/0x290 [ 412.992326] __lookup_hash+0x12e/0x190 [ 412.996209] do_renameat2+0x6ce/0x1120 [ 413.000125] ? user_path_create+0x40/0x40 [ 413.004266] ? __lock_is_held+0xb5/0x140 [ 413.008342] ? do_syscall_64+0x9a/0x820 [ 413.012313] ? do_syscall_64+0x9a/0x820 [ 413.016299] ? trace_hardirqs_on+0xbd/0x2c0 [ 413.020651] ? __ia32_sys_read+0xb0/0xb0 [ 413.024714] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.030063] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 413.035168] __x64_sys_rename+0x5e/0x80 [ 413.039145] do_syscall_64+0x1b9/0x820 [ 413.043025] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.048379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.053304] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 413.058323] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.063345] ? recalc_sigpending_tsk+0x180/0x180 [ 413.068101] ? kasan_check_write+0x14/0x20 [ 413.072349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.077204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.082394] RIP: 0033:0x457089 [ 413.085574] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.104467] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 413.112188] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 413.119457] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 413.126713] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.133967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 413.141221] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000d [ 413.176633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 413.198811] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x13000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:27 executing program 2 (fault-call:14 fault-nth:14): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 413.341772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 413.388525] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 413.464531] FAULT_INJECTION: forcing a failure. [ 413.464531] name failslab, interval 1, probability 0, space 0, times 0 [ 413.475883] CPU: 0 PID: 19245 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 413.482135] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 413.482940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.482949] Call Trace: [ 413.482977] dump_stack+0x1c9/0x2b4 [ 413.483009] ? dump_stack_print_info.cold.2+0x52/0x52 [ 413.512177] ? __kernel_text_address+0xd/0x40 [ 413.516691] ? unwind_get_return_address+0x61/0xa0 [ 413.521636] should_fail.cold.4+0xa/0x11 [ 413.525706] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 413.530820] ? pdu_read+0x90/0xd0 [ 413.534282] ? graph_lock+0x170/0x170 [ 413.538089] ? p9pdu_readf+0xb78/0x2170 [ 413.542066] ? do_syscall_64+0x1b9/0x820 [ 413.546133] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.551510] ? p9pdu_writef+0xe0/0xe0 [ 413.555313] ? cpuacct_stats_show+0x61/0x4f0 [ 413.559730] ? __lock_is_held+0xb5/0x140 [ 413.563797] ? __kmalloc+0x272/0x720 [ 413.567518] ? check_same_owner+0x340/0x340 [ 413.571844] ? rcu_note_context_switch+0x680/0x680 [ 413.576781] __should_failslab+0x124/0x180 [ 413.581020] should_failslab+0x9/0x14 [ 413.584822] __kmalloc+0x2b2/0x720 [ 413.588371] ? memcpy+0x45/0x50 [ 413.591675] ? p9pdu_readf+0x526/0x2170 [ 413.595657] p9pdu_readf+0x526/0x2170 [ 413.599462] ? preempt_notifier_register+0x200/0x200 [ 413.604595] ? p9pdu_writef+0xe0/0xe0 [ 413.608402] ? __switch_to_asm+0x34/0x70 [ 413.612465] ? __kprobes_text_end+0xb8058/0xb8058 [ 413.617311] ? __switch_to_asm+0x34/0x70 [ 413.621373] ? __switch_to_asm+0x40/0x70 [ 413.625435] ? __switch_to_asm+0x34/0x70 [ 413.629498] ? __switch_to_asm+0x40/0x70 [ 413.633562] ? graph_lock+0x170/0x170 [ 413.637366] ? __schedule+0x884/0x1df0 [ 413.641268] ? __lock_is_held+0xb5/0x140 [ 413.645337] ? graph_lock+0x170/0x170 [ 413.649161] p9pdu_readf+0xd5c/0x2170 [ 413.652987] ? p9pdu_writef+0xe0/0xe0 [ 413.656785] ? find_held_lock+0x36/0x1c0 [ 413.660853] ? graph_lock+0x170/0x170 [ 413.664657] ? mark_held_locks+0xc9/0x160 [ 413.668810] ? kmem_cache_alloc_trace+0x275/0x730 [ 413.673659] ? __lock_is_held+0xb5/0x140 [ 413.677729] ? p9_client_stat+0xc1/0x680 [ 413.681793] ? kmem_cache_alloc_trace+0x324/0x730 [ 413.686652] ? p9_client_walk+0x57e/0xaa0 [ 413.690809] p9_client_stat+0x264/0x680 [ 413.694800] ? p9_client_mknod_dotl+0x5b0/0x5b0 [ 413.699478] ? p9_client_zc_rpc.constprop.11+0x1450/0x1450 [ 413.705113] ? v9fs_dir_readdir+0x661/0xbc0 [ 413.709439] ? lock_downgrade+0x84c/0x8f0 [ 413.713598] v9fs_inode_from_fid+0x77/0x320 [ 413.717929] ? do_raw_spin_unlock+0xa7/0x2f0 [ 413.722349] ? v9fs_vfs_getattr+0x270/0x270 [ 413.726691] v9fs_vfs_lookup+0x3f5/0x4a0 [ 413.730769] ? d_alloc+0x290/0x380 [ 413.734313] ? v9fs_vfs_create+0x130/0x130 [ 413.738550] ? lock_rename+0x236/0x290 [ 413.742447] __lookup_hash+0x12e/0x190 [ 413.746339] do_renameat2+0x6ce/0x1120 [ 413.750241] ? user_path_create+0x40/0x40 [ 413.754389] ? __lock_is_held+0xb5/0x140 [ 413.758494] ? do_syscall_64+0x9a/0x820 [ 413.762470] ? do_syscall_64+0x9a/0x820 [ 413.766448] ? trace_hardirqs_on+0xbd/0x2c0 [ 413.770776] ? __ia32_sys_read+0xb0/0xb0 [ 413.774843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.780210] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 413.785325] __x64_sys_rename+0x5e/0x80 [ 413.789310] do_syscall_64+0x1b9/0x820 [ 413.793204] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.798571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.803506] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 413.808527] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.813546] ? recalc_sigpending_tsk+0x180/0x180 [ 413.818306] ? kasan_check_write+0x14/0x20 [ 413.822551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.827403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.832595] RIP: 0033:0x457089 [ 413.835796] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.854702] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 413.862417] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 413.869686] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 413.876972] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.884283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 413.891561] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000e 11:50:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x45f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x3, 0x4) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da00d10ae8bb366613594ba7df598235ccfbb7ac314ac656bd6baf05b6bc5d0549c563093ff2cdf8f1ba3bf857497c15ddbe0c2ef14221a10c4723df1d6a09e24ccb72b4f31f6ddf0acec3bfba59e884b8aaba22d6b69e829bbf0029efb36d99f803aa2de2228a62c6a913bf9e6b4001c11f45e5a3f0d530cd043b88e7d9765e9fb6ef199a65c2a374e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf6100000000000085100000aa9d0000bf0100000000000095000006000000000000000000000000b70000000000000095000000000000005e26b2896cf216fbeb6999b1f35ad8c43f4ea61a9de3cdec40225873"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) 11:50:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x30020000}, 0x0) 11:50:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:28 executing program 2 (fault-call:14 fault-nth:15): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 414.005013] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 414.040456] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 414.082539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 414.104126] 9pnet: Insufficient options for proto=fd [ 414.109455] FAULT_INJECTION: forcing a failure. [ 414.109455] name failslab, interval 1, probability 0, space 0, times 0 [ 414.120811] CPU: 1 PID: 19271 Comm: syz-executor2 Not tainted 4.18.0+ #205 [ 414.127841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.137208] Call Trace: [ 414.139829] dump_stack+0x1c9/0x2b4 [ 414.143486] ? dump_stack_print_info.cold.2+0x52/0x52 [ 414.148716] should_fail.cold.4+0xa/0x11 [ 414.152810] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 414.157948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.163509] ? node_tag_set+0xc4/0x160 [ 414.167425] ? find_held_lock+0x36/0x1c0 [ 414.168514] 9pnet: Insufficient options for proto=fd [ 414.171514] ? graph_lock+0x170/0x170 [ 414.171541] ? find_held_lock+0x36/0x1c0 [ 414.171573] ? __lock_is_held+0xb5/0x140 [ 414.188615] ? check_same_owner+0x340/0x340 [ 414.192966] ? rcu_note_context_switch+0x680/0x680 [ 414.197929] __should_failslab+0x124/0x180 [ 414.202179] should_failslab+0x9/0x14 [ 414.205994] kmem_cache_alloc+0x29c/0x710 [ 414.210154] ? find_inode.isra.20+0xc3/0x210 [ 414.214571] ? do_raw_spin_lock+0xc1/0x200 [ 414.218813] ? v9fs_blank_wstat+0x3a0/0x3a0 [ 414.223149] v9fs_alloc_inode+0x3d/0x150 [ 414.227217] alloc_inode+0x63/0x190 [ 414.230860] iget5_locked+0x12e/0x1d0 [ 414.234673] ? v9fs_vfs_setattr+0xbc0/0xbc0 [ 414.239006] ? unixmode2p9mode+0x240/0x240 [ 414.243258] ? unixmode2p9mode+0x240/0x240 [ 414.247510] v9fs_inode_from_fid+0x164/0x320 [ 414.251943] ? v9fs_vfs_getattr+0x270/0x270 [ 414.256288] v9fs_vfs_lookup+0x3f5/0x4a0 [ 414.260364] ? d_alloc+0x290/0x380 [ 414.263932] ? v9fs_vfs_create+0x130/0x130 [ 414.268180] ? lock_rename+0x236/0x290 [ 414.272090] __lookup_hash+0x12e/0x190 [ 414.275999] do_renameat2+0x6ce/0x1120 [ 414.279216] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 414.279906] ? user_path_create+0x40/0x40 [ 414.279933] ? __lock_is_held+0xb5/0x140 [ 414.279975] ? do_syscall_64+0x9a/0x820 [ 414.300547] ? do_syscall_64+0x9a/0x820 [ 414.300567] ? trace_hardirqs_on+0xbd/0x2c0 [ 414.300583] ? __ia32_sys_read+0xb0/0xb0 [ 414.300607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.316404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 414.318340] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 414.318365] __x64_sys_rename+0x5e/0x80 [ 414.318384] do_syscall_64+0x1b9/0x820 [ 414.318403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 414.318425] ? syscall_return_slowpath+0x5e0/0x5e0 [ 414.350086] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 414.355119] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 414.355136] ? recalc_sigpending_tsk+0x180/0x180 [ 414.355153] ? kasan_check_write+0x14/0x20 [ 414.355174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.355198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.379195] RIP: 0033:0x457089 [ 414.382400] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.401323] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 414.409056] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089 [ 414.416361] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 414.423646] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 11:50:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 11:50:28 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000bc0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'ip6gretap0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000d80)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x120, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xa7}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r7, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffffffff000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 414.430939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 414.438224] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000f [ 414.468041] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743405", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2a00000029010000000000000000800000000000150000000000000000f5ffffff06002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 414.570454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 414.732732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 414.831266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:28 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000e50000000002000000bf010000000000009500b8faeeaf014001b3ff5ec29d56070000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x80800, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x6, 0x900, 0x3fd, 0x7, 0x7, 0x0, 0x849, 0xe37, 0xffe, 0x8001, 0xfffffffffffffffd, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0x1fe) 11:50:28 executing program 2 (fault-call:14 fault-nth:16): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x230}, 0x0) 11:50:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40) sendto$llc(r2, &(0x7f0000000600)="2f3faff0e5d59fc55caa95c68fde40882d4070650fb31fd14017c3ce3cafd2753ee36306a72c9d36bcc18174b27aca6ca24979e8ebe1903405fb8569a338d7153fd798ae15fa0dbf68fd34dd4405b5699ef2e5b2ad99923e55df5185db2d272bcc02499b3b6f73ac2d4978d66b", 