V_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x92, 0x3, @buffer={0x0, 0xd6, &(0x7f0000000140)=""/214}, &(0x7f0000000240)="0e1b8fe1bd19a0c2ebe4bc84f5abb5f9ca7e4bd8fa4182715af77827a40fcfffc85adcea4a30c749e8133bd915f8fb2ee3afc04ee86df0da27d68e36f05f2f0e85604bcfea0f7be38cc600bb567150dba1bdc2d6f14b004acfba8bdee5d50e51d4855f87d76a1b1d63302f7b095c4d90f2e08a4130deb73b8faee483381566b226e45f36bda32af0a553bc2154f00c78f967", &(0x7f0000000040)=""/47, 0x8, 0x10020, 0x3, &(0x7f0000000080)}) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000380)) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:53:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:53:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000700080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:45 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002514090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:45 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 11:53:45 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x5, &(0x7f0000000080)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 11:53:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000900080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:45 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000645214090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2387.934090][T27970] loop1: detected capacity change from 0 to 140 [ 2387.946932][T27970] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:53:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001c00e00080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:45 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000006d114090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2388.082637][T27983] loop1: detected capacity change from 0 to 140 [ 2388.099728][T27983] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2388.210493][T27991] loop1: detected capacity change from 0 to 140 [ 2388.220849][T27991] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:53:54 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x92, 0x3, @buffer={0x0, 0xd6, &(0x7f0000000140)=""/214}, &(0x7f0000000240)="0e1b8fe1bd19a0c2ebe4bc84f5abb5f9ca7e4bd8fa4182715af77827a40fcfffc85adcea4a30c749e8133bd915f8fb2ee3afc04ee86df0da27d68e36f05f2f0e85604bcfea0f7be38cc600bb567150dba1bdc2d6f14b004acfba8bdee5d50e51d4855f87d76a1b1d63302f7b095c4d90f2e08a4130deb73b8faee483381566b226e45f36bda32af0a553bc2154f00c78f967", &(0x7f0000000040)=""/47, 0x8, 0x10020, 0x3, &(0x7f0000000080)}) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000380)) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x92, 0x3, @buffer={0x0, 0xd6, &(0x7f0000000140)=""/214}, &(0x7f0000000240)="0e1b8fe1bd19a0c2ebe4bc84f5abb5f9ca7e4bd8fa4182715af77827a40fcfffc85adcea4a30c749e8133bd915f8fb2ee3afc04ee86df0da27d68e36f05f2f0e85604bcfea0f7be38cc600bb567150dba1bdc2d6f14b004acfba8bdee5d50e51d4855f87d76a1b1d63302f7b095c4d90f2e08a4130deb73b8faee483381566b226e45f36bda32af0a553bc2154f00c78f967", &(0x7f0000000040)=""/47, 0x8, 0x10020, 0x3, &(0x7f0000000080)}) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000380)) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:53:54 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001d90e00080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:54 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:53:54 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 11:53:54 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 11:53:54 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:54 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010ec000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2397.206958][T27998] loop1: detected capacity change from 0 to 140 [ 2397.220300][T27998] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:53:54 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010ed900080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:53:54 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001814090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:53:54 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000100001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2397.354758][T28010] loop1: detected capacity change from 0 to 140 [ 2397.367643][T28010] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2397.465105][T28016] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:54:01 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendfile(r0, r1, 0x0, 0xef85) 11:54:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001914090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000180001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:01 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 11:54:01 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 11:54:02 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002514090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:02 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000200001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:02 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 64) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 11:54:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2404.535993][T28027] loop1: detected capacity change from 0 to 140 [ 2404.543601][T28031] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2404.558765][T28027] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:02 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000ff17090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:02 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000280001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2404.650094][T28037] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2404.705255][T28042] loop1: detected capacity change from 0 to 140 [ 2404.719883][T28042] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2404.744210][T28045] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:54:11 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async) sendfile(r0, r1, 0x0, 0xef85) 11:54:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000300001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a02090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:11 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:54:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 11:54:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a04090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000200080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2413.781993][T28053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2413.797493][T28056] loop1: detected capacity change from 0 to 140 [ 2413.810937][T28056] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000300080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a05090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000400080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2413.938679][T28064] loop1: detected capacity change from 0 to 140 [ 2413.953605][T28064] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:20 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendfile(r0, r1, 0x0, 0xef85) 11:54:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a06090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000500080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:20 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) (async) 11:54:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 11:54:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000600080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a0a090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x70c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2423.177564][T28082] loop1: detected capacity change from 0 to 140 [ 2423.191197][T28082] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a0c090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000700080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2423.300272][T28091] loop1: detected capacity change from 0 to 140 [ 2423.309801][T28091] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2423.425356][T28097] loop1: detected capacity change from 0 to 140 [ 2423.436687][T28097] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:29 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a10090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:29 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000900080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 11:54:29 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) (async, rerun: 32) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 32) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:54:29 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = io_uring_setup(0x2c2f, &(0x7f0000000240)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:54:29 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000003080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:29 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14020327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2432.430670][T28110] loop1: detected capacity change from 0 to 140 [ 2432.443413][T28110] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000005080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14030327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x71c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2432.574741][T28117] loop1: detected capacity change from 0 to 140 [ 2432.588557][T28117] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000006080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14040327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2432.633248][T28120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14050327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2432.721834][T28125] loop1: detected capacity change from 0 to 140 [ 2432.731124][T28125] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2432.822505][T28129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:30 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 11:54:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2433.298962][T28131] loop1: detected capacity change from 0 to 140 [ 2433.310465][T28131] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:37 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) r2 = io_uring_setup(0x2c2f, &(0x7f0000000240)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x200) (async, rerun: 64) sendfile(r0, r1, 0x0, 0xef85) (rerun: 64) 11:54:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000007080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14060327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:37 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getpgid(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2000d, 0x1, @tid=r2}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) 11:54:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:37 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xff) dup2(r1, r0) 11:54:37 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getpgid(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2000d, 0x1, @tid=r2}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) getpgid(0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) (async) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2000d, 0x1, @tid=r2}, &(0x7f0000000540)) (async) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) (async) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) (async) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) (async) 11:54:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14070327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000009080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2439.711056][T28147] loop1: detected capacity change from 0 to 140 [ 2439.728603][T28147] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100c00e080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:37 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getpgid(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2000d, 0x1, @tid=r2}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) getpgid(0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) (async) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2000d, 0x1, @tid=r2}, &(0x7f0000000540)) (async) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) (async) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) (async) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) (async) [ 2439.861745][T28164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2439.906825][T28172] loop1: detected capacity change from 0 to 140 [ 2439.921509][T28172] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:44 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = io_uring_setup(0x2c2f, &(0x7f0000000240)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) io_uring_setup(0x2c2f, &(0x7f0000000240)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:54:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14080327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x72c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100d90e080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000023c0)={&(0x7f0000000080)=@file={0x0, './file1\x00'}, 0xa, &(0x7f0000002200)=[{&(0x7f00000000c0)="24f6863b46d19b0af6155022a883e5dfb0f3f25dc72793de684a882631a5b67e2ecc866debf495d5d53a224ae995da1e6fe4edb19152bec3603148014a1c", 0x3e}, {&(0x7f0000000100)="6d44bda454fe9150cba069816a71081b63187138291d40c35fc2a619b0c98cb1e5925d70fefd63eaa9861c69ce73236f5cd5e122ec92fdb9f1b3cad6eca5b349747d7d8a7d63729e529b5f6260e171ebf5d6a23e9f98ea158c5b928871dc582c6c10", 0x62}, {&(0x7f00000011c0)="0213cd331b6420a9653f5eecffb494127b86fedadb90cfda5eb0bd45219601a060", 0x21}, {&(0x7f0000001200)="ce2b23457ba52676a23c5a3825ca17495ef5ce4c97516156f0600dbd98487729dd206d74baa5f3ff50b5138bce856077fab84c8099f09366695f0a75bad4f63512d4f288c63dba68197029fbd549b01ad1125fe667a25f5d0a76bffea7a3c58d228902d565de08517eee21ea247c74b012e611657eaa0278632cc45ec3114b98e937fe93e6b45c781579eb36d41b014c6ab8371dccfb304aa23d5c3018ee15ca36b835d4a0768a8ab24ca14b64b15c25", 0xb0}], 0x4}, 0x0) 11:54:44 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x3c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2d, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000380)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {r5, r6+60000000}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r7, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) timer_settime(r3, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) 11:54:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000ec0080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a140a0327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:44 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f0000019400)=""/102400, 0x19000}], 0x10000000000000b8) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:54:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2446.890682][T28193] loop1: detected capacity change from 0 to 140 [ 2446.905208][T28193] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a140b0327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000ed9080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2447.033724][T28206] loop1: detected capacity change from 0 to 140 [ 2447.046062][T28206] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2447.133044][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:54:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:54:55 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) 11:54:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000002080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a140c0327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:55 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x3c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2d, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000380)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {r5, r6+60000000}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r7, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) timer_settime(r3, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000480)={0x0, 0x3c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2d, 0x1}, &(0x7f0000000300)) (async) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000380)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) timer_settime(r4, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {r5, r6+60000000}}, &(0x7f0000000440)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r7, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) (async) timer_settime(r3, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) (async) 11:54:55 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4c755) open(&(0x7f0000000040)='./file0\x00', 0x80380, 0x280) 11:54:55 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x211, 0x0) r1 = dup2(r0, r0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="9c", 0x1}], 0x1, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) 11:54:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000003080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:54:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a140d0327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:54:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2458.385405][T28226] loop1: detected capacity change from 0 to 140 [ 2458.396713][T28226] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:54:55 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) write(r1, &(0x7f0000000000)="8c", 0x1) 11:54:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000004080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2458.503471][T28235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2458.529357][T28237] loop1: detected capacity change from 0 to 140 [ 2458.538942][T28237] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:05 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) (async) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4c755) (async) open(&(0x7f0000000040)='./file0\x00', 0x80380, 0x280) 11:55:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a140e0327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x73c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:05 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:55:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000005080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:05 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000480)={0x0, 0x3c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2d, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000380)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {r5, r6+60000000}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r7, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) (async) timer_settime(r3, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) 11:55:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000006080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14100327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000700), 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x1, @thr={&(0x7f00000003c0)="12e61b27c1e320a2c83718d07087751a3444cd9e0e06ce2d6ef18f35b9f390f4c9cae34ac16a9a55a1d15e23499de664ae437047e185f8a53ce8764fa711a3be3a61d702e6ec0ffe96d5929aabc6683e4df95b54ad203bd4c35de74e5bafa7bf9fae8fde59f37cebb7aa94b40726cb3c579ccefdcb4c09327abb70ec7267c3825e2aeec4bc028f2db3c4fe262d61f4cdcc81537ad4820e0cb4a4121965169d442fe76c1415afeb7ef9094f0e2bf0ff250768531705a4e2a789b7fb25cf427757b672e53f924d72e0afd6a443975e2c82b1349a31", &(0x7f00000004c0)="b1f39fe7d3bb40d9a208d7ddaf5715377083049ba1dd35d0e16659e8394e16d7a158c8ac6c75d2a5d509c89d4e810e7a460f9c4810c028888f580694c7c374f729480a468cbb5441c21b0b79aa1ab84c4283818c138ca11df004db8d8c949a89532e2aa4a6d8b64be94a7812d64e76627d3612eb6a9061e15d2d2d9f08a9417501ba11cc360e4dacfd4ad5dd94893e2fe95676371a92ee30d48ffe0dac46f88c874ee477840164d84e4a25a70e7ae1a1e2d282e1d73ef5bb25f4ab27e119e7eea23db3f9a96173b67dd7ac96d4e94d3e794cd1aeee71973a1a9bcdf03f783937b98e5f7d0b8efa26c682540e1b5ab92f0c43f3b950"}}, &(0x7f00000005c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000600)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000640)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0)) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r7) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f00000002c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r8+10000000}, 0x0) 11:55:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2467.623201][T28248] loop1: detected capacity change from 0 to 140 [ 2467.633827][T28248] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000007080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14110327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2467.776479][T28262] loop1: detected capacity change from 0 to 140 [ 2467.787545][T28262] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2467.865278][T28266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:16 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) (async) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) (async) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x4c755) (async) open(&(0x7f0000000040)='./file0\x00', 0x80380, 0x280) 11:55:16 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14120327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:16 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000009080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:16 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000700), 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) (async) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x1, @thr={&(0x7f00000003c0)="12e61b27c1e320a2c83718d07087751a3444cd9e0e06ce2d6ef18f35b9f390f4c9cae34ac16a9a55a1d15e23499de664ae437047e185f8a53ce8764fa711a3be3a61d702e6ec0ffe96d5929aabc6683e4df95b54ad203bd4c35de74e5bafa7bf9fae8fde59f37cebb7aa94b40726cb3c579ccefdcb4c09327abb70ec7267c3825e2aeec4bc028f2db3c4fe262d61f4cdcc81537ad4820e0cb4a4121965169d442fe76c1415afeb7ef9094f0e2bf0ff250768531705a4e2a789b7fb25cf427757b672e53f924d72e0afd6a443975e2c82b1349a31", &(0x7f00000004c0)="b1f39fe7d3bb40d9a208d7ddaf5715377083049ba1dd35d0e16659e8394e16d7a158c8ac6c75d2a5d509c89d4e810e7a460f9c4810c028888f580694c7c374f729480a468cbb5441c21b0b79aa1ab84c4283818c138ca11df004db8d8c949a89532e2aa4a6d8b64be94a7812d64e76627d3612eb6a9061e15d2d2d9f08a9417501ba11cc360e4dacfd4ad5dd94893e2fe95676371a92ee30d48ffe0dac46f88c874ee477840164d84e4a25a70e7ae1a1e2d282e1d73ef5bb25f4ab27e119e7eea23db3f9a96173b67dd7ac96d4e94d3e794cd1aeee71973a1a9bcdf03f783937b98e5f7d0b8efa26c682540e1b5ab92f0c43f3b950"}}, &(0x7f00000005c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000600)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000640)) (async) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0)) (async) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r7) (async) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f00000002c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r8+10000000}, 0x0) 11:55:16 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000180001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:16 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090227bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c61"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 2478.869276][T28280] loop1: detected capacity change from 0 to 140 [ 2478.882191][T28284] loop5: detected capacity change from 0 to 140 [ 2478.888633][T28280] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2478.894719][T28284] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:16 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000200001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2478.944865][T28287] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:55:16 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090427bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2478.986793][T28289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:55:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2479.041750][T28293] loop1: detected capacity change from 0 to 140 [ 2479.051589][T28293] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2479.074343][T28295] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2479.094336][T28297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2479.115300][T28298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2479.172657][T28301] loop1: detected capacity change from 0 to 140 [ 2479.184063][T28301] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:27 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/123, 0x7b) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:55:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000280001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090527bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:27 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1a, 0x4}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xb0, 0x6, 0x2, 0xd5, 0x6ae, 0x3, 0x5, 0x3}, &(0x7f0000000400)={0x8, 0x4, 0x7, 0x0, 0x5, 0xc5, 0x1, 0xffffffff}, &(0x7f0000000440)={0xfffffffffffffffb, 0x6, 0x20, 0x81, 0x4, 0x1000, 0xbd, 0x183f}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x6]}, 0x8}) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x31, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000300)={{r4, r5+10000000}, {r6, r7+10000000}}, 0x0) 11:55:27 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000700), 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) (async) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x1, @thr={&(0x7f00000003c0)="12e61b27c1e320a2c83718d07087751a3444cd9e0e06ce2d6ef18f35b9f390f4c9cae34ac16a9a55a1d15e23499de664ae437047e185f8a53ce8764fa711a3be3a61d702e6ec0ffe96d5929aabc6683e4df95b54ad203bd4c35de74e5bafa7bf9fae8fde59f37cebb7aa94b40726cb3c579ccefdcb4c09327abb70ec7267c3825e2aeec4bc028f2db3c4fe262d61f4cdcc81537ad4820e0cb4a4121965169d442fe76c1415afeb7ef9094f0e2bf0ff250768531705a4e2a789b7fb25cf427757b672e53f924d72e0afd6a443975e2c82b1349a31", &(0x7f00000004c0)="b1f39fe7d3bb40d9a208d7ddaf5715377083049ba1dd35d0e16659e8394e16d7a158c8ac6c75d2a5d509c89d4e810e7a460f9c4810c028888f580694c7c374f729480a468cbb5441c21b0b79aa1ab84c4283818c138ca11df004db8d8c949a89532e2aa4a6d8b64be94a7812d64e76627d3612eb6a9061e15d2d2d9f08a9417501ba11cc360e4dacfd4ad5dd94893e2fe95676371a92ee30d48ffe0dac46f88c874ee477840164d84e4a25a70e7ae1a1e2d282e1d73ef5bb25f4ab27e119e7eea23db3f9a96173b67dd7ac96d4e94d3e794cd1aeee71973a1a9bcdf03f783937b98e5f7d0b8efa26c682540e1b5ab92f0c43f3b950"}}, &(0x7f00000005c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000600)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000640)) (async) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0)) (async, rerun: 64) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_delete(r7) (async, rerun: 64) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f00000002c0)) (async, rerun: 64) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r8+10000000}, 