0x6d, 0x40000, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0x80, 0x8) 11:50:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x500000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x24490}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf}, 0x0) [ 414.995164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 415.027823] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x10000}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000700)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x11da00, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x9, 0x7f}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000580)={r4, 0x3, 0xe36b, 0x9, 0x78, 0x6, 0x7, 0xb00f, {r5, @in6={{0xa, 0x4e24, 0x1, @remote, 0x5}}, 0x2, 0x7fa4, 0x8, 0xef8, 0x3}}, &(0x7f0000000640)=0xb0) write$cgroup_type(r3, &(0x7f0000000780)='threaded\x00', 0x9) [ 415.081828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3002000000000000}, 0x0) 11:50:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RMKDIR(r1, &(0x7f0000000600)={0x14, 0x49, 0x1, {0x1, 0x1000000002, 0x5}}, 0x14) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x900) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000300)={0x3, r3}) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c002ea3aca688f35a23b861ecd33351e715433c2cb8ed5b65111c91b1a78c14c87b6491c1b6b727ed1e6951557f7c9623e9abf3078a8c04008acbe1073e04eae0442496f79bf4be38864e4bf5718fc2eb0e1095f00573a9eabd981849c26c80f4ccf164427909873ec2fb9878464300fac8ea7fc2dfed1d685bb87fa6390e1dd8bf8f48773154969c4f7a9f5c12da8d7dd458b1b6b1e95252174d580d9de4203b41025744a7a7a845d5c9b3ba372b16f516e43674149d8d91696263d0f345b7fbdcec3306011217"]) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 415.140161] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 11:50:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 415.310237] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 415.402332] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:29 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x10080, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='GPL\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80000, 0x2) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4000000000, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000200)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = dup3(r1, r0, 0x80000) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000000)=""/33, &(0x7f0000000080)=0x21) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0/file1\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0) 11:50:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xbf30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) [ 415.719727] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',=\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = dup2(r1, r0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000009c0)={'nat\x00', 0x0, 0x3, 0x74, [], 0x6, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000680)=""/116}, &(0x7f0000000000)=0x78) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x0, 0x5}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 415.772023] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 415.939841] 9pnet: Insufficient options for proto=fd 11:50:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf61000000000000851000000200ce9fbf0100000000000095008000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) alarm(0x5) 11:50:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 415.972348] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf5080000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 416.041662] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c8566646e6f3dd102ca9800c730f9aff36e55e2000000000000", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 11:50:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000009c0)=""/200) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) flistxattr(r0, &(0x7f0000000600)=""/109, 0x6d) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$setptracer(0x59616d61, r3) socket$nl_xfrm(0x10, 0x3, 0x6) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000085100000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000000000000095000000000012000002b4d8ef184bd808f4a0e759e452fe48a28d8e6f08cada29c4952df9b39bb8856296ab4eaa0774583ccf757e038ab9b2bc312709c2841890"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) 11:50:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x97ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 416.407619] 9pnet: Insufficient options for proto=fd [ 416.436182] 9pnet: Insufficient options for proto=fd 11:50:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 11:50:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:30 executing program 3: 11:50:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x2}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4df40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) ioctl$KDDELIO(r0, 0x4b35, 0x1) mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x103100) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000340)=0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000140)="75e44d623ab5987db30996174b181aedc51df860b43a56a3a38fbe12a2a457e8f1c8e86ad8484d46ef5a") mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874656ee42c005b9d87f76f91b30f6f41565f5d73bae47572bce786cd98554cd99f094ba28036fea3387edb1986cc"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) sendto$llc(r2, &(0x7f00000004c0)="453ec59bfb283aaae0800caedffc0ad91e44942c9e43151df4a2d224e5486020ebb003cb4afb851db9ebd79adb7ee9204fb2d5c8f670dc74e8a9eb25afb5f732d986e86b6b438ea0251dd4a30feed2326ed176d44cf88c25a63246409d2cd8335d1640e7c307a50c91d0ffba859472f24615993c7e82a79ff1ed6258406556", 0x7f, 0x14, &(0x7f0000000680)={0x1a, 0x31b, 0x80, 0x7fff, 0xfffffffffffffffb, 0x0, @dev={[], 0x1a}}, 0x10) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e}, 0x0) [ 416.713833] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 416.821897] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sync_file_range(r0, 0x1, 0x81, 0x2) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) getrusage(0xffffffffffffffff, &(0x7f0000000600)) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:31 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 11:50:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) timerfd_gettime(r2, &(0x7f0000000080)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e730466642c7266646e7f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 11:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="657874340f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) [ 417.012492] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 417.030410] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3002}, 0x0) [ 417.103313] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3ddbfedd14c0f4880715aacc5c85d66a9d50b0c80f745be2bd6721241d536d9f8983d016a4ef2dffce79e0150b15c31df5ffb7d0ee786c99bdc27dd6f2e3517713c21086b08a2e866997108d20804513321d06966f08acb872cd5a421f806680d166b3cb5a7f2804a55c7f7d5517c4236bd393e52dd264a031", @ANYRESHEX=r1, @ANYBLOB=',uname=cpusetwlan0,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 417.191531] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e813d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = request_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000640)='(', 0xfffffffffffffffb) request_key(&(0x7f0000000a00)='dns_resolver\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000a80)='9p\x00', 0xfffffffffffffff9) keyctl$search(0xa, r2, &(0x7f0000000b40)='pkcs7_test\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, r2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000780)={0x7, 0x5f8, 0x2}) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000006c0)={0x946, 0x81, 0x380, 0x1, 0xffffffff}, 0x14) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000009c0)={0x40, 0x3, 0x2f91, 0x5, 0x0}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000b80)={r4, 0x6, 0xfff, 0x10000}, &(0x7f0000000bc0)=0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000080)=""/40) 11:50:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x20000000008215) 11:50:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x19000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x12000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 417.289700] 9pnet: Insufficient options for proto=fd 11:50:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 417.377304] 9pnet: Insufficient options for proto=fd [ 417.408377] 9pnet: Insufficient options for proto=fd [ 417.467101] 9pnet: Insufficient options for proto=fd 11:50:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x29, {0x2, 0x0, @broadcast}, "6c6f00f1ffff04deffffffffffff0d00"}) 11:50:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x10a00) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x94, {0x20, 0x1, 0x6}, 0x80, r3, r4, 0x2, 0x800, 0x6fa7, 0x3, 0x2, 0x100000001, 0x9, 0x7c, 0x9, 0xcfd, 0x3249c709, 0x3, 0x741b, 0x7fff, 0xfffffffffffffeff}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x8000000000000}, 0x0) 11:50:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x6, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffed8) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100000000000000004800080000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@rand_addr=0x80000001, @in=@remote, 0x4e21, 0x4, 0x4e24, 0xffffffffffffff9a, 0xa, 0x0, 0x80, 0x6, 0x0, r2}, {0x1ff, 0x1, 0x401, 0x4, 0x0, 0x1ff, 0x4, 0x4}, {0x3, 0xffc0000000000000, 0x8991, 0x9}, 0x800, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x3b}, 0x2, @in6=@remote, 0x3505, 0x3, 0x3, 0x5, 0x5, 0x8, 0x6}}, 0xe8) syz_mount_image$nfs4(&(0x7f00000009c0)='nfs4\x00', &(0x7f0000000a00)='./file0\x00', 0x3, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="8bf63e725a3d57bca82d905f364c2aca0f49c0224a02df3327e1dfbee207aea984be3ffce53c9d9a37f81aa216213f4ae645198831efa9dc1f181513f66ce66327beb96c49efcb3332b86ad6427ed4a64006e2c2bd263ba6ac1f55", 0x5b, 0x4}], 0x80000, &(0x7f0000000b00)='\x00') write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @local, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', r4}) 11:50:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x33f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x6}}], 0x0, 0x0, &(0x7f0000000500)}) 11:50:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 417.911475] nla_parse: 18 callbacks suppressed [ 417.911489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0xfffffffffffffffe}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x444a40, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 417.970508] binder: 19714:19715 transaction failed 29189/-22, size 0-0 line 2855 11:50:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 11:50:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)=0x1) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 418.027350] binder: 19714:19717 transaction failed 29189/-22, size 0-0 line 2855 [ 418.062018] binder: undelivered TRANSACTION_ERROR: 29189 11:50:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 418.116992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 418.127967] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 418.183998] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 418.196311] binder: undelivered TRANSACTION_ERROR: 29189 [ 418.229156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434fb", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000800)) 11:50:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 11:50:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0xfffffffffffffffe, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000800000090000002e796969653000000000060000000000000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0xb) write$P9_RSTAT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000401002805007266646e6f05007266646e6f110076626f786e6574317472c575737465646c25682e5c52219d42b068bf8471fb865705"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x8002, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1f, 0x101000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x29}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf446}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 418.443546] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 418.465100] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x80000}, 0x0) [ 418.518850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 418.540579] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x7}, {0x0, @remote}, 