0x0) (rerun: 64) 11:55:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090627bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000300001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2490.164429][T28308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2490.175089][T28310] loop1: detected capacity change from 0 to 140 [ 2490.175680][T28312] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2490.192268][T28310] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090727bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000040001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2490.294426][T28321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2490.305473][T28322] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2490.324451][T28323] loop1: detected capacity change from 0 to 140 [ 2490.334095][T28323] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2490.412261][T28326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2490.424697][T28327] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2490.464871][T28329] loop1: detected capacity change from 0 to 140 [ 2490.477329][T28329] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:40 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/123, 0x7b) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:55:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000100001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x75c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:40 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:40 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x141, 0x4, @thr={&(0x7f00000003c0)="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", &(0x7f0000000000)="83428e398efadef407d31f6d3e686ef035a2e1d709741e09b8e2de35155f851941faf5bc968e4debd8403ddd0542adc9"}}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:55:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000180001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090927bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2503.503639][T28347] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2503.503957][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2503.522346][T28346] loop1: detected capacity change from 0 to 140 [ 2503.533865][T28346] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000280001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2503.612498][T28352] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2503.653884][T28355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2503.695170][T28357] loop1: detected capacity change from 0 to 140 [ 2503.706714][T28357] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2503.720478][T28360] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:55:50 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/123, 0x7b) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 11:55:50 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090a27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000300001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:50 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:50 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x141, 0x4, @thr={&(0x7f00000003c0)="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", &(0x7f0000000000)="83428e398efadef407d31f6d3e686ef035a2e1d709741e09b8e2de35155f851941faf5bc968e4debd8403ddd0542adc9"}}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x1, &(0x7f0000000380)={0x0, 0x141, 0x4, @thr={&(0x7f00000003c0)="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", &(0x7f0000000000)="83428e398efadef407d31f6d3e686ef035a2e1d709741e09b8e2de35155f851941faf5bc968e4debd8403ddd0542adc9"}}, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f00000002c0)) (async) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000340)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) (async) 11:55:50 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:50 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090b27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080300000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2512.746532][T28369] loop1: detected capacity change from 0 to 140 [ 2512.754087][T28371] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2512.763470][T28372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2512.773225][T28369] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:50 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:50 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090c27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080400000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2512.881557][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2512.896568][T28379] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2512.916414][T28380] loop1: detected capacity change from 0 to 140 [ 2512.930869][T28380] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2512.996259][T28385] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2513.017710][T28386] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:55:59 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname(r1, &(0x7f0000000180)=@phonet, &(0x7f0000000080)=0x80) fallocate(r1, 0x20, 0x2, 0x6) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r3, 0x0, 0xef85) 11:55:59 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x76c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:55:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090d27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:59 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080201000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:59 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x1, &(0x7f0000000380)={0x0, 0x141, 0x4, @thr={&(0x7f00000003c0)="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", &(0x7f0000000000)="83428e398efadef407d31f6d3e686ef035a2e1d709741e09b8e2de35155f851941faf5bc968e4debd8403ddd0542adc9"}}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:55:59 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090e27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:55:59 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080301000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2521.992432][T28396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2522.002101][T28394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2522.012911][T28395] loop1: detected capacity change from 0 to 140 [ 2522.029173][T28395] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:55:59 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:55:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14091027bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2522.120094][T28404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2522.139926][T28405] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2522.193899][T28408] loop1: detected capacity change from 0 to 140 [ 2522.208050][T28408] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2522.235139][T28411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:56:08 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) getsockname(r1, &(0x7f0000000180)=@phonet, &(0x7f0000000080)=0x80) (async) fallocate(r1, 0x20, 0x2, 0x6) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (rerun: 64) sendfile(r0, r3, 0x0, 0xef85) 11:56:08 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080401000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:08 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) 11:56:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:08 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14091127bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:08 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:56:08 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080501000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:08 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) 11:56:08 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14091227bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2531.197210][T28419] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2531.203077][T28422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2531.216542][T28420] loop1: detected capacity change from 0 to 140 [ 2531.229551][T28420] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:08 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080601000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:08 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) [ 2531.311007][T28427] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2531.337195][T28429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2531.407175][T28433] loop1: detected capacity change from 0 to 140 [ 2531.419554][T28433] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2531.429281][T28435] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:56:20 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname(r1, &(0x7f0000000180)=@phonet, &(0x7f0000000080)=0x80) fallocate(r1, 0x20, 0x2, 0x6) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r3, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) getsockname(r1, &(0x7f0000000180)=@phonet, &(0x7f0000000080)=0x80) (async) fallocate(r1, 0x20, 0x2, 0x6) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r3, 0x0, 0xef85) (async) 11:56:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14095f27bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080701000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:20 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:56:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x77c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:20 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 11:56:20 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2542.573951][T28447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.574551][T28446] loop1: detected capacity change from 0 to 140 [ 2542.595526][T28448] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:56:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a1409030abd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080901000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2542.618328][T28446] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:20 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2542.724963][T28476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2542.751795][T28478] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2542.761633][T28477] loop1: detected capacity change from 0 to 140 11:56:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090325bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2542.771565][T28477] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2542.865124][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:56:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d21e3d89c1a4127, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0xef85) socket$nl_generic(0x10, 0x3, 0x10) 11:56:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080003000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 11:56:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd0a00ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:31 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) (async) 11:56:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008005f000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 11:56:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd2500ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2553.936212][T28489] loop1: detected capacity change from 0 to 140 [ 2553.943448][T28490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2553.958039][T28489] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080003000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) [ 2554.009452][T28497] netlink: 'syz-executor.4': attribute type 95 has an invalid length. [ 2554.072586][T28502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2554.095543][T28504] loop1: detected capacity change from 0 to 140 [ 2554.104663][T28504] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d21e3d89c1a4127, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0xef85) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d21e3d89c1a4127, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f4879f6130242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc40900fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d249d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8b6a6f71a586cabc48c3e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114eeb2347f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad85e9992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 11:56:39 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7002ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x78c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:39 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080008000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:39 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:56:39 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:56:39 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:56:39 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008005f000100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:39 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7003ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2562.285251][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2562.295442][T28519] loop1: detected capacity change from 0 to 140 [ 2562.302440][T28518] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 2562.313742][T28519] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:39 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:56:39 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080000030100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2562.412800][T28524] netlink: 'syz-executor.4': attribute type 95 has an invalid length. [ 2562.421416][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2562.481988][T28528] loop1: detected capacity change from 0 to 140 [ 2562.492829][T28528] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d21e3d89c1a4127, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f4879f6130242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc40900fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d249d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8b6a6f71a586cabc48c3e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114eeb2347f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad85e9992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0xef85) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d21e3d89c1a4127, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r1, &(0x7f0000000600)="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"/512, 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 11:56:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7004ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) 11:56:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:56:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001030000000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:49 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) (rerun: 32) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:56:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) 11:56:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001040000000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7005ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:56:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2571.602209][T28546] loop1: detected capacity change from 0 to 140 [ 2571.610074][T28545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2571.619964][T28546] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:56:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001020100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:56:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) [ 2571.724177][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2571.777110][T28556] loop1: detected capacity change from 0 to 140 [ 2571.790947][T28556] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:00 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) finit_module(r1, &(0x7f0000000400)='\x00', 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101800, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)={{0x107, 0xc8, 0x0, 0x377, 0x2f2, 0xd23, 0x2c7, 0x7fffffff}, "67170d38698e2d8c13ffb9a9a417a562f36569a149f50207f46bad61151b967f37b898f6a2d6e6c51510e6a4cdb12f818912f813df8b2080e69cd74b20cd0d9fa6fbd9bd2e903b5f4c5e0f9235f5e5d669c7758d64d1239e2d8429fa22bd8b5020392f1589109cab87053089b12bfc0a6f29f76bb8c019063418d360d2fa2f2b07529c3fa899", ['\x00', '\x00']}, 0x2a6) 11:57:00 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100"], 0x40}}, 0x0) 11:57:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7006ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x79c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001030100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:00 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:57:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001040100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:00 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100"], 0x40}}, 0x0) 11:57:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7007ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2582.892705][T28565] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2582.902697][T28567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2582.912730][T28566] loop1: detected capacity change from 0 to 140 [ 2582.924028][T28566] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:00 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100"], 0x40}}, 0x0) 11:57:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001050100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2583.021228][T28576] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2583.042968][T28578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2583.075698][T28580] loop1: detected capacity change from 0 to 140 [ 2583.086965][T28580] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2583.143753][T28583] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 11:57:11 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async, rerun: 64) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (rerun: 64) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) finit_module(r1, &(0x7f0000000400)='\x00', 0x1) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101800, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)={{0x107, 0xc8, 0x0, 0x377, 0x2f2, 0xd23, 0x2c7, 0x7fffffff}, "67170d38698e2d8c13ffb9a9a417a562f36569a149f50207f46bad61151b967f37b898f6a2d6e6c51510e6a4cdb12f818912f813df8b2080e69cd74b20cd0d9fa6fbd9bd2e903b5f4c5e0f9235f5e5d669c7758d64d1239e2d8429fa22bd8b5020392f1589109cab87053089b12bfc0a6f29f76bb8c019063418d360d2fa2f2b07529c3fa899", ['\x00', '\x00']}, 0x2a6) 11:57:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7008ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:11 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000"], 0x40}}, 0x0) 11:57:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001060100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:11 executing program 0: timer_create(0x5, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) 11:57:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001070100000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7009ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:11 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000"], 0x40}}, 0x0) 11:57:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2594.324338][T28594] loop1: detected capacity change from 0 to 140 [ 2594.326923][T28596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2594.343212][T28594] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2594.352997][T28597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 11:57:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001090100000008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2594.447037][T28601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2594.461420][T28604] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2594.481714][T28605] loop1: detected capacity change from 0 to 140 11:57:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd700affdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2594.490983][T28605] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2594.593664][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:57:21 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) finit_module(r1, &(0x7f0000000400)='\x00', 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101800, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async, rerun: 64) r3 = socket(0x1d, 0x2, 0x6) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (rerun: 32) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 64) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)={{0x107, 0xc8, 0x0, 0x377, 0x2f2, 0xd23, 0x2c7, 0x7fffffff}, "67170d38698e2d8c13ffb9a9a417a562f36569a149f50207f46bad61151b967f37b898f6a2d6e6c51510e6a4cdb12f818912f813df8b2080e69cd74b20cd0d9fa6fbd9bd2e903b5f4c5e0f9235f5e5d669c7758d64d1239e2d8429fa22bd8b5020392f1589109cab87053089b12bfc0a6f29f76bb8c019063418d360d2fa2f2b07529c3fa899", ['\x00', '\x00']}, 0x2a6) 11:57:21 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000"], 0x40}}, 0x0) 11:57:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000300000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd700bffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:21 executing program 0: timer_create(0x5, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 64) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) 11:57:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001005f00000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:21 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd700cffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2603.603601][T28616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2603.613539][T28617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2603.623376][T28618] loop1: detected capacity change from 0 to 140 [ 2603.636190][T28618] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000300000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:21 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) [ 2603.741476][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2603.753772][T28628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2603.766020][T28630] loop1: detected capacity change from 0 to 140 [ 2603.775767][T28630] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2603.869324][T28633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:57:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000800000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd700dffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7b40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:32 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:32 executing program 0: timer_create(0x5, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) 11:57:32 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x7, 0x3, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, {[@generic={0x88, 0xa, "54cf0fbfd4d5cff2"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa2, 0x80, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x5}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x3c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "4be508b05bae8d96604e317aaa9666cc1908347d33a11c00eca2c69e36444e0d8803456cc8a9f97810c0bbcbf391f7a259b748b5da5c93ca37ec95bb29056d942584f9cc395cedf853a3239ef392f650e60080e32c207395af97ef45c415bfb9fd1c4a0b173a9b37a041b12f8ab97799bc7b1855d91adcfcf526720b8977eff35d5225a7652476e2670b4d02c538165c7d0b08d53273d3641756a344435fe1a01d4b7f89e77bccf393e014562c90ab927835ddfdfcad32492f3665ce83e97e67786633dbc9b282ed42181e8d39b64659b016f0d8a2e7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x19\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "7d50c1412f697c85e7c329540c183272d76fab665f9e264a12e95b1c9fd3f8feae1e7ba4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e51cc54f830ef4eed16be797809ce70740032d17a8915b06d5fd8535f30ad65bef3ae53d10a60641cce4531ed5fddd814eb2549a3ce7ab9b9370d74a48b34138194544674bf86243e48b2ed1ab940998e533c82e0d9a6ac0881e189d29850f56d0c863d92ca93664cb92c2fbeb906fb028f45724f7b665209861e0d9a648"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "5c0101b08fab26c59164384be4a873e6110e"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "63d3005e198eb3a823f6ca7dd3d17a73d32d7e1233569772b2be617149971505934eff18c6ec5e5618e4f884b8089fbe051029535f47555eb9510a9e2fe55c767c71d718bb69b8d6c1f6c504561318d82f8b2b0c0b0aed0c7762004ff77cf8f8b7402620bd00eb4a1b7266eb17422e20e3a6a6f422d240ff5c972fe2e0451cad4fe8bd1b78ab5d17017faa2cb47278408e3e0dc41b38cb8ad72e4891bd6ef9fbe899ee09a2f678fc7d27b6dec8f3ed76dba1c09194715652c574dcaafeb2f6ea636b034419feccf69fd44057ec121981a1d4"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) sendfile(r0, r1, 0x0, 0xef85) 11:57:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001005f00000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:32 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000"], 0x40}}, 0x0) 11:57:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd700effdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7b80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2615.038047][T28644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2615.050873][T28645] loop1: detected capacity change from 0 to 140 [ 2615.059074][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2615.070189][T28645] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000003000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:32 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000"], 0x40}}, 0x0) 11:57:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7010ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2615.191208][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2615.204037][T28655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2615.223594][T28656] loop1: detected capacity change from 0 to 140 11:57:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2615.235999][T28656] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:32 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000"], 0x40}}, 0x0) 11:57:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000001000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2615.289913][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2615.317583][T28662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2615.391843][T28665] loop1: detected capacity change from 0 to 140 [ 2615.401327][T28665] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2615.411249][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2615.446231][T28668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:57:33 