0x29, {0x2, 0x0, @broadcast}, "0037810000d80100"}) 11:50:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='noextend') write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chroot(&(0x7f0000000000)='./file0/file0\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x177400, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001b40)={0x0, 0xeb, "9f0c4084aeecff73f611cb417fe19f9a7d104975fae99e8ec18e6b57d2677ae63518176a4131e29d1e550aac2fa0f68a27ccc1efa57d73f0e29816fe3e01f8bf575b203631589d3ee982eac1335344e10403be25fc622a1f1e1a95360cace5dfeff61c78fff86f000f8187f19f97ac47be1abae08c9e59605a0ab91908e8b01d513f1f73d001447fb5e89e5a3cce588eda206c206f2ed23b48f4a028a665cf3e446b23d8c7a2a90ba39b4b6a8ca6283cddace12acdad7e1c6e9b80991d8082fa25b4a25e7a7879f73580918f88749bd1cab5ea91eda77427718e38da737efd72a33fa4199feb9d81096491"}, &(0x7f0000001c40)=0xf3) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001c80)={r3, 0x43e, 0xaa, "5bc150d626647e27cf96b29cb1eaab9bc8ab19ca985550942113de28d74d734130cf84c3f2a39cd00b6d2254e00efe5bd9522ea6fe4ec64b44729da24211fd8b4f11b8b716c4829709e7ab14080c686d285d63d5a7a9434d0583b1933b8188648eaabedc2b335281b8c43f685c08a80cba35401edc2f39331def1aa5e2248c4a16663adc35478fd79d9ef9c3547d17d315002010a57c6093a03b66e109f322f94ac75b95e336c5bab370"}, 0xb2) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 418.626990] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 418.662711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xc00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 11:50:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="657874348c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) getrusage(0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) tkill(r0, 0x1000000000016) [ 418.815985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 419.012124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="6578743402", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:33 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x8482, 0x4, &(0x7f0000001ac0)=[{&(0x7f0000000340)="9547080f84cd", 0x6, 0x6}, {&(0x7f0000000600)="7cdce88f2e0dce90c448a25bc1bb08fa29e892d604ad74eb2c6133dc922dcdc5ef79d595dbcde3a7b87a7acba810cd2e0d70fe49a1b1bfd9049e2e90f3d351718d076297e201f9567ba6ad819e6c29b3c7c3e800127eb0f010344b2fb357247bbfc4d72818dad30f46bb1bc1975cf369fa5072b3d9f0ea5a4d2b8b8a6b142bbb3ac32901ada0e371ab4f", 0x8a, 0xbb53}, {&(0x7f00000009c0)="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", 0xfb, 0xd6}, {&(0x7f0000000ac0)="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", 0x1000, 0x5}], 0x200800, &(0x7f00000006c0)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@bsdgroups='bsdgroups'}, {@pquota='pquota'}, {@wsync='wsync'}]}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x580, 0x80) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001b40)) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='noextend') write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 11:50:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_pts(0xffffffffffffff9c, 0x100) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x43d}}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='./file1\x00') 11:50:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 419.213173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 419.231640] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x1, 0x6, 0x3, 0x5}}) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000600)={0x56, 0x0, 0x0, "6a3b884e5ca7d823b9d81e3157983ebbe7b05ece1aa80e00dca6fec0d41ff3b3d6c3004c78efdea079dbe9211cca3db50c53aa2de082733b4d973b102baf8ce57454ea619c754dc8165077d7bef123bed3bf30756401"}) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 419.299544] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 419.366188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x6, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffed8) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100000000000000004800080000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@rand_addr=0x80000001, @in=@remote, 0x4e21, 0x4, 0x4e24, 0xffffffffffffff9a, 0xa, 0x0, 0x80, 0x6, 0x0, r2}, {0x1ff, 0x1, 0x401, 0x4, 0x0, 0x1ff, 0x4, 0x4}, {0x3, 0xffc0000000000000, 0x8991, 0x9}, 0x800, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x3b}, 0x2, @in6=@remote, 0x3505, 0x3, 0x3, 0x5, 0x5, 0x8, 0x6}}, 0xe8) syz_mount_image$nfs4(&(0x7f00000009c0)='nfs4\x00', &(0x7f0000000a00)='./file0\x00', 0x3, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="8bf63e725a3d57bca82d905f364c2aca0f49c0224a02df3327e1dfbee207aea984be3ffce53c9d9a37f81aa216213f4ae645198831efa9dc1f181513f66ce66327beb96c49efcb3332b86ad6427ed4a64006e2c2bd263ba6ac1f55", 0x5b, 0x4}], 0x80000, &(0x7f0000000b00)='\x00') write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @local, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', r4}) 11:50:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 11:50:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf308}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 419.539673] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xffffffffffffff18) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 419.672529] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 419.697938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 11:50:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40) sendto$llc(r2, &(0x7f0000000600)="2f3faff0e5d59fc55caa95c68fde40882d4070650fb31fd14017c3ce3cafd2753ee36306a72c9d36bcc18174b27aca6ca24979e8ebe1903405fb8569a338d7153fd798ae15fa0dbf68fd34dd4405b5699ef2e5b2ad99923e55df5185db2d272bcc02499b3b6f73ac2d4978d66b", 0x6d, 0x40000, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0x80, 0x8) 11:50:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x6, &(0x7f0000001c00)=[{&(0x7f0000000340)="41f1113a481b2876a97c28029870243a47d5b8632fdb3ffb4120", 0x1a, 0xf73}, {&(0x7f0000000600)="883f742d9eac6ee8e0edd50c7c84965b22a0f13439b41d1d165d8479eacc9de531524e9e185a0f9845a24a801a6020cf48840642701dee702c0123e3f80df73e6f77e32ca336be18b4cf9e78b2f998530fdce7db7ee62c70527b4acd9e5f4d2d23b7887411a3bb15cca565a06b8e0b6009e07851ab0ba86b8196a55044c21db1d5e9713d3de56cfd900553890f9636831a117cb98cf7ba8117cd7539b0e093e6ee641b6f8639377a8fe047c18b26a268cfc33421169626d3fad81a1fb4289a36ccc1b68a4afec8cad3626319f4c3f7e088e85259354a6d05d6007d36dfe4fc4f8cabdfc9aa8c3cb2197d011b64b6d8368d47f7cb17b09215fe", 0xf9, 0x2}, {&(0x7f00000009c0)="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", 0xfd, 0x7}, {&(0x7f0000000ac0)="fda1bbb49b844df9163ab779ab2bbc8f0980bf82c5b228af15e96c3975374a280665af55684108cb56bff25738c610035fb5155f746db4077880f926438e11ce01eeed6fe7a23fe2a9b0bf94f7cc8257e84ab933e0bb6f94f7b881d8c56d032959432e9528c6a0b63f0287f271991a2b27fcd800a7adf153cc1a6dde3f52b6d0f05e993cc510775a9a86", 0x8a, 0x5}, {&(0x7f0000000b80)="733d11822ce5d3a1d351b10ed8fc449eccfaa23727c39ff0a903879f521703c2fc77fe9c642938a6f4e710907b8a5b113b8722f0c207bc3fe8f162a96c75e1cd8c075bf710c7f5d39e4d5517c59d89de7743a52db1b35c4e769e986e0fed680676234ddab7d6e3118b71a4780ca090394af9d0c5907891bc77d4f7dfb2320e", 0x7f, 0x100000001}, {&(0x7f0000000c00)="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", 0x1000, 0x8}], 0x800, &(0x7f0000000780)={[{@decompose='decompose'}]}) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RWSTAT(r1, &(0x7f0000001e80)={0x7, 0x7f, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = accept4(0xffffffffffffffff, &(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000001f40)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r3 = creat(&(0x7f0000001cc0)='./file0/file1\x00', 0x80) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001d40)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000002100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x30000008}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, r4, {0x0, 0x5}, {0xfff7, 0xf}, {0x8, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000801) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf7f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) socketpair(0x13, 0x7, 0x4, &(0x7f0000000000)) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66a3c6696c"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r2 = geteuid() r3 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000600)={0xa0, 0x19, 0x2, {0x2006, {0x0, 0x0, 0x3}, 0xa, r2, r3, 0x9, 0x8, 0x5, 0x9, 0x0, 0x4, 0x8, 0xffffffff, 0x5, 0x8, 0x40, 0x10001, 0x200, 0x1, 0xffff}}, 0xa0) 11:50:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf000}, 0x0) [ 419.971775] hfsplus: unable to find HFS+ superblock [ 419.979268] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 420.026234] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) [ 420.135367] hfsplus: unable to find HFS+ superblock 11:50:34 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0\x00') 11:50:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf838}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 420.317375] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3f02}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:34 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = accept(0xffffffffffffffff, &(0x7f0000000640)=@nfc, &(0x7f00000006c0)=0x80) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000780)=0x20000, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x500000}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000600)={r4, 0x9c0}, 0xc) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x3, 0x7, 0xfffffffffffffffa}) write$P9_RSTAT(r1, &(0x7f0000000600)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x100000000000, 0x0, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x2, 'rfdno', 0x5, 'rfdno', 0x11, "76626f786e65dcfdad86000010000000003348e97668829b2d719b9e9e476fe2612ca77aeb049631e364430b6274a53aae5a1f"}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x1, {0x0, 0xfffffffffffffffc}, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffddd) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') 11:50:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x230}, 0x0) 11:50:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 420.615090] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 420.632313] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 420.724605] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:34 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x80000000, 0x40000) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) r3 = gettid() r4 = getuid() r5 = getegid() r6 = gettid() r7 = getuid() r8 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8) getresgid(&(0x7f0000000c40), &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001080)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) fstat(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000011c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f00000012c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) sendmmsg$unix(r2, &(0x7f00000013c0)=[{&(0x7f0000000680)=@file={0x1, './file0/file1\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000009c0)="3c32285701ab6a161b0953e9a13a710512dd95f77ee560fca4ccc3796ad006719b105101b3bbeee8b8394320b8339079a530a45db022bd4e4dbf3f73f1dbda41afb209fcc78f73ff08b5c6260e4ac30648761f8fafa3072e1943d2ce78a8d4a16669c5901f38042875f90fa0d00456a70d9947135c0f44ebeb0656e84639de92b38110fd19dc83a7babf46deabac6e6218156b224d0a6f03", 0x98}], 0x1, &(0x7f0000000d00)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r1, r1, r2]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r2]}], 0xe8, 0x4000000}, {&(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e80)="06acbfc201b0527487f74fb9f5d6ea92dcc083f29a21837ce32dd012705b03ff259158c0742b4bcd04070f90d444f1795a9a538881a88c1e42ef5fcfe413f234c7ecc8271ab4b1102cd4da10baf85b64abf5397dd7bf85d515e64ac08fdd96e1e04bb02aa078f075df40a48037cd102523ef7ed3914057133c26ea7969df2a63b058991a189a7563650584258a8acd132dfe14c3cb6227734bc50212fc89add0322b3c467164d38d42443f45772ace8f997e095a37e470723ab5485f076b397cbc136ea90b", 0xc5}, {&(0x7f0000000f80)="07c4275ed7a35bb0b8ac720fd2b9330ff0120b1426ec26096244cff6c80cd8660464c4f3aafdc7e2db1928f95e13f4ff39b0909c794fbed640884f4aaca97ef72e0e414825f63984ff327a875e5ecaf6f66ce05832bd9d80eaf480b11dd3c251b8335d853e5fcb41ddf8e3cdf1fda654a2ceb07125acde97db1b950c599b5f3e849c284f5b74b0d76c9e97f339c22b05b2c3e7c3c2c9f43b7c1cde85b3230864e38637a4990e4f1d09d3bc26", 0xac}], 0x2, &(0x7f0000001380)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x40, 0x4004080}], 0x2, 0x80) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000640)={0x2c, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x14, 0x6, 0x61}, 0x2c) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x7) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r18 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$VT_RESIZEX(r18, 0x560a, &(0x7f0000000080)={0x6, 0x0, 0x931, 0x7, 0x3, 0xfffffffffffffffd}) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdlo=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 420.783374] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="657874340f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x39f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xa000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 420.952837] 9pnet: Insufficient options for proto=fd 11:50:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x20}}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) mount(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000780)='nfsd\x00', 0x40442, &(0x7f00000009c0)) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x800, 0x20000) sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x3c, 0x35, 0x20, 0x70bd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x5b, @fd=r1}, @typed={0x8, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @generic="1c237e2f39af0cd36b43c82be9ce8ee10c726e37d9e094"]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8001) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 421.008162] 9pnet: Insufficient options for proto=fd 11:50:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 11:50:35 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 421.159835] FAULT_INJECTION: forcing a failure. [ 421.159835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.171890] CPU: 0 PID: 20075 Comm: syz-executor3 Not tainted 4.18.0+ #205 [ 421.178951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.188315] Call Trace: [ 421.190951] dump_stack+0x1c9/0x2b4 [ 421.194606] ? dump_stack_print_info.cold.2+0x52/0x52 [ 421.199839] should_fail.cold.4+0xa/0x11 [ 421.203931] ? lock_downgrade+0x8f0/0x8f0 [ 421.208124] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 421.213262] ? kasan_check_read+0x11/0x20 [ 421.217429] ? rcu_is_watching+0x8c/0x150 [ 421.221593] ? radix_tree_lookup_slot+0xa1/0xf0 [ 421.226780] ? print_usage_bug+0xc0/0xc0 [ 421.230870] ? find_get_entry+0x2e4/0xc90 [ 421.235104] ? mark_held_locks+0x160/0x160 [ 421.239359] ? filemap_map_pages+0x1960/0x1960 [ 421.243968] ? __lock_acquire+0x7fc/0x5020 [ 421.248216] ? print_usage_bug+0xc0/0xc0 [ 421.252290] ? print_usage_bug+0xc0/0xc0 [ 421.256363] ? graph_lock+0x170/0x170 [ 421.260182] ? print_usage_bug+0xc0/0xc0 [ 421.264255] __alloc_pages_nodemask+0x365/0xd10 [ 421.268955] ? find_held_lock+0x36/0x1c0 [ 421.273037] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 421.278067] ? print_usage_bug+0xc0/0xc0 [ 421.282135] ? print_usage_bug+0xc0/0xc0 [ 421.286203] ? __lock_acquire+0x7fc/0x5020 [ 421.290446] ? print_usage_bug+0xc0/0xc0 [ 421.294531] ? __lock_acquire+0x7fc/0x5020 [ 421.298778] ? find_lock_entry+0x2e3/0x8c0 [ 421.303025] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 421.308580] alloc_pages_vma+0x3a0/0x540 [ 421.312665] do_huge_pmd_anonymous_page+0x555/0x1bd0 [ 421.317778] ? mark_held_locks+0x160/0x160 [ 421.322032] ? __thp_get_unmapped_area+0x180/0x180 [ 421.326973] ? print_usage_bug+0xc0/0xc0 [ 421.331041] ? kmem_cache_alloc+0x12e/0x710 [ 421.335379] ? __d_alloc+0xc8/0xd50 [ 421.339011] ? d_alloc+0x96/0x380 [ 421.342470] ? d_alloc_parallel+0x15a/0x1eb0 [ 421.346870] ? graph_lock+0x170/0x170 [ 421.350657] ? pud_val+0x88/0x100 [ 421.354106] ? pmd_val+0x100/0x100 [ 421.357801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.363342] ? shmem_getpage_gfp+0x16e7/0x41e0 [ 421.367949] __handle_mm_fault+0x2caf/0x4350 [ 421.372364] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 421.377194] ? graph_lock+0x170/0x170 [ 421.380993] ? lock_downgrade+0x8f0/0x8f0 [ 421.385129] ? handle_mm_fault+0x8c4/0xc80 [ 421.389362] ? handle_mm_fault+0x8c4/0xc80 [ 421.393596] ? kasan_check_read+0x11/0x20 [ 421.397731] ? rcu_is_watching+0x8c/0x150 [ 421.401863] ? __do_page_fault+0x620/0xe50 [ 421.406094] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 421.410769] handle_mm_fault+0x53e/0xc80 [ 421.414818] ? __handle_mm_fault+0x4350/0x4350 [ 421.419414] ? find_vma+0x34/0x190 [ 421.422964] __do_page_fault+0x620/0xe50 [ 421.427018] ? mm_fault_error+0x380/0x380 [ 421.431157] do_page_fault+0xf6/0x7a4 [ 421.434953] ? vmalloc_sync_all+0x30/0x30 [ 421.439089] ? error_entry+0x76/0xd0 [ 421.442792] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 421.447798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.452626] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 421.457638] ? find_held_lock+0x36/0x1c0 [ 421.461703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.466547] page_fault+0x1e/0x30 [ 421.470004] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 421.475877] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 421.494791] RSP: 0018:ffff880193b4f4f0 EFLAGS: 00010206 [ 421.500149] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000 [ 421.507402] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0 [ 421.514659] RBP: ffff880193b4f528 R08: 0000000000000000 R09: 0000000000000040 [ 421.521912] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0 [ 421.529180] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000 [ 421.536470] ? copyout+0xe4/0x100 [ 421.539932] copy_page_to_iter+0x3e7/0xf50 [ 421.544164] ? _copy_to_iter+0x1540/0x1540 [ 421.548389] ? mark_held_locks+0x160/0x160 [ 421.552612] ? print_usage_bug+0xc0/0xc0 [ 421.556661] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 421.561340] shmem_file_read_iter+0x570/0x1090 [ 421.565954] ? shmem_fallocate+0x12e0/0x12e0 [ 421.570352] ? graph_lock+0x170/0x170 [ 421.574138] ? kasan_check_write+0x14/0x20 [ 421.578362] ? __mutex_lock+0x6d0/0x1700 [ 421.582410] ? graph_lock+0x170/0x170 [ 421.586196] ? ashmem_read_iter+0x6e/0x250 [ 421.590420] ? find_held_lock+0x36/0x1c0 [ 421.594492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.600031] ? fsnotify+0xbac/0x14e0 [ 421.603742] ? fsnotify_first_mark+0x350/0x350 [ 421.608323] ? __fsnotify_parent+0xcc/0x420 [ 421.612645] do_iter_readv_writev+0x77c/0xa80 [ 421.617132] ? vfs_dedupe_file_range+0x670/0x670 [ 421.621883] ? rw_verify_area+0x118/0x360 [ 421.626038] do_iter_read+0x26e/0x650 [ 421.629837] ? lock_downgrade+0x8f0/0x8f0 [ 421.633979] vfs_iter_read+0x77/0xb0 [ 421.637683] ashmem_read_iter+0x12d/0x250 [ 421.641819] __vfs_read+0x6ac/0x9b0 [ 421.645437] ? vfs_copy_file_range+0xba0/0xba0 [ 421.650018] ? fsnotify+0x14e0/0x14e0 [ 421.653822] ? rw_verify_area+0x118/0x360 [ 421.657974] vfs_read+0x17f/0x3c0 [ 421.661418] ksys_read+0x101/0x260 [ 421.664972] ? kernel_write+0x120/0x120 [ 421.668954] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.674493] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 421.679601] __x64_sys_read+0x73/0xb0 [ 421.683404] do_syscall_64+0x1b9/0x820 [ 421.687306] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 421.692667] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.697582] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 421.702597] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.707604] ? recalc_sigpending_tsk+0x180/0x180 [ 421.712361] ? kasan_check_write+0x14/0x20 [ 421.716611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.721448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.726653] RIP: 0033:0x457089 [ 421.729858] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.748782] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.756500] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089 [ 421.763775] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004 [ 421.771045] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 421.778321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 421.785585] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000000 11:50:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:35 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x0, 0x0) write$FUSE_POLL(r2, &(0x7f0000000600)={0x18, 0x0, 0x2, {0x33}}, 0x18) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2000) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',uyextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 11:50:35 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 421.895952] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 421.921931] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 421.975995] FAULT_INJECTION: forcing a failure. [ 421.975995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.987893] CPU: 0 PID: 20103 Comm: syz-executor3 Not tainted 4.18.0+ #205 [ 421.994951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.004312] Call Trace: [ 422.006952] dump_stack+0x1c9/0x2b4 [ 422.010611] ? dump_stack_print_info.cold.2+0x52/0x52 [ 422.015843] should_fail.cold.4+0xa/0x11 [ 422.019954] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 422.025092] ? graph_lock+0x170/0x170 [ 422.028911] ? kasan_check_read+0x11/0x20 [ 422.033099] ? try_charge+0x8fd/0x1680 [ 422.037018] ? graph_lock+0x170/0x170 [ 422.040849] ? find_held_lock+0x36/0x1c0 [ 422.044957] ? __lock_is_held+0xb5/0x140 [ 422.049052] ? check_same_owner+0x340/0x340 [ 422.053390] ? rcu_note_context_switch+0x680/0x680 [ 422.053423] __alloc_pages_nodemask+0x365/0xd10 [ 422.053450] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 422.053473] ? kasan_check_read+0x11/0x20 [ 422.053491] ? rcu_is_watching+0x8c/0x150 [ 422.053514] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 422.081044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.086596] ? mem_cgroup_throttle_swaprate+0x2ef/0x888 [ 422.091984] ? swap_duplicate+0x80/0x80 [ 422.095977] ? __lock_acquire+0x7fc/0x5020 [ 422.100262] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 422.105817] alloc_pages_current+0x10c/0x210 [ 422.110243] pte_alloc_one+0x1b/0x1a0 [ 422.114059] do_huge_pmd_anonymous_page+0x7f7/0x1bd0 [ 422.119174] ? mark_held_locks+0x160/0x160 [ 422.123429] ? __thp_get_unmapped_area+0x180/0x180 [ 422.128372] ? print_usage_bug+0xc0/0xc0 [ 422.132444] ? kmem_cache_alloc+0x12e/0x710 [ 422.136776] ? __d_alloc+0xc8/0xd50 [ 422.140415] ? d_alloc+0x96/0x380 [ 422.143876] ? d_alloc_parallel+0x15a/0x1eb0 [ 422.148303] ? graph_lock+0x170/0x170 [ 422.152116] ? pud_val+0x88/0x100 [ 422.155583] ? pmd_val+0x100/0x100 [ 422.159142] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.164690] ? shmem_getpage_gfp+0x16e7/0x41e0 [ 422.169291] __handle_mm_fault+0x2caf/0x4350 11:50:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x36f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x0, 0x505, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x800000000, 0x9f}}, 0xa0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000009c0)={{{@in, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:36 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000003e0000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 422.173719] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 422.178574] ? graph_lock+0x170/0x170 [ 422.182405] ? lock_downgrade+0x8f0/0x8f0 [ 422.186564] ? handle_mm_fault+0x8c4/0xc80 [ 422.190811] ? handle_mm_fault+0x8c4/0xc80 [ 422.195062] ? kasan_check_read+0x11/0x20 [ 422.199225] ? rcu_is_watching+0x8c/0x150 [ 422.203383] ? __do_page_fault+0x620/0xe50 [ 422.207632] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 422.212324] handle_mm_fault+0x53e/0xc80 [ 422.216399] ? __handle_mm_fault+0x4350/0x4350 [ 422.220994] ? find_vma+0x34/0x190 11:50:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 11:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 422.225039] __do_page_fault+0x620/0xe50 [ 422.229123] ? mm_fault_error+0x380/0x380 [ 422.233290] do_page_fault+0xf6/0x7a4 [ 422.237101] ? vmalloc_sync_all+0x30/0x30 [ 422.241256] ? error_entry+0x76/0xd0 [ 422.244988] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 422.250023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.254879] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 422.259911] ? find_held_lock+0x36/0x1c0 [ 422.264014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.268871] page_fault+0x1e/0x30 [ 422.272341] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 422.273016] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 422.278230] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 422.278240] RSP: 0018:ffff88016288f4f0 EFLAGS: 00010206 [ 422.278254] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000 [ 422.278264] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0 [ 