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 11:57:41 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x7, 0x3, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, {[@generic={0x88, 0xa, "54cf0fbfd4d5cff2"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa2, 0x80, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x5}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x3c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "4be508b05bae8d96604e317aaa9666cc1908347d33a11c00eca2c69e36444e0d8803456cc8a9f97810c0bbcbf391f7a259b748b5da5c93ca37ec95bb29056d942584f9cc395cedf853a3239ef392f650e60080e32c207395af97ef45c415bfb9fd1c4a0b173a9b37a041b12f8ab97799bc7b1855d91adcfcf526720b8977eff35d5225a7652476e2670b4d02c538165c7d0b08d53273d3641756a344435fe1a01d4b7f89e77bccf393e014562c90ab927835ddfdfcad32492f3665ce83e97e67786633dbc9b282ed42181e8d39b64659b016f0d8a2e7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x19\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "7d50c1412f697c85e7c329540c183272d76fab665f9e264a12e95b1c9fd3f8feae1e7ba4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e51cc54f830ef4eed16be797809ce70740032d17a8915b06d5fd8535f30ad65bef3ae53d10a60641cce4531ed5fddd814eb2549a3ce7ab9b9370d74a48b34138194544674bf86243e48b2ed1ab940998e533c82e0d9a6ac0881e189d29850f56d0c863d92ca93664cb92c2fbeb906fb028f45724f7b665209861e0d9a648"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "5c0101b08fab26c59164384be4a873e6110e"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "63d3005e198eb3a823f6ca7dd3d17a73d32d7e1233569772b2be617149971505934eff18c6ec5e5618e4f884b8089fbe051029535f47555eb9510a9e2fe55c767c71d718bb69b8d6c1f6c504561318d82f8b2b0c0b0aed0c7762004ff77cf8f8b7402620bd00eb4a1b7266eb17422e20e3a6a6f422d240ff5c972fe2e0451cad4fe8bd1b78ab5d17017faa2cb47278408e3e0dc41b38cb8ad72e4891bd6ef9fbe899ee09a2f678fc7d27b6dec8f3ed76dba1c09194715652c574dcaafeb2f6ea636b034419feccf69fd44057ec121981a1d4"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000180)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x7, 0x3, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, {[@generic={0x88, 0xa, "54cf0fbfd4d5cff2"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa2, 0x80, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x5}}) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x3c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "4be508b05bae8d96604e317aaa9666cc1908347d33a11c00eca2c69e36444e0d8803456cc8a9f97810c0bbcbf391f7a259b748b5da5c93ca37ec95bb29056d942584f9cc395cedf853a3239ef392f650e60080e32c207395af97ef45c415bfb9fd1c4a0b173a9b37a041b12f8ab97799bc7b1855d91adcfcf526720b8977eff35d5225a7652476e2670b4d02c538165c7d0b08d53273d3641756a344435fe1a01d4b7f89e77bccf393e014562c90ab927835ddfdfcad32492f3665ce83e97e67786633dbc9b282ed42181e8d39b64659b016f0d8a2e7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x19\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "7d50c1412f697c85e7c329540c183272d76fab665f9e264a12e95b1c9fd3f8feae1e7ba4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e51cc54f830ef4eed16be797809ce70740032d17a8915b06d5fd8535f30ad65bef3ae53d10a60641cce4531ed5fddd814eb2549a3ce7ab9b9370d74a48b34138194544674bf86243e48b2ed1ab940998e533c82e0d9a6ac0881e189d29850f56d0c863d92ca93664cb92c2fbeb906fb028f45724f7b665209861e0d9a648"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "5c0101b08fab26c59164384be4a873e6110e"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "63d3005e198eb3a823f6ca7dd3d17a73d32d7e1233569772b2be617149971505934eff18c6ec5e5618e4f884b8089fbe051029535f47555eb9510a9e2fe55c767c71d718bb69b8d6c1f6c504561318d82f8b2b0c0b0aed0c7762004ff77cf8f8b7402620bd00eb4a1b7266eb17422e20e3a6a6f422d240ff5c972fe2e0451cad4fe8bd1b78ab5d17017faa2cb47278408e3e0dc41b38cb8ad72e4891bd6ef9fbe899ee09a2f678fc7d27b6dec8f3ed76dba1c09194715652c574dcaafeb2f6ea636b034419feccf69fd44057ec121981a1d4"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:57:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7011ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500020000000800"], 0x40}}, 0x0) 11:57:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000004000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) 11:57:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500020000000800"], 0x40}}, 0x0) 11:57:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f00000000c0)) (rerun: 32) 11:57:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000102000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500020000000800"], 0x40}}, 0x0) 11:57:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7012ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2624.330711][T28683] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2624.339897][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2624.350693][T28680] loop1: detected capacity change from 0 to 140 [ 2624.361919][T28680] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2624.493053][T28702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2624.505465][T28704] loop1: detected capacity change from 0 to 140 [ 2624.517776][T28704] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000103000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:51 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x10000, 0x80, 0x8, 0x4, 0x7, 0x10001}, &(0x7f0000000080)={0x800, 0xffffffff, 0x100000001, 0x80, 0x3, 0x4, 0xffffffffffffff29, 0x1}, &(0x7f00000001c0)={0x80000000, 0x155, 0x1, 0x2, 0xab6d, 0x7, 0x3, 0x80000000}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000240)={[0xff]}, 0x8}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:57:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7018ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:51 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:51 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x7, 0x3, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, {[@generic={0x88, 0xa, "54cf0fbfd4d5cff2"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa2, 0x80, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x5}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x3c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "4be508b05bae8d96604e317aaa9666cc1908347d33a11c00eca2c69e36444e0d8803456cc8a9f97810c0bbcbf391f7a259b748b5da5c93ca37ec95bb29056d942584f9cc395cedf853a3239ef392f650e60080e32c207395af97ef45c415bfb9fd1c4a0b173a9b37a041b12f8ab97799bc7b1855d91adcfcf526720b8977eff35d5225a7652476e2670b4d02c538165c7d0b08d53273d3641756a344435fe1a01d4b7f89e77bccf393e014562c90ab927835ddfdfcad32492f3665ce83e97e67786633dbc9b282ed42181e8d39b64659b016f0d8a2e7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x19\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "7d50c1412f697c85e7c329540c183272d76fab665f9e264a12e95b1c9fd3f8feae1e7ba4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e51cc54f830ef4eed16be797809ce70740032d17a8915b06d5fd8535f30ad65bef3ae53d10a60641cce4531ed5fddd814eb2549a3ce7ab9b9370d74a48b34138194544674bf86243e48b2ed1ab940998e533c82e0d9a6ac0881e189d29850f56d0c863d92ca93664cb92c2fbeb906fb028f45724f7b665209861e0d9a648"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "5c0101b08fab26c59164384be4a873e6110e"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "63d3005e198eb3a823f6ca7dd3d17a73d32d7e1233569772b2be617149971505934eff18c6ec5e5618e4f884b8089fbe051029535f47555eb9510a9e2fe55c767c71d718bb69b8d6c1f6c504561318d82f8b2b0c0b0aed0c7762004ff77cf8f8b7402620bd00eb4a1b7266eb17422e20e3a6a6f422d240ff5c972fe2e0451cad4fe8bd1b78ab5d17017faa2cb47278408e3e0dc41b38cb8ad72e4891bd6ef9fbe899ee09a2f678fc7d27b6dec8f3ed76dba1c09194715652c574dcaafeb2f6ea636b034419feccf69fd44057ec121981a1d4"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000180)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x7, 0x3, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, {[@generic={0x88, 0xa, "54cf0fbfd4d5cff2"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa2, 0x80, 0x20, @local, @local, 0x10, 0x7, 0x2, 0x5}}) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x3c0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "4be508b05bae8d96604e317aaa9666cc1908347d33a11c00eca2c69e36444e0d8803456cc8a9f97810c0bbcbf391f7a259b748b5da5c93ca37ec95bb29056d942584f9cc395cedf853a3239ef392f650e60080e32c207395af97ef45c415bfb9fd1c4a0b173a9b37a041b12f8ab97799bc7b1855d91adcfcf526720b8977eff35d5225a7652476e2670b4d02c538165c7d0b08d53273d3641756a344435fe1a01d4b7f89e77bccf393e014562c90ab927835ddfdfcad32492f3665ce83e97e67786633dbc9b282ed42181e8d39b64659b016f0d8a2e7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x19\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "7d50c1412f697c85e7c329540c183272d76fab665f9e264a12e95b1c9fd3f8feae1e7ba4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e51cc54f830ef4eed16be797809ce70740032d17a8915b06d5fd8535f30ad65bef3ae53d10a60641cce4531ed5fddd814eb2549a3ce7ab9b9370d74a48b34138194544674bf86243e48b2ed1ab940998e533c82e0d9a6ac0881e189d29850f56d0c863d92ca93664cb92c2fbeb906fb028f45724f7b665209861e0d9a648"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "5c0101b08fab26c59164384be4a873e6110e"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "63d3005e198eb3a823f6ca7dd3d17a73d32d7e1233569772b2be617149971505934eff18c6ec5e5618e4f884b8089fbe051029535f47555eb9510a9e2fe55c767c71d718bb69b8d6c1f6c504561318d82f8b2b0c0b0aed0c7762004ff77cf8f8b7402620bd00eb4a1b7266eb17422e20e3a6a6f422d240ff5c972fe2e0451cad4fe8bd1b78ab5d17017faa2cb47278408e3e0dc41b38cb8ad72e4891bd6ef9fbe899ee09a2f678fc7d27b6dec8f3ed76dba1c09194715652c574dcaafeb2f6ea636b034419feccf69fd44057ec121981a1d4"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:57:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000104000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:51 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7025ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2633.608439][T28715] loop1: detected capacity change from 0 to 140 [ 2633.615334][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2633.628151][T28718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2633.642021][T28715] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000105000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:51 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7048ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2633.721469][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2633.751259][T28725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:57:51 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x10000, 0x80, 0x8, 0x4, 0x7, 0x10001}, &(0x7f0000000080)={0x800, 0xffffffff, 0x100000001, 0x80, 0x3, 0x4, 0xffffffffffffff29, 0x1}, &(0x7f00000001c0)={0x80000000, 0x155, 0x1, 0x2, 0xab6d, 0x7, 0x3, 0x80000000}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000240)={[0xff]}, 0x8}) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2633.776061][T28727] loop1: detected capacity change from 0 to 140 [ 2633.788840][T28727] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2633.818904][T28730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2633.861438][T28734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:57:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:57:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000106000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:57:58 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd704cffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:58 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x10000, 0x80, 0x8, 0x4, 0x7, 0x10001}, &(0x7f0000000080)={0x800, 0xffffffff, 0x100000001, 0x80, 0x3, 0x4, 0xffffffffffffff29, 0x1}, &(0x7f00000001c0)={0x80000000, 0x155, 0x1, 0x2, 0xab6d, 0x7, 0x3, 0x80000000}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000240)={[0xff]}, 0x8}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x10000, 0x80, 0x8, 0x4, 0x7, 0x10001}, &(0x7f0000000080)={0x800, 0xffffffff, 0x100000001, 0x80, 0x3, 0x4, 0xffffffffffffff29, 0x1}, &(0x7f00000001c0)={0x80000000, 0x155, 0x1, 0x2, 0xab6d, 0x7, 0x3, 0x80000000}, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000240)={[0xff]}, 0x8}) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 11:57:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000107000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:58 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:57:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7060ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:57:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2640.889083][T28750] loop1: detected capacity change from 0 to 140 [ 2640.896808][T28752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2640.907988][T28750] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:57:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000109000008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:57:58 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) [ 2641.025708][T28759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2641.064974][T28761] loop1: detected capacity change from 0 to 140 [ 2641.077061][T28761] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:07 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:58:07 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7068ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:07 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100030008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:07 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:58:07 