422.278273] RBP: ffff88016288f528 R08: 0000000000000000 R09: 0000000000000040 [ 422.278284] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0 [ 422.278294] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000 [ 422.278324] ? copyout+0xe4/0x100 [ 422.278348] copy_page_to_iter+0x3e7/0xf50 [ 422.347324] ? _copy_to_iter+0x1540/0x1540 [ 422.347344] ? mark_held_locks+0x160/0x160 [ 422.347360] ? print_usage_bug+0xc0/0xc0 [ 422.347377] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 422.347403] shmem_file_read_iter+0x570/0x1090 11:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffffffff000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 422.347430] ? shmem_fallocate+0x12e0/0x12e0 [ 422.381246] ? graph_lock+0x170/0x170 [ 422.385058] ? kasan_check_write+0x14/0x20 [ 422.389312] ? __mutex_lock+0x6d0/0x1700 [ 422.393389] ? graph_lock+0x170/0x170 [ 422.397204] ? ashmem_read_iter+0x6e/0x250 [ 422.401457] ? find_held_lock+0x36/0x1c0 [ 422.405545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.411099] ? fsnotify+0xbac/0x14e0 [ 422.414836] ? fsnotify_first_mark+0x350/0x350 [ 422.419434] ? __fsnotify_parent+0xcc/0x420 [ 422.423775] do_iter_readv_writev+0x77c/0xa80 [ 422.428289] ? vfs_dedupe_file_range+0x670/0x670 [ 422.433069] ? rw_verify_area+0x118/0x360 [ 422.437269] do_iter_read+0x26e/0x650 [ 422.441089] ? lock_downgrade+0x8f0/0x8f0 [ 422.445257] vfs_iter_read+0x77/0xb0 [ 422.448993] ashmem_read_iter+0x12d/0x250 [ 422.453155] __vfs_read+0x6ac/0x9b0 [ 422.456798] ? vfs_copy_file_range+0xba0/0xba0 [ 422.461394] ? fsnotify+0x14e0/0x14e0 [ 422.465223] ? rw_verify_area+0x118/0x360 [ 422.465245] vfs_read+0x17f/0x3c0 [ 422.465267] ksys_read+0x101/0x260 [ 422.465286] ? kernel_write+0x120/0x120 [ 422.465303] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 422.465332] __x64_sys_read+0x73/0xb0 [ 422.489315] do_syscall_64+0x1b9/0x820 [ 422.493221] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.498601] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.503545] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 422.508604] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.513633] ? recalc_sigpending_tsk+0x180/0x180 [ 422.518403] ? kasan_check_write+0x14/0x20 [ 422.522666] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 422.527530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.532729] RIP: 0033:0x457089 [ 422.535957] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.554868] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.562591] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089 [ 422.569867] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004 11:50:36 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 422.577141] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 422.584420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 422.591696] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000001 [ 422.669439] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 422.705027] FAULT_INJECTION: forcing a failure. [ 422.705027] name failslab, interval 1, probability 0, space 0, times 0 [ 422.716364] CPU: 0 PID: 20153 Comm: syz-executor3 Not tainted 4.18.0+ #205 [ 422.723388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.732742] Call Trace: [ 422.735343] dump_stack+0x1c9/0x2b4 [ 422.738990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 422.744199] should_fail.cold.4+0xa/0x11 [ 422.748275] ? graph_lock+0x170/0x170 [ 422.752094] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 422.757221] ? graph_lock+0x170/0x170 [ 422.761032] ? find_held_lock+0x36/0x1c0 [ 422.765106] ? __lock_is_held+0xb5/0x140 [ 422.769187] ? check_same_owner+0x340/0x340 [ 422.773522] ? rcu_note_context_switch+0x680/0x680 [ 422.778469] __should_failslab+0x124/0x180 [ 422.782713] should_failslab+0x9/0x14 [ 422.786519] kmem_cache_alloc+0x29c/0x710 [ 422.790680] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 422.796249] ptlock_alloc+0x20/0x80 [ 422.799887] pte_alloc_one+0x6b/0x1a0 [ 422.803710] do_huge_pmd_anonymous_page+0x7f7/0x1bd0 [ 422.808816] ? mark_held_locks+0x160/0x160 [ 422.813070] ? __thp_get_unmapped_area+0x180/0x180 [ 422.818006] ? print_usage_bug+0xc0/0xc0 [ 422.822074] ? set_next_entity+0x2f0/0xa80 [ 422.826310] ? mark_held_locks+0x160/0x160 [ 422.830553] ? print_usage_bug+0xc0/0xc0 [ 422.834626] ? graph_lock+0x170/0x170 [ 422.838432] ? pud_val+0x88/0x100 [ 422.841888] ? pmd_val+0x100/0x100 [ 422.845447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.850993] ? shmem_getpage_gfp+0x16e7/0x41e0 [ 422.855590] __handle_mm_fault+0x2caf/0x4350 [ 422.860012] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 422.864860] ? graph_lock+0x170/0x170 [ 422.868682] ? lock_downgrade+0x8f0/0x8f0 [ 422.872853] ? handle_mm_fault+0x8c4/0xc80 [ 422.877096] ? handle_mm_fault+0x8c4/0xc80 [ 422.881341] ? kasan_check_read+0x11/0x20 [ 422.885496] ? rcu_is_watching+0x8c/0x150 [ 422.889649] ? __do_page_fault+0x620/0xe50 [ 422.893896] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 422.898586] handle_mm_fault+0x53e/0xc80 [ 422.902654] ? __handle_mm_fault+0x4350/0x4350 [ 422.907246] ? find_vma+0x34/0x190 [ 422.910793] __do_page_fault+0x620/0xe50 [ 422.914865] ? mm_fault_error+0x380/0x380 [ 422.919026] do_page_fault+0xf6/0x7a4 [ 422.922832] ? vmalloc_sync_all+0x30/0x30 [ 422.926983] ? error_entry+0x76/0xd0 [ 422.930698] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 422.935717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.940564] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 422.945584] ? find_held_lock+0x36/0x1c0 [ 422.949654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.954504] page_fault+0x1e/0x30 [ 422.957970] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 422.963862] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 422.982760] RSP: 0018:ffff880162b7f4f0 EFLAGS: 00010206 [ 422.988125] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000 [ 422.995395] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0 [ 423.002664] RBP: ffff880162b7f528 R08: 0000000000000000 R09: 0000000000000040 [ 423.009938] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0 [ 423.017215] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000 [ 423.024504] ? copyout+0xe4/0x100 [ 423.027969] copy_page_to_iter+0x3e7/0xf50 [ 423.032210] ? _copy_to_iter+0x1540/0x1540 [ 423.036453] ? mark_held_locks+0x160/0x160 [ 423.040708] ? print_usage_bug+0xc0/0xc0 [ 423.044788] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 423.049469] shmem_file_read_iter+0x570/0x1090 [ 423.054066] ? shmem_fallocate+0x12e0/0x12e0 [ 423.058481] ? graph_lock+0x170/0x170 [ 423.062282] ? kasan_check_write+0x14/0x20 [ 423.066523] ? __mutex_lock+0x6d0/0x1700 [ 423.070587] ? graph_lock+0x170/0x170 [ 423.074391] ? ashmem_read_iter+0x6e/0x250 [ 423.078637] ? find_held_lock+0x36/0x1c0 [ 423.082733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.088273] ? fsnotify+0xbac/0x14e0 [ 423.092003] ? fsnotify_first_mark+0x350/0x350 [ 423.096587] ? __fsnotify_parent+0xcc/0x420 [ 423.100952] do_iter_readv_writev+0x77c/0xa80 [ 423.105467] ? vfs_dedupe_file_range+0x670/0x670 [ 423.110231] ? rw_verify_area+0x118/0x360 [ 423.114420] do_iter_read+0x26e/0x650 [ 423.118224] ? lock_downgrade+0x8f0/0x8f0 [ 423.122382] vfs_iter_read+0x77/0xb0 [ 423.126104] ashmem_read_iter+0x12d/0x250 [ 423.130261] __vfs_read+0x6ac/0x9b0 [ 423.133901] ? vfs_copy_file_range+0xba0/0xba0 [ 423.138496] ? fsnotify+0x14e0/0x14e0 [ 423.142315] ? rw_verify_area+0x118/0x360 [ 423.146478] vfs_read+0x17f/0x3c0 [ 423.149969] ksys_read+0x101/0x260 [ 423.153517] ? kernel_write+0x120/0x120 [ 423.157496] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.163035] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 423.168150] __x64_sys_read+0x73/0xb0 [ 423.171969] do_syscall_64+0x1b9/0x820 [ 423.175859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.181224] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.186154] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 423.191174] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.196191] ? recalc_sigpending_tsk+0x180/0x180 [ 423.200965] ? kasan_check_write+0x14/0x20 [ 423.205208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.210060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.215253] RIP: 0033:0x457089 [ 423.218452] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.237816] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.245530] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089 [ 423.252799] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004 [ 423.260069] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 423.267336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 423.274602] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000002 11:50:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="6578743403", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf432}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 11:50:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffff7f00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000600)=0x401, &(0x7f0000000640)=0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x2000) write$eventfd(r3, &(0x7f0000000080)=0x53, 0x8) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:37 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:50:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000020000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x5a}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="fb4f40c25a57b4c5c159be596df263154b90460c8c366f51a0e224da37def2c9ab7c94f0f606f675c239584bb7f5260b357ce2ec451fba4fe96edf639cae73a1ea8282f462da0e2375ee62a1b5408043b1448e1ebaed1cce704a6b2b08b2bd14a73576cd81cb773ac1ce5d2933daf16f27cd1744e03f6e1d395018d0e6422ed1e672ce7d609b86ec2f52af86c82b4a45607e2fad70640cd60b08bff275c5930472b6b7e86223dd3644d5c646efb6102b71b7fba3", @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYPTR, @ANYPTR64], @ANYRES64=r0, @ANYRES16=0x0]], 0xd3) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], 0x12) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000740)={'filter\x00', 0x0, 0x3, 0xd4, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000600)=""/212}, &(0x7f00000009c0)=0x78) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000004c0)=0x7, 0x8) tee(r1, r0, 0x7fff, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x401) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') getsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000500)=""/13, &(0x7f0000000bc0)=0xd) [ 423.440891] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 423.460764] print_req_error: I/O error, dev loop0, sector 0 [ 423.468639] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 423.532086] nla_parse: 14 callbacks suppressed [ 423.532097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 423.561075] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="625231bcd834b22fef7aaf5dbebbc6ffbb77896969c6f060baa4d0dbf24d51d6f0ef4b270555b6b315e2b46f7443056bd70586c8fd12a43b6305aa580e394acbab1321ff359b1128dba0643554d9d3c62d81ec1f0c1d875adc059eb244d78e03aef7fd08003069abd61ab6f199b23d4d60469096d4215299cc2bb7e3611cb34602d6017a5e29"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000009c0)={0x0, 0x2, 0x80000000, 0x1000, 0x0, 0x8, 0x10000, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x1d}, 0x3}}, 0xdbd, 0x6, 0x0, 0x0, 0xc4e}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x101, 0x8000, 0x3, 0x100000001, r3}, &(0x7f00000004c0)=0x10) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 11:50:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x20}, 0x0, r2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 423.645729] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 423.703330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 423.757311] 9pnet: Insufficient options for proto=fd [ 423.778760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) [ 423.835015] 9pnet: Insufficient options for proto=fd 11:50:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in=@rand_addr}}, {{@in6=@mcast2}}}, &(0x7f0000000780)=0xe8) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x800) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x100000001, 0x9}}, 0x28) [ 423.863033] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 423.961459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 424.000004] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf8f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 11:50:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x101, 0x2}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x4000) 