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0x1f]}, &(0x7f0000000200), &(0x7f00000002c0), 0x8) timer_settime(r0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) 11:58:07 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:58:07 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100050008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:07 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd706cffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:07 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500"], 0x40}}, 0x0) 11:58:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2650.184990][T28778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2650.195163][T28779] loop1: detected capacity change from 0 to 140 [ 2650.208610][T28779] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:07 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100060008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:07 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7074ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2650.313180][T28788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2650.349531][T28791] loop1: detected capacity change from 0 to 140 [ 2650.362978][T28791] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2650.411237][T28795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:58:16 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 11:58:16 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) 11:58:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:16 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100070008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:16 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd707affdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:16 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) rt_sigtimedwait(&(0x7f00000001c0)={[0x1f]}, &(0x7f0000000200), &(0x7f00000002c0), 0x8) (async) timer_settime(r0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) 11:58:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100090008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:17 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) 11:58:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2504000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:17 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) rt_sigtimedwait(&(0x7f00000001c0)={[0x1f]}, &(0x7f0000000200), &(0x7f00000002c0), 0x8) timer_settime(r0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) [ 2659.523016][T28809] loop1: detected capacity change from 0 to 140 [ 2659.533389][T28811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2659.547696][T28809] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001c00e0008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2659.658279][T28821] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2659.715023][T28827] loop1: detected capacity change from 0 to 140 [ 2659.731898][T28827] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:24 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250b000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:24 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x0) 11:58:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001d90e0008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:24 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="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", &(0x7f00000004c0)="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"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:58:24 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:58:24 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:58:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010ec00008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:24 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250c000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2666.726189][T28841] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2666.734454][T28841] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2666.748949][T28844] loop1: detected capacity change from 0 to 140 [ 2666.759996][T28844] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:24 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:58:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010ed90008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:24 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2528000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2666.866339][T28851] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2666.874478][T28851] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2666.896597][T28853] loop1: detected capacity change from 0 to 140 11:58:24 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:58:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2666.910389][T28853] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000010000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:24 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="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", &(0x7f00000004c0)="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"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="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", &(0x7f00000004c0)="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"}}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) [ 2667.009205][T28858] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2667.017412][T28858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2667.060735][T28862] loop1: detected capacity change from 0 to 140 [ 2667.071946][T28862] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2667.099985][T28866] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:58:31 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async, rerun: 64) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (rerun: 64) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 11:58:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 11:58:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2529000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000018000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:31 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="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", &(0x7f00000004c0)="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"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="93501785c21bfea47fd3a2c998497b963be779fbf7fdb7ff06fd077594759f03df029620bb8bcbbee7e135c6a8564f690c75042b5cc192672d63524adc700a5535ac02336340aedeecb183b3e6e34cecb6eb9a5e73b8fcf12d34d3f55c57398af0a7f014f893a36fa2bd3e49b557f8c1cb078be0c316ddeafb4867eeffd0315f34b80c96795672e1274492a0d62fa426f0b274f9012b34991ff4e75ab844ac98281ff005b88ef07c2aa045ac24228c79d2330ad6e20faa05429a47f57782587bd8d2e1ca9fd985aae815fb3de5a4cc116bd8ef46df5eb21b24526f24d0c451c84ba747fd39b7e96ed53c9730665125b3ccf6efa3c93f9bdd57b89c", &(0x7f00000004c0)="9518a4cef1f5b62da1efc74c73efdde56f29d420763c00452b1f2c40f83cf982c6e79235db246dc203004e40468d566968fc2726d02e94d357cb3736ae029b7897146e211fef4682b9716e46f297609ae10135d32e9e905a6b069c9d2f9355b039bf1c5c9cd9ff3a8cef444d701468a82b7149efb33c224bc285446bd1610aa95d144d926f860c57daf08114fa5e58ecd3c908ddeb8f65d545fafae860853e41e7899f943a80cac5540638c79d9a2b584cd10170cc29266d3e300d9b7c3ee502ac4a52c04e17d715155fe55c1d9db3c5e9f2b502b38549166ddce6e8d5f55f608a6cbde114f62e4f3bc9405c4fb049787eb87685cb645819fa2fb47ad5aa0dc72b66e0d1c129d3166d735667663756067c068f33a124d46552a5050eca19bd1eb2ad4edef32ff1265fb2e615e94c88f9105f43c74a16409abbf05817cbe104506b3c339e61498ec19b515cf09eb39575524c59f1b98fffebd93e66c7dcd04674a7955894d7b63a92ed4bc2058a08ac0a73e00f6fc8ed09aa677a3179b75a136a8a52becb489fbe0754d35e3c79f284c4bdee6385ac77c7387bb2f407236d8e6cd7cf634209750b114fcf13b331ac7d9c46"}}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 11:58:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 11:58:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2530000300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000020000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2673.867210][T28882] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2673.871617][T28883] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2673.875710][T28881] loop1: detected capacity change from 0 to 140 [ 2673.883405][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:58:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2673.911548][T28881] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508020300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000028000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2674.004701][T28889] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2674.013176][T28890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2674.080707][T28894] loop1: detected capacity change from 0 to 140 [ 2674.095824][T28894] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2674.114613][T28896] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2674.133952][T28897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:58:40 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) write(r4, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 11:58:40 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 11:58:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508030300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000030000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:40 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x4cdbcd8cc9405d93, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:58:40 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:58:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508040300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100020008000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2683.193801][T28911] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2683.203574][T28910] loop1: detected capacity change from 0 to 140 [ 2683.213095][T28910] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2683.223174][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:58:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:40 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:58:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508050300040000000800010001000000080001"], 0x40}}, 0x0) [ 2683.324924][T28916] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2683.391973][T28920] loop1: detected capacity change from 0 to 140 [ 2683.402435][T28920] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2683.455779][T28924] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:58:47 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x6c41, 0x1d2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) statx(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f00000002c0)={[{@noprefix}, {@clone_children}, {@clone_children}, {@name={'name', 0x3d, '{\x87+'}}, {@noprefix}, {@none}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x63, 0x37, 0x64, 0x37, 0x38, 0x37], 0x2d, [0x32, 0x36, 0x66, 0x64], 0x2d, [0x66, 0x37, 0x61, 0x39], 0x2d, [0x32, 0x30, 0x63, 0x66], 0x2d, [0x54, 0x35, 0x35, 0x0, 0x31, 0x64, 0x61, 0x64]}}}, {@euid_gt={'euid>', r3}}]}) sendfile(r0, r1, 0x0, 0xef85) open$dir(&(0x7f0000000380)='./file0\x00', 0x400, 0xc2) 11:58:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100030008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:47 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 11:58:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508060300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:47 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x4cdbcd8cc9405d93, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x4cdbcd8cc9405d93, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 11:58:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100040008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:47 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) 11:58:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508070300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2690.329420][T28933] loop1: detected capacity change from 0 to 140 [ 2690.342010][T28935] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.353591][T28933] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100050008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:47 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) [ 2690.463851][T28944] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.504549][T28947] loop1: detected capacity change from 0 to 140 [ 2690.514157][T28947] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:56 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x6c41, 0x1d2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) write(r0, &(0x7f0000000600)="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", 0x200) (rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async, rerun: 64) statx(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f00000002c0)={[{@noprefix}, {@clone_children}, {@clone_children}, {@name={'name', 0x3d, '{\x87+'}}, {@noprefix}, {@none}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x63, 0x37, 0x64, 0x37, 0x38, 0x37], 0x2d, [0x32, 0x36, 0x66, 0x64], 0x2d, [0x66, 0x37, 0x61, 0x39], 0x2d, [0x32, 0x30, 0x63, 0x66], 0x2d, [0x54, 0x35, 0x35, 0x0, 0x31, 0x64, 0x61, 0x64]}}}, {@euid_gt={'euid>', r3}}]}) (async) sendfile(r0, r1, 0x0, 0xef85) (async) open$dir(&(0x7f0000000380)='./file0\x00', 0x400, 0xc2) 11:58:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508080300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:58:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100060008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:56 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}}, 0x0) 11:58:56 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x4cdbcd8cc9405d93, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2698.636304][T28953] cgroup: Invalid name [ 2698.641051][ T24] audit: type=1400 audit(1645531136.101:490): avc: denied { mounton } for pid=28952 comm="syz-executor.2" path="/root/syzkaller-testdir348419463/syzkaller.ShdRZA/1738/file0" dev="sda1" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 11:58:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508090300040000000800010001000000080001"], 0x40}}, 0x0) 11:58:56 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800"], 0x40}}, 0x0) 11:58:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100070008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2698.707770][T28963] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2698.717982][T28962] loop1: detected capacity change from 0 to 140 [ 2698.735265][T28962] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:58:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100090008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:58:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080a0300040000000800010001000000080001"], 0x40}}, 0x0) [ 2698.821218][T28968] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2698.830904][T28969] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2698.869051][T28972] loop1: detected capacity change from 0 to 140 [ 2698.881345][T28972] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2698.978717][T28976] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:05 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x6c41, 0x1d2) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) statx(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f00000002c0)={[{@noprefix}, {@clone_children}, {@clone_children}, {@name={'name', 0x3d, '{\x87+'}}, {@noprefix}, {@none}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x63, 0x37, 0x64, 0x37, 0x38, 0x37], 0x2d, [0x32, 0x36, 0x66, 0x64], 0x2d, [0x66, 0x37, 0x61, 0x39], 0x2d, [0x32, 0x30, 0x63, 0x66], 0x2d, [0x54, 0x35, 0x35, 0x0, 0x31, 0x64, 0x61, 0x64]}}}, {@euid_gt={'euid>', r3}}]}) (async) sendfile(r0, r1, 0x0, 0xef85) (async) open$dir(&(0x7f0000000380)='./file0\x00', 0x400, 0xc2) 11:59:05 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800"], 0x40}}, 0x0) 11:59:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:59:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000308000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080b0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080c0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:05 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800"], 0x40}}, 0x0) 11:59:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000508000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2707.928661][T28986] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2707.928960][T28983] loop1: detected capacity change from 0 to 140 [ 2707.939107][T28987] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2707.958925][T28983] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x81c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080d0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000608000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2708.037974][T28989] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2708.064837][T28992] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2708.127009][T28996] loop1: detected capacity change from 0 to 140 [ 2708.139292][T28996] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2708.159510][T28998] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:14 executing program 2: r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x64, 0x4a, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x4804) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) 11:59:14 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000708000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:14 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000"], 0x40}}, 0x0) 11:59:14 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080e0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:14 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:59:14 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000908000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:14 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508100300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:14 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000"], 0x40}}, 0x0) [ 2717.281665][T29009] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2717.293563][T29010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2717.309253][T29012] loop1: detected capacity change from 0 to 140 11:59:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2717.323828][T29012] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:14 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100c00e08000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:14 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508110300040000000800010001000000080001"], 0x40}}, 0x0) [ 2717.422063][T29019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2717.432188][T29020] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2717.461684][T29022] loop1: detected capacity change from 0 to 140 [ 2717.470903][T29022] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2717.556621][T29026] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:23 executing program 2: r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x64, 0x4a, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x4804) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x64, 0x4a, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x4804) (async) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r2, &(0x7f0000000600)="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", 0x200) (async) sendfile(r2, r3, 0x0, 0xef85) (async) 11:59:23 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000"], 0x40}}, 0x0) 11:59:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100d90e08000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:23 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508120300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:23 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:59:23 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000"], 0x40}}, 0x0) 11:59:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000ec008000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:24 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f00000001c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:59:24 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508180300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x82c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2726.494468][T29033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2726.501132][T29036] loop1: detected capacity change from 0 to 140 [ 2726.511073][T29035] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2726.522680][T29036] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000ed908000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2726.630409][T29045] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2726.642527][T29046] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2726.674661][T29048] loop1: detected capacity change from 0 to 140 [ 2726.687240][T29048] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:33 executing program 2: r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x64, 0x4a, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x4804) (async) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) (async) sendfile(r2, r3, 0x0, 0xef85) 11:59:33 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000"], 0x40}}, 0x0) 11:59:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508250300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000208000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:33 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f00000001c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f00000001c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 11:59:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000308000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:33 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000"], 0x40}}, 0x0) 11:59:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508480300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2735.948774][T29062] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.958541][T29064] loop1: detected capacity change from 0 to 140 [ 2735.970669][T29066] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2735.981786][T29064] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000408000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:33 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008"], 0x40}}, 0x0) [ 2736.078351][T29075] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2736.090776][T29076] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2736.122772][T29078] loop1: detected capacity change from 0 to 140 [ 2736.132635][T29078] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2736.209914][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:59:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x7ff, 0x136f}, 0x100, './file0\x00'}) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000800)=""/237, 0xed}], 0x6, &(0x7f0000000980)=""/135, 0x87}, 0x800}, {{&(0x7f0000000a40)=@caif, 0x80, &(0x7f0000001f00)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000ac0)=""/105, 0x69}, {&(0x7f0000000b40)=""/226, 0xe2}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/106, 0x6a}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/164, 0xa4}, {&(0x7f0000001dc0)=""/90, 0x5a}, {&(0x7f0000001e40)=""/43, 0x2b}, {&(0x7f0000001e80)=""/122, 0x7a}], 0xa, &(0x7f0000001fc0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004500)=[{&(0x7f0000002140)=""/78, 0x4e}, {&(0x7f00000021c0)=""/64, 0x40}, {&(0x7f0000002200)=""/117, 0x75}, {&(0x7f0000002280)=""/54, 0x36}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/188, 0xbc}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/50, 0x32}, {&(0x7f00000043c0)=""/166, 0xa6}, {&(0x7f0000004480)=""/122, 0x7a}], 0xa, &(0x7f00000045c0)=""/255, 0xff}}, {{&(0x7f00000046c0)=@tipc, 0x80, &(0x7f0000005880)=[{&(0x7f0000004740)=""/150, 0x96}, {&(0x7f0000004800)=""/114, 0x72}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x3, &(0x7f00000058c0)=""/92, 0x5c}, 0x5}, {{&(0x7f0000005940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f00000059c0)=""/146, 0x92}, {&(0x7f0000005a80)=""/123, 0x7b}, {&(0x7f0000005b00)=""/60, 0x3c}, {&(0x7f0000005b40)=""/35, 0x23}, {&(0x7f0000005b80)=""/34, 0x22}, {&(0x7f0000005bc0)=""/62, 0x3e}, {&(0x7f0000005c00)=""/72, 0x48}, {&(0x7f0000005c80)=""/44, 0x2c}], 0x8, &(0x7f0000005d40)=""/142, 0x8e}, 0x3}, {{&(0x7f0000005e00)=@generic, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005e80)=""/108, 0x6c}, {&(0x7f0000005f00)=""/25, 0x19}, {&(0x7f0000005f40)=""/121, 0x79}], 0x3, &(0x7f0000006000)=""/17, 0x11}, 0x6}, {{&(0x7f0000006040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000006680)=[{&(0x7f00000060c0)=""/152, 0x98}, {&(0x7f0000006180)=""/104, 0x68}, {&(0x7f0000006200)=""/110, 0x6e}, {&(0x7f0000006280)=""/158, 0x9e}, {&(0x7f0000006340)=""/239, 0xef}, {&(0x7f0000006440)}, {&(0x7f0000006480)=""/81, 0x51}, {&(0x7f0000006500)=""/227, 0xe3}, {&(0x7f0000006600)=""/66, 0x42}], 0x9}, 0xc2}, {{&(0x7f0000006740)=@nl, 0x80, &(0x7f0000006a40)=[{&(0x7f00000067c0)=""/193, 0xc1}, {&(0x7f00000068c0)=""/67, 0x43}, {&(0x7f0000006940)}, {&(0x7f0000006980)=""/81, 0x51}, {&(0x7f0000006a00)=""/16, 0x10}], 0x5, &(0x7f0000006ac0)=""/212, 0xd4}}], 0x8, 0x2002, &(0x7f0000006dc0)={0x0, 0x3938700}) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) tee(r1, 0xffffffffffffffff, 0x3, 0x2) getdents64(r0, &(0x7f0000006e00)=""/74, 0x4a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mount_setattr(r1, &(0x7f0000000c40)='./file0\x00', 0x900, &(0x7f0000006440)={0x80, 0x4, 0x80000, {r2}}, 0x20) 11:59:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25084c0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000508000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:42 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008"], 0x40}}, 0x0) 11:59:42 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f00000001c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 11:59:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000608000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508600300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:42 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008"], 0x40}}, 0x0) 11:59:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x83c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2745.200615][T29089] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2745.202001][T29094] loop1: detected capacity change from 0 to 140 [ 2745.220701][T29096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2745.231060][T29094] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000708000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508680300040000000800010001000000080001"], 0x40}}, 0x0) [ 