11:50:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000080)='9p\x00', 0x4, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x2, {0xa1, 0x4, 0x8}}, 0x14) 11:50:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3ff40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 424.257450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x40000188) 11:50:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 11:50:38 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) statx(r0, &(0x7f0000000a40)='./file1\x00', 0x2000, 0x400, &(0x7f0000000a80)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0/file1\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r0, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r2, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000000600)=""/80, &(0x7f0000000680)=0x50) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000340)=0x4) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x80000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'ppp0@}lo'}}, {@afid={'afid', 0x3d, 0x1}}, {@cachetag={'cachetag', 0x3d, 'rfdno'}}]}}) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000c40)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r4, r0}}, 0x18) write$P9_RGETATTR(r2, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000006c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') symlink(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='./file1\x00') 11:50:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4`', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x81, 0x6, 0xfffffffffffffffd, 0x8, 0x9}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 424.414205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x46f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 11:50:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x9000) [ 424.572705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xbf3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x64) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x104) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 11:50:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x42090000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0xc328) 11:50:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0]], 0xfffffffffffffe79) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 424.836816] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 424.854088] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 424.920230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 11:50:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f00000009c0)={0x78, 0x0, 0x5, {0x0, 0x2, 0x0, {0x0, 0x7, 0x40, 0x4, 0xffffffffffffff01, 0x8, 0x6, 0xad92, 0x0, 0x2, 0x8, r3, r4, 0x3f, 0xfff}}}, 0x78) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0xfffffe66, 0x4d, 0xffffffffffffffff}, 0xff1e) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) connect$unix(r0, &(0x7f0000000680)=@file={0x0, './file0/file0\x00'}, 0x6e) write$P9_RREADDIR(r1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], 0xfffffffffffffea9) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) uselib(&(0x7f0000000340)='./file0\x00') write$P9_RSTAT(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1ff, 0x101000) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0x750, 0x7, 0x5}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x3000) [ 425.057679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 11:50:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffffff00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 425.181272] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0xa000) [ 425.257646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 425.284940] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x2, 0x7}) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x41f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 11:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x2000) 11:50:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 425.474895] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 425.510700] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x5000) 11:50:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 425.592022] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x88, 0x400000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000600)={0x7b, 0x0, [0x0, 0x0, 0x4, 0x6]}) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="5600ea4c6dba0000004f00000000e2ffffff0000bfb95f489b411aa7b886a0ca650000000000000000000000000000000000000000000000000000000000000100280500726609000000000000006e6f110076626f786e657431747275737465646c6f8c37e8297c5b67c2a0b58a966ecf37561ccffe79a79544364afb314b1bb13142487f75f60a5afe"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xfe30, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1dab2c36000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7fff, 0x6}, 0x4}, 0x20, 0x1, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 425.681713] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 425.808297] 9pnet: Insufficient options for proto=fd [ 425.875472] 9pnet: Insufficient options for proto=fd [ 425.901501] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000600)={0x2, 0x1f, 0x10001, 0x1, 0x9, 0x6}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 11:50:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x7000) [ 426.013795] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cff03000074656e642cb6374fdf00"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 11:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0xc000) 11:50:40 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffffffffffc}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="560000007d010000004f00000000000000000000000000000000000000000000000000000000000000000000000000000000f2002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f60ae780b26bee4d2790de02957c240aca012f7d411d73c6efd83cd73ddff0edf3484942bc85097723abbb76390607378292d3346c0ed461e8473adb2fa57"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x421c0, 0x0) sendto$unix(r2, &(0x7f0000000a40)="e43fcae46a4ba669d366c7b64a7bbef80ab9d7c5628dab19cfa6ed8a5f1bbc4ca46c8aea8fd7f9a487372c92f25e65aa03113975a1f794c1860fa1129d8609b86489c36b8fd3b72c78be8539cddb6b4596388e6794473efb1653e0b384a6357429df4bcac43630d046a256a963b4b65d54a2163eacbe731a189cf4461cbb3d44c9c9126d3e3b669b241141eae32a1c0dc254052337590000", 0x98, 0x24000000, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x130) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf9f20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf44a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 426.240446] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 11:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0xb000) [ 426.335196] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x200000, 0x0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x111000, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080)) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000600)={0x0, 0x409}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000680)={r4, 0xffffffffffffff5b, 0x8}, &(0x7f00000006c0)=0x8) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:40 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='nilfs2\x00', 0x880000, 0x0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e08b3007266646e6f110076626f786e657431747275737465646c6f"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 426.413046] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 11:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x6000) [ 426.642612] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 426.716779] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x800000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 11:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x6, 0x0, 0x5}) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:50:40 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000340)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x60}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="6578743497", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 426.882218] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 426.896717] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0xb4a7, 0x100000001, 0x0, 0x6}, &(0x7f0000000080)=0x98) chmod(&(0x7f00000006c0)='./file0/file1\x00', 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r3, 0x38, 0x3, [0x1, 0x8001, 0x4]}, 0xe) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530bacb470188164913bf0a86bae0fd08492f16b10afcc7095506071c65279bb7c98be9b2bdb8cc384c875e06bf50688f2f1110db57793dedee04c4f0b3cbfb8eb7d5ed0f9386374c434406cfe0b35e44c82fe65678d8b352300483c05728a412632ad0da199b8516d2bc95762c8685bd3d43fb92b553266027e33b2900829c3856faae5a2bb46f1aa84970eafd91885a5c28b9e9c513897e701072bddc388ae56f1dc722db6a73"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 11:50:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000680)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) write$P9_RUNLINKAT(r1, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x31, 0xfe8}) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) 11:50:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3002000000000000}, 0x0) 11:50:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf306}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 427.232613] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 427.360758] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) dup(r0) 11:50:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000d922eb2a65e59f60d4240ae02efcdaabdab8db4ee222997f1844424484d1929a0c298c6a61c55b41e2404896c4fe7caad835c6235314211f5b80764774da68e181be767ab58d1e2d544d29f00fa62a180956df36893f0b42ee0e262d6d1366f9000037b976cdc6486c75e0f096f35fcc23eff632db102263cf4985fc00fe5412ef9ed024ae618532a176b17053c36bf7744c3d0fbaeaffccce84d2ac9b161eae7498a8e26afcae4ddd327bce47f687f8eab4b9d3348ecff8dab8e8fb423b4c968ec87bccd9f9803f5c7e65939e6249d64e11c4861b8017bc1d80b99351025478abd9a804"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000400080000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) 11:50:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000001) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) r2 = getpgrp(0x0) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x8, {{0x2, 0x401, 0x3, r2}}}, 0x28) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) sched_yield() 11:50:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = geteuid() write$P9_RGETATTR(r1, &(0x7f0000000200)={0xffffffffffffff16, 0x19, 0x1, {0x0, {}, 0x0, r2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x480) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000680), &(0x7f00000006c0)=0xb) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x1) getpeername(r4, &(0x7f0000000600)=@rc, &(0x7f0000000080)=0x80) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 427.655318] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 11:50:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000027c3c59896f3caaf8062769dfcfa9c0000000000000000000000f8ffffff2f66696c6530"], 0x2a) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x6c082, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000600)="295ee1311f16f677671070") futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000080), 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x401}}, 0xa0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000780)={0x100, 0xb95, 0x837, 0x6, 0x2}) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000900)=0x0) perf_event_open(&(0x7f0000000640)={0x7, 0x70, 0x0, 0x3a9a23f5, 0x5, 0x2, 0x0, 0x3, 0x0, 0x8, 0x2, 0x0, 0x6, 0x0, 0x5, 0x3, 0x0, 0xffffffffffffcb7f, 0x1ff800000000, 0x6, 0x401, 0x0, 0x80000000, 0x51, 0x10000, 0x2, 0x9, 0x4, 0x4, 0x6, 0xac9, 0x1000, 0x5, 0x1f, 0x6, 0x607c, 0x5, 0x5, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x2}, 0x8000, 0x4, 0xbda, 0x4, 0x7fff, 0xa8e, 0x2}, r4, 0xc, r2, 0x9) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x1fffe00000}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') sched_setattr(r4, &(0x7f0000000400)={0x0, 0x0, 0x1, 0xc4, 0x8, 0x0, 0x80, 0x5}, 0x0) [ 427.733592] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e000000000000}, 0x0) 11:50:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfcf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 427.950147] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x1) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 428.016628] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r2 = gettid() write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0x0, 0x6, {{0x7fffffff, 0xefe, 0x3, r2}}}, 0x28) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x2, 0x7f, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) fsync(r0) r4 = dup(r0) read$eventfd(r4, &(0x7f00000000c0), 0x200000c8) 11:50:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657801656e060000b367402dda9f45d91bc4b68a88fc0d85f56dc45b99262c4b10545b2322a4977620c5cf999c1fbdef210e76cb20c180b737d8cced82f0e1250294c0ad4009206c8622cdd6200fd28ba4ca6a7e3492b25f7b16c2f4256759f3056ac9c1645c9ab5363a8a97fc7b4032de7707fcb61ade55dad1bd16326f46cfdbce3bbf2a2e3ebc05a1cdbebf1c0d508e6e3d1c975fe1a7759db4b9ab79e0445b1ed1f094502522a2b576a397525872c7abb0c6254a5682444149d84785fa41bdd0b68cf4ebbc3b5492d8bb447daaeec01cb9275cd018385e599a2a5f"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000340)=0x8000) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r3 = socket(0x5, 0x80800, 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x3ff, 0x4) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) 11:50:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:42 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x36, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000006c0)={0x0, 0x0, 0x3ff, 0x81, 0x1}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000b80)={r3}, &(0x7f0000000bc0)=0x8) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 11:50:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fe}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 428.294486] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 428.313215] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000000000000}, 0x0) [ 428.396665] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x2000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="732f879fedb4e2c9e4fbc4b4a05b9dd1", 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x800, {{0xa, 0x4e21, 0x200, @loopback, 0x8}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x3ff, @empty, 0x7}}, {{0xa, 0x4e20, 0x401, @mcast2, 0x6}}, {{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0xe}, 0x9}}]}, 0x210) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = dup(r1) read$eventfd(r2, &(0x7f0000000080), 0x8) 11:50:42 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20840, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000340)=0x4) 11:50:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x4) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b00)="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", 0x1000, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001b00)="98681357a7835908150277bc6c7201c22a1ed67074e5cbfa6fcf931746907d2766d6c0e58d8e25333069227b2406824298e54516917184d4c64e2d0e1707237b82a32d418a17617cb8bc7129fcfdc472205f9711a11b012adc7424bcc7e5614dd7e7a0dd3a6ac3e8399a1b6e5c3d095a54d5ee6c9a3620131071a93f14939163de9d503ebd55d41f1d1467678322f4c205c178a96c3cbb4abf1dfb5375ef7f3c4c37355f6fc8d0a5cb9e09d85909936b71d7492d4e211906694a0e36fbb2a2c0f5924db1f996acb01e21c6998235cc3258e53b67f9eeb1c728910b07", 0xdc, 0xfffffffffffffffd) keyctl$instantiate(0xc, r2, &(0x7f0000000600)="63938e0d985c79ab28ff1d0fce959e127ec91fbcc555737c086a58dd01d00d898e856d9c4ca4199e8df8f3a0a770160976f9be3a74c61e88491eb95877e4852afca7c36d0a2504031a3f70109e72f10bea048c46e805386ec96799acf9506b5050105d5c0bc059acf6a0a0e8f5526202b352a3430e6c612e9bc6131820a98f4803aff483792a629c21fd6040e71722887b69d2780e753566c12a87", 0x9b, r3) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000780)='./file0/file0\x00') 11:50:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) [ 428.541159] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4bf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)="65787434fe", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) [ 428.644903] nla_parse: 20 callbacks suppressed [ 428.644913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)=':keyringvboxnet0#nodevposix_acl_accessvboxnet0*.vboxnet1&{\x00') [ 428.778211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 428.920582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000009c0)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x7ff, 0x401, 0x6, 0x9e07, 0x0, 0x80000001, 0x3, 0x600, 0x7, 0x9b32, 0x3, 0xfffffffffffffff9, 0x4}, {0x5, 0x7, 0xffffffffffff0000, 0x5, 0x4, 0xff, 0x2, 0x8, 0x47b, 0xda, 0x8, 0x0, 0x1e7c800000}, {0x5, 0x1000, 0x7ff, 0x8001, 0x6, 0x20, 0x7fff, 0xfff, 0x12197599, 0x8000, 0x9fb, 0xffffffffffffff35, 0x9}], 0x1}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = dup(r0) read$eventfd(r2, &(0x7f00000000c0), 0x200000c8) 11:50:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x12}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x30020000}, 0x0) [ 429.103731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 429.114782] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 429.124787] 9pnet: Could not find request transport: fd0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000009c0)='./file0\x00') 11:50:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 429.158636] 9pnet: Could not find request transport: fd0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) getpeername$unix(r2, &(0x7f0000000600), &(0x7f0000000080)=0x6e) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dbbbd27c19ea5de040ebf94941ac0676ae98e9bf25c44ea267163747aa9c0be8acde6d84e9ea45e7f9486ea59b9b7c18a4995ed84560ac4fcff07ffed7a1c81ec34538f6a0ff33dfeb4e910ac6d18eaa5e8d1109e744b0a6020fd902e325e8739fdf232027e18cf186c12bb7fc6", @ANYRESHEX=r1, @ANYBLOB=',\x00']) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 11:50:43 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x363, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 429.356849] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x200000c8) [ 429.402698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 429.431411] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 429.520122] 9pnet: Insufficient options for proto=fd [ 429.556637] 9pnet: Insufficient options for proto=fd 11:50:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3002}, 0x0) 11:50:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4#', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]}) 11:50:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:43 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xc3d5, 0x200000) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x4, 0x2, 0x6138}, 0x2, 0x1, 0x0, 0x0, "492e8647f40d5f61"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = dup(r0) read$eventfd(r2, &(0x7f00000000c0), 0x200000c8) 11:50:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 11:50:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000006c0), 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000080000000000000000000007002e2f66696c6530"], 0x2a) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x20, {0x20, 0x3, 0x7}, 0x21, r3, r4, 0x80, 0x4, 0x3, 0x401000000000000, 0x311, 0x80000001, 0x4, 0x3, 0x81, 0x6, 0x5, 0x6, 0x33c, 0x20, 0x9}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00'}, &(0x7f0000000340)=0x44) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000008000000000000200000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e6574317472ee02fa1a757374"], 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') [ 429.686429] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 429.700914] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks) [ 429.764645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 429.796596] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 429.817913] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 429.844155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 11:50:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x268000, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]}) 11:50:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 429.930719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 11:50:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x600000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) [ 429.997144] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) 11:50:44 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x8000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="050000006eff0f", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:50:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x24d0, 0x60700) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xc328) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x800, @loopback, 0x3ff}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0x124, @remote, 0x8}}}, 0x84) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r3 = dup(r1) read$eventfd(r3, &(0x7f0000000040), 0xfffffdff) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 430.055479] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks) [ 430.080070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 575.848509] INFO: task syz-executor5:20964 blocked for more than 140 seconds. [ 575.855883] Not tainted 4.18.0+ #205 [ 575.860158] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.868139] syz-executor5 D25408 20964 4427 0x00000004 [ 575.873806] Call Trace: [ 575.876419] __schedule+0x87c/0x1df0 [ 575.880175] ? __sched_text_start+0x8/0x8 [ 575.884360] ? __follow_mount_rcu.isra.35.part.36+0x38e/0x890 [ 575.890297] ? lockdep_hardirqs_on+0x421/0x5c0 [ 575.894899] ? graph_lock+0x170/0x170 [ 575.898736] ? print_usage_bug+0xc0/0xc0 [ 575.902814] ? d_alloc_cursor+0xe0/0xe0 [ 575.906831] schedule+0xfb/0x450 [ 575.910217] ? __schedule+0x1df0/0x1df0 [ 575.914220] ? lockdep_hardirqs_on+0x421/0x5c0 [ 575.918818] ? trace_hardirqs_on+0xbd/0x2c0 [ 575.923168] ? kasan_check_read+0x11/0x20 [ 575.927333] ? __rwsem_down_write_failed_common+0x62b/0x1650 [ 575.933171] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 575.938535] ? kasan_check_write+0x14/0x20 [ 575.942822] ? do_raw_spin_lock+0xc1/0x200 [ 575.947089] __rwsem_down_write_failed_common+0x98b/0x1650 [ 575.952762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.958323] ? rwsem_spin_on_owner+0xa40/0xa40 [ 575.962936] ? __lock_acquire+0x7fc/0x5020 [ 575.967189] ? mark_held_locks+0x160/0x160 [ 575.971451] ? mark_held_locks+0x160/0x160 [ 575.975702] ? find_held_lock+0x36/0x1c0 [ 575.979806] ? find_held_lock+0x36/0x1c0 [ 575.983890] ? lock_downgrade+0x8f0/0x8f0 [ 575.988075] ? graph_lock+0x170/0x170 [ 575.991890] ? dput.part.26+0x276/0x7a0 [ 575.995892] ? shrink_dcache_sb+0x350/0x350 [ 576.000232] ? lockref_get_not_dead+0x70/0x90 [ 576.004760] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 576.009794] ? lock_acquire+0x1e4/0x4f0 [ 576.013797] ? lock_rename+0x236/0x290 [ 576.017700] ? lock_release+0x9f0/0x9f0 [ 576.021700] ? check_same_owner+0x340/0x340 [ 576.026038] rwsem_down_write_failed+0xe/0x10 [ 576.030568] ? rwsem_down_write_failed+0xe/0x10 [ 576.035255] call_rwsem_down_write_failed+0x17/0x30 [ 576.040326] down_write_nested+0xae/0x130 [ 576.044498] ? lock_rename+0x236/0x290 [ 576.048404] ? _down_write_nest_lock+0x130/0x130 [ 576.053189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.058750] ? __sb_start_write+0x17f/0x300 [ 576.063104] lock_rename+0x236/0x290 [ 576.066840] do_renameat2+0x69e/0x1120 [ 576.070761] ? user_path_create+0x40/0x40 [ 576.074958] ? fsnotify_first_mark+0x350/0x350 [ 576.079580] ? __fsnotify_parent+0xcc/0x420 [ 576.083944] ? do_syscall_64+0x9a/0x820 [ 576.088010] ? do_syscall_64+0x9a/0x820 [ 576.092036] ? trace_hardirqs_on+0xbd/0x2c0 [ 576.096409] ? __ia32_sys_read+0xb0/0xb0 [ 576.100497] ? __ia32_sys_mknod+0xb0/0xb0 [ 576.104680] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.110092] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 576.115234] ? ksys_ioctl+0x81/0xd0 [ 576.118890] __x64_sys_rename+0x5e/0x80 [ 576.122899] do_syscall_64+0x1b9/0x820 [ 576.126813] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 576.132313] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.137293] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 576.142359] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 576.147404] ? recalc_sigpending_tsk+0x180/0x180 [ 576.152255] ? kasan_check_write+0x14/0x20 [ 576.156583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.161465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.166676] RIP: 0033:0x457089 [ 576.169956] Code: 08 e8 3b a9 fb ff 48 8b 44 24 20 48 8b 4c 24 18 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 <48> 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 8b 4c 24 48 48 8b [ 576.189001] RSP: 002b:00007ff597081c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 576.196755] RAX: ffffffffffffffda RBX: 00007ff5970826d4 RCX: 0000000000457089 [ 576.204157] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 576.211465] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 576.218764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 576.226092] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002 [ 576.233958] [ 576.233958] Showing all locks held in the system: [ 576.240341] 1 lock held by khungtaskd/775: [ 576.244598] #0: 00000000a9ddb57b (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 576.253280] 1 lock held by rsyslogd/4284: [ 576.257614] #0: 0000000091545838 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 576.265698] 2 locks held by getty/4374: [ 576.269794] #0: 000000007c8158d6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.278131] #1: 00000000fa5b2188 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.287257] 2 locks held by getty/4375: [ 576.291316] #0: 000000007d7a08f8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.299677] #1: 000000005c9b33c0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.308761] 2 locks held by getty/4376: [ 576.312783] #0: 00000000dfd0d1ba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.321123] #1: 000000006a692723 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.330072] 2 locks held by getty/4377: [ 576.334101] #0: 0000000068bceadf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.342424] #1: 0000000078c982e2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.351377] 2 locks held by getty/4378: [ 576.355407] #0: 00000000f03e5780 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.363758] #1: 000000007ff96bd9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.372724] 2 locks held by getty/4379: [ 576.376804] #0: 00000000707a8edc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.385132] #1: 00000000b85b5e89 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.394128] 2 locks held by getty/4380: [ 576.398155] #0: 00000000014ff9a0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 576.406488] #1: 000000009f742283 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 576.415435] 3 locks held by syz-executor5/20880: [ 576.420314] #0: 00000000f8380406 (sb_writers#18){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 576.428376] #1: 000000008f6bbab4 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: lock_rename+0x236/0x290 [ 576.437750] #2: 000000007af85c9e (&sb->s_type->i_mutex_key#20/4){+.+.}, at: lock_two_nondirectories+0xdd/0x120 [ 576.448097] 2 locks held by syz-executor5/20964: [ 576.452891] #0: 00000000f8380406 (sb_writers#18){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 576.460955] #1: 000000008f6bbab4 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: lock_rename+0x236/0x290 [ 576.470333] [ 576.472022] ============================================= [ 576.472022] [ 576.479102] NMI backtrace for cpu 0 [ 576.482805] CPU: 0 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #205 [ 576.489382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.498721] Call Trace: [ 576.501368] dump_stack+0x1c9/0x2b4 [ 576.504996] ? dump_stack_print_info.cold.2+0x52/0x52 [ 576.510174] ? vprintk_default+0x28/0x30 [ 576.514223] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 576.519399] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 576.524051] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 576.528713] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 576.533889] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 576.539154] arch_trigger_cpumask_backtrace+0x14/0x20 [ 576.544338] watchdog+0xb39/0x1040 [ 576.547871] ? reset_hung_task_detector+0xd0/0xd0 [ 576.552712] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 576.557803] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 576.562888] ? lockdep_hardirqs_on+0x421/0x5c0 [ 576.567451] ? trace_hardirqs_on+0xbd/0x2c0 [ 576.571757] ? kasan_check_read+0x11/0x20 [ 576.575892] ? __kthread_parkme+0xd7/0x1b0 [ 576.580111] ? kasan_check_write+0x14/0x20 [ 576.584330] ? do_raw_spin_lock+0xc1/0x200 [ 576.588551] ? __kthread_parkme+0x58/0x1b0 [ 576.592781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.598307] ? __kthread_parkme+0x106/0x1b0 [ 576.602624] kthread+0x35a/0x420 [ 576.605992] ? reset_hung_task_detector+0xd0/0xd0 [ 576.610815] ? kthread_bind+0x40/0x40 [ 576.614603] ret_from_fork+0x3a/0x50 [ 576.618430] Sending NMI from CPU 0 to CPUs 1: [ 576.624368] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.177 msecs [ 576.624989] NMI backtrace for cpu 1 [ 576.624995] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.18.0+ #205 [ 576.625003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.625008] RIP: 0010:__lock_acquire+0x7e7/0x5020 [ 576.625021] Code: 4c 89 94 24 80 00 00 00 e8 e6 dc ff ff 4c 8b 94 24 80 00 00 00 44 8b 4c 24 68 85 c0 0f 84 f2 f9 ff ff 4c 89 d6 ba 08 00 00 00 <4c> 89 f7 44 89 4c 24 68 4c 89 94 24 80 00 00 00 e8 b4 dc ff ff 4c [ 576.625026] RSP: 0018:ffff8801db107120 EFLAGS: 00000046 [ 576.625035] RAX: 0000000000000000 RBX: 000000000000002b RCX: 0000000000000002 [ 576.625041] RDX: 0000000000000008 RSI: ffff8801d9f1abc0 RDI: ffff8801d9f1abe4 [ 576.625048] RBP: ffff8801db1074b0 R08: 0000000000000000 R09: 0000000000000000 [ 576.625054] R10: ffff8801d9f1abc0 R11: ffff8801d9f1abac R12: 0000000000000000 [ 576.625060] R13: 0000000000000020 R14: ffff8801d9f1a380 R15: 0000000000000002 [ 576.625078] FS: 0000000000000000(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 576.625083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.625089] CR2: 00007f3c504dc000 CR3: 00000001b51c9000 CR4: 00000000001406e0 [ 576.625095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.625101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 576.625104] Call Trace: [ 576.625107] [ 576.625112] ? rb_insert_color+0x1480/0x1480 [ 576.625116] ? graph_lock+0x170/0x170 [ 576.625120] ? mark_held_locks+0x160/0x160 [ 576.625124] ? find_held_lock+0x36/0x1c0 [ 576.625128] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 576.625133] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 576.625138] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 576.625142] ? trace_hardirqs_on+0xbd/0x2c0 [ 576.625146] ? kasan_check_read+0x11/0x20 [ 576.625151] ? update_blocked_averages+0x1011/0x1d10 [ 576.625156] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 576.625160] ? lock_repin_lock+0x430/0x430 [ 576.625165] ? update_blocked_averages+0x1011/0x1d10 [ 576.625169] ? rq_online_fair+0x4c0/0x4c0 [ 576.625173] lock_acquire+0x1e4/0x4f0 [ 576.625177] ? rebalance_domains+0x135/0xd90 [ 576.625181] ? lock_release+0x9f0/0x9f0 [ 576.625185] ? mark_held_locks+0x160/0x160 [ 576.625190] ? print_usage_bug+0xc0/0xc0 [ 576.625194] rebalance_domains+0x170/0xd90 [ 576.625198] ? rebalance_domains+0x135/0xd90 [ 576.625203] ? run_posix_cpu_timers+0x6c7/0x2580 [ 576.625207] ? load_balance+0x3640/0x3640 [ 576.625228] ? __lock_acquire+0x7fc/0x5020 [ 576.625232] ? __lock_acquire+0x7fc/0x5020 [ 576.625236] ? graph_lock+0x170/0x170 [ 576.625240] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 576.625245] ? find_next_bit+0x104/0x130 [ 576.625253] _nohz_idle_balance+0x636/0x820 [ 576.625257] ? __lock_acquire+0x7fc/0x5020 [ 576.625262] ? rebalance_domains+0xd90/0xd90 [ 576.625266] ? mark_held_locks+0x160/0x160 [ 576.625271] ? kasan_check_read+0x11/0x20 [ 576.625275] ? do_raw_spin_unlock+0xa7/0x2f0 [ 576.625280] ? trace_hardirqs_on+0x2c0/0x2c0 [ 576.625283] ? graph_lock+0x170/0x170 [ 576.625288] ? kasan_check_write+0x14/0x20 [ 576.625292] ? do_raw_spin_lock+0xc1/0x200 [ 576.625296] ? graph_lock+0x170/0x170 [ 576.625300] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 576.625305] run_rebalance_domains+0x2c6/0x4c0 [ 576.625309] ? _nohz_idle_balance+0x820/0x820 [ 576.625313] ? rcu_is_watching+0x8c/0x150 [ 576.625324] ? rcu_pm_notify+0xc0/0xc0 [ 576.625328] __do_softirq+0x2eb/0xa74 [ 576.625333] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 576.625337] ? rcu_is_watching+0x8c/0x150 [ 576.625341] ? rcu_pm_notify+0xc0/0xc0 [ 576.625346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 576.625350] ? trace_hardirqs_off+0xb8/0x2b0 [ 576.625354] ? irq_exit+0x210/0x210 [ 576.625358] ? sched_ttwu_pending+0x8e/0x280 [ 576.625363] ? trace_hardirqs_on+0x2c0/0x2c0 [ 576.625368] ? sched_set_stop_task+0x290/0x290 [ 576.625371] irq_exit+0x1d6/0x210 [ 576.625375] scheduler_ipi+0x53c/0xa50 [ 576.625380] ? migration_cpu_stop+0x470/0x470 [ 576.625383] ? kasan_check_read+0x11/0x20 [ 576.625387] ? rcu_nmi_exit+0xe0/0x2d0 [ 576.625391] ? rcu_idle_enter+0x480/0x480 [ 576.625396] ? clockevents_program_event+0x140/0x370 [ 576.625400] ? trace_hardirqs_off+0xb8/0x2b0 [ 576.625404] ? task_prio+0x50/0x50 [ 576.625408] smp_reschedule_interrupt+0xfd/0x5e0 [ 576.625413] ? smp_thermal_interrupt+0x710/0x710 [ 576.625417] ? interrupt_entry+0xb5/0xf0 [ 576.625422] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 576.625426] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 576.625431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.625436] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 576.625440] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 576.625444] ? task_prio+0x50/0x50 [ 576.625449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.625453] reschedule_interrupt+0xf/0x20 [ 576.625456] [ 576.625460] RIP: 0010:native_safe_halt+0x6/0x10 [ 576.625473] Code: c7 48 89 45 d8 e8 ca 4e 07 fb 48 8b 45 d8 e9 d2 fe ff ff 48 89 df e8 b9 4e 07 fb eb 8a 90 90 90 90 90 90 90 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 576.625478] RSP: 0018:ffff8801d9f27c30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 [ 576.625488] RAX: dffffc0000000000 RBX: 1ffff1003b3e4f8a RCX: 0000000000000000 [ 576.625494] RDX: 1ffffffff0fe3798 RSI: 0000000000000001 RDI: ffffffff87f1bcc0 [ 576.625500] RBP: ffff8801d9f27c30 R08: ffff8801d9f1a380 R09: 0000000000000000 [ 576.625506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 576.625512] R13: ffff8801d9f27cf0 R14: 0000000000000001 R15: 0000000000000000 [ 576.625516] default_idle+0xc2/0x410 [ 576.625520] ? kasan_check_write+0x14/0x20 [ 576.625524] ? __sched_text_end+0x1/0x1 [ 576.625528] ? rcu_idle_enter+0x30a/0x480 [ 576.625533] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 576.625537] ? tsc_verify_tsc_adjust+0x109/0x380 [ 576.625542] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 576.625547] ? mark_tsc_async_resets+0x20/0x20 [ 576.625551] ? trace_hardirqs_on+0x2c0/0x2c0 [ 576.625556] ? __tick_nohz_idle_restart_tick+0x28c/0x3c0 [ 576.625560] arch_cpu_idle+0x10/0x20 [ 576.625564] default_idle_call+0x6d/0x90 [ 576.625568] do_idle+0x3aa/0x580 [ 576.625572] ? retint_kernel+0x10/0x10 [ 576.625576] ? arch_cpu_idle_exit+0x70/0x70 [ 576.625580] cpu_startup_entry+0x10c/0x120 [ 576.625584] ? cpu_in_idle+0x20/0x20 [ 576.625588] start_secondary+0x433/0x5d0 [ 576.625593] ? set_cpu_sibling_map+0x18b0/0x18b0 [ 576.625597] secondary_startup_64+0xa4/0xb0 [ 576.625642] Kernel panic - not syncing: hung_task: blocked tasks [ 577.240961] CPU: 0 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #205 [ 577.247522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.256853] Call Trace: [ 577.259431] dump_stack+0x1c9/0x2b4 [ 577.263832] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.269012] ? printk_safe_log_store+0x2f0/0x2f0 [ 577.273756] panic+0x238/0x4e7 [ 577.276936] ? add_taint.cold.5+0x16/0x16 [ 577.281082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.286612] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 577.292046] ? printk_safe_flush+0xd7/0x130 [ 577.296365] watchdog+0xb4a/0x1040 [ 577.300073] ? reset_hung_task_detector+0xd0/0xd0 [ 577.304933] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 577.310029] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 577.315121] ? lockdep_hardirqs_on+0x421/0x5c0 [ 577.319689] ? trace_hardirqs_on+0xbd/0x2c0 [ 577.323993] ? kasan_check_read+0x11/0x20 [ 577.328226] ? __kthread_parkme+0xd7/0x1b0 [ 577.332454] ? kasan_check_write+0x14/0x20 [ 577.336680] ? do_raw_spin_lock+0xc1/0x200 [ 577.340908] ? __kthread_parkme+0x58/0x1b0 [ 577.345171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.350729] ? __kthread_parkme+0x106/0x1b0 [ 577.355038] kthread+0x35a/0x420 [ 577.358392] ? reset_hung_task_detector+0xd0/0xd0 [ 577.363216] ? kthread_bind+0x40/0x40 [ 577.367002] ret_from_fork+0x3a/0x50 [ 577.371167] Dumping ftrace buffer: [ 577.374701] (ftrace buffer empty) [ 577.378394] Kernel Offset: disabled [ 577.382014] Rebooting in 86400 seconds..