2745.320940][T29101] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2745.344027][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2745.373661][T29104] loop1: detected capacity change from 0 to 140 [ 2745.386963][T29104] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2745.440369][T29107] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:49 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x7ff, 0x136f}, 0x100, './file0\x00'}) (async, rerun: 32) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000800)=""/237, 0xed}], 0x6, &(0x7f0000000980)=""/135, 0x87}, 0x800}, {{&(0x7f0000000a40)=@caif, 0x80, &(0x7f0000001f00)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000ac0)=""/105, 0x69}, {&(0x7f0000000b40)=""/226, 0xe2}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/106, 0x6a}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/164, 0xa4}, {&(0x7f0000001dc0)=""/90, 0x5a}, {&(0x7f0000001e40)=""/43, 0x2b}, {&(0x7f0000001e80)=""/122, 0x7a}], 0xa, &(0x7f0000001fc0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004500)=[{&(0x7f0000002140)=""/78, 0x4e}, {&(0x7f00000021c0)=""/64, 0x40}, {&(0x7f0000002200)=""/117, 0x75}, {&(0x7f0000002280)=""/54, 0x36}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/188, 0xbc}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/50, 0x32}, {&(0x7f00000043c0)=""/166, 0xa6}, {&(0x7f0000004480)=""/122, 0x7a}], 0xa, &(0x7f00000045c0)=""/255, 0xff}}, {{&(0x7f00000046c0)=@tipc, 0x80, &(0x7f0000005880)=[{&(0x7f0000004740)=""/150, 0x96}, {&(0x7f0000004800)=""/114, 0x72}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x3, &(0x7f00000058c0)=""/92, 0x5c}, 0x5}, {{&(0x7f0000005940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f00000059c0)=""/146, 0x92}, {&(0x7f0000005a80)=""/123, 0x7b}, {&(0x7f0000005b00)=""/60, 0x3c}, {&(0x7f0000005b40)=""/35, 0x23}, {&(0x7f0000005b80)=""/34, 0x22}, {&(0x7f0000005bc0)=""/62, 0x3e}, {&(0x7f0000005c00)=""/72, 0x48}, {&(0x7f0000005c80)=""/44, 0x2c}], 0x8, &(0x7f0000005d40)=""/142, 0x8e}, 0x3}, {{&(0x7f0000005e00)=@generic, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005e80)=""/108, 0x6c}, {&(0x7f0000005f00)=""/25, 0x19}, {&(0x7f0000005f40)=""/121, 0x79}], 0x3, &(0x7f0000006000)=""/17, 0x11}, 0x6}, {{&(0x7f0000006040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000006680)=[{&(0x7f00000060c0)=""/152, 0x98}, {&(0x7f0000006180)=""/104, 0x68}, {&(0x7f0000006200)=""/110, 0x6e}, {&(0x7f0000006280)=""/158, 0x9e}, {&(0x7f0000006340)=""/239, 0xef}, {&(0x7f0000006440)}, {&(0x7f0000006480)=""/81, 0x51}, {&(0x7f0000006500)=""/227, 0xe3}, {&(0x7f0000006600)=""/66, 0x42}], 0x9}, 0xc2}, {{&(0x7f0000006740)=@nl, 0x80, &(0x7f0000006a40)=[{&(0x7f00000067c0)=""/193, 0xc1}, {&(0x7f00000068c0)=""/67, 0x43}, {&(0x7f0000006940)}, {&(0x7f0000006980)=""/81, 0x51}, {&(0x7f0000006a00)=""/16, 0x10}], 0x5, &(0x7f0000006ac0)=""/212, 0xd4}}], 0x8, 0x2002, &(0x7f0000006dc0)={0x0, 0x3938700}) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) (async, rerun: 64) tee(r1, 0xffffffffffffffff, 0x3, 0x2) (rerun: 64) getdents64(r0, &(0x7f0000006e00)=""/74, 0x4a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) (async) mount_setattr(r1, &(0x7f0000000c40)='./file0\x00', 0x900, &(0x7f0000006440)={0x80, 0x4, 0x80000, {r2}}, 0x20) 11:59:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000000080015"], 0x40}}, 0x0) 11:59:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000908000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25086c0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:49 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 11:59:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000000080015"], 0x40}}, 0x0) 11:59:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000018000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508740300040000000800010001000000080001"], 0x40}}, 0x0) [ 2752.402234][T29119] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2752.402934][T29123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2752.412276][T29120] loop1: detected capacity change from 0 to 140 [ 2752.432189][T29120] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800"], 0x40}}, 0x0) [ 2752.503125][T29125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2752.539377][T29128] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000020000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2752.549125][T29129] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2752.591444][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2752.603564][T29133] loop1: detected capacity change from 0 to 140 [ 2752.613101][T29133] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2752.663353][T29135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:59:57 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800"], 0x40}}, 0x0) 11:59:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25087a0300040000000800010001000000080001"], 0x40}}, 0x0) 11:59:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 11:59:57 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000028000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:57 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x7ff, 0x136f}, 0x100, './file0\x00'}) (async, rerun: 64) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000800)=""/237, 0xed}], 0x6, &(0x7f0000000980)=""/135, 0x87}, 0x800}, {{&(0x7f0000000a40)=@caif, 0x80, &(0x7f0000001f00)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000ac0)=""/105, 0x69}, {&(0x7f0000000b40)=""/226, 0xe2}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/106, 0x6a}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/164, 0xa4}, {&(0x7f0000001dc0)=""/90, 0x5a}, {&(0x7f0000001e40)=""/43, 0x2b}, {&(0x7f0000001e80)=""/122, 0x7a}], 0xa, &(0x7f0000001fc0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004500)=[{&(0x7f0000002140)=""/78, 0x4e}, {&(0x7f00000021c0)=""/64, 0x40}, {&(0x7f0000002200)=""/117, 0x75}, {&(0x7f0000002280)=""/54, 0x36}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/188, 0xbc}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/50, 0x32}, {&(0x7f00000043c0)=""/166, 0xa6}, {&(0x7f0000004480)=""/122, 0x7a}], 0xa, &(0x7f00000045c0)=""/255, 0xff}}, {{&(0x7f00000046c0)=@tipc, 0x80, &(0x7f0000005880)=[{&(0x7f0000004740)=""/150, 0x96}, {&(0x7f0000004800)=""/114, 0x72}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x3, &(0x7f00000058c0)=""/92, 0x5c}, 0x5}, {{&(0x7f0000005940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f00000059c0)=""/146, 0x92}, {&(0x7f0000005a80)=""/123, 0x7b}, {&(0x7f0000005b00)=""/60, 0x3c}, {&(0x7f0000005b40)=""/35, 0x23}, {&(0x7f0000005b80)=""/34, 0x22}, {&(0x7f0000005bc0)=""/62, 0x3e}, {&(0x7f0000005c00)=""/72, 0x48}, {&(0x7f0000005c80)=""/44, 0x2c}], 0x8, &(0x7f0000005d40)=""/142, 0x8e}, 0x3}, {{&(0x7f0000005e00)=@generic, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005e80)=""/108, 0x6c}, {&(0x7f0000005f00)=""/25, 0x19}, {&(0x7f0000005f40)=""/121, 0x79}], 0x3, &(0x7f0000006000)=""/17, 0x11}, 0x6}, {{&(0x7f0000006040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000006680)=[{&(0x7f00000060c0)=""/152, 0x98}, {&(0x7f0000006180)=""/104, 0x68}, {&(0x7f0000006200)=""/110, 0x6e}, {&(0x7f0000006280)=""/158, 0x9e}, {&(0x7f0000006340)=""/239, 0xef}, {&(0x7f0000006440)}, {&(0x7f0000006480)=""/81, 0x51}, {&(0x7f0000006500)=""/227, 0xe3}, {&(0x7f0000006600)=""/66, 0x42}], 0x9}, 0xc2}, {{&(0x7f0000006740)=@nl, 0x80, &(0x7f0000006a40)=[{&(0x7f00000067c0)=""/193, 0xc1}, {&(0x7f00000068c0)=""/67, 0x43}, {&(0x7f0000006940)}, {&(0x7f0000006980)=""/81, 0x51}, {&(0x7f0000006a00)=""/16, 0x10}], 0x5, &(0x7f0000006ac0)=""/212, 0xd4}}], 0x8, 0x2002, &(0x7f0000006dc0)={0x0, 0x3938700}) (async, rerun: 64) write(r0, &(0x7f0000000600)="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", 0x200) (async, rerun: 32) sendfile(r0, r1, 0x0, 0xef85) (rerun: 32) tee(r1, 0xffffffffffffffff, 0x3, 0x2) (async, rerun: 32) getdents64(r0, &(0x7f0000006e00)=""/74, 0x4a) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mount_setattr(r1, &(0x7f0000000c40)='./file0\x00', 0x900, &(0x7f0000006440)={0x80, 0x4, 0x80000, {r2}}, 0x20) 11:59:57 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) [ 2759.676620][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2759.676621][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2759.697649][T29150] loop1: detected capacity change from 0 to 140 [ 2759.711231][T29151] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 11:59:57 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090827bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800"], 0x40}}, 0x0) 11:59:57 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000030000100000000000800150002000000080003"], 0x40}}, 0x0) 11:59:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000500040000000800010001000000080001"], 0x40}}, 0x0) 11:59:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x84c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2759.722873][T29150] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000600040000000800010001000000080001"], 0x40}}, 0x0) 11:59:57 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000280)={r1, r2+10000000}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 11:59:57 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000004000100000000000800150002000000080003"], 0x40}}, 0x0) [ 2759.830705][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2759.842964][T29161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2759.869302][T29165] loop1: detected capacity change from 0 to 140 11:59:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2759.880836][T29165] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 11:59:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000700040000000800010001000000080001"], 0x40}}, 0x0) [ 2759.942541][T29168] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2759.991556][T29171] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2760.053017][T29174] loop1: detected capacity change from 0 to 140 [ 2760.059819][T29175] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 2760.070567][T29174] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:06 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000010000100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:06 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000280)={r1, r2+10000000}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:06 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006600000027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040004000b000b000e000c0008000b001c04000008007e100b00d000000008000b0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008810) r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) read(r0, &(0x7f0000000180)=""/60, 0x3c) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) 12:00:06 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000900040000000800010001000000080001"], 0x40}}, 0x0) 12:00:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:06 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:00:06 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000280)={r1, r2+10000000}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:06 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000018000100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:06 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000a00040000000800010001000000080001"], 0x40}}, 0x0) [ 2768.891413][T29184] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2768.899985][T29183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2768.910436][T29187] loop1: detected capacity change from 0 to 140 [ 2768.926712][T29187] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:06 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:06 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000028000100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:06 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000b00040000000800010001000000080001"], 0x40}}, 0x0) [ 2769.022820][T29192] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2769.035832][T29193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2769.101261][T29196] loop1: detected capacity change from 0 to 140 [ 2769.111661][T29196] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x85c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2769.150649][T29200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2769.174808][T29201] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2769.183045][T29201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2769.241400][T29203] loop1: detected capacity change from 0 to 140 [ 2769.250883][T29203] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000030000100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:15 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{r1, r2+60000000}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r6+10000000}, 0x0) 12:00:15 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:15 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006600000027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040004000b000b000e000c0008000b001c04000008007e100b00d000000008000b0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008810) r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) read(r0, &(0x7f0000000180)=""/60, 0x3c) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 12:00:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:15 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000c00040000000800010001000000080001"], 0x40}}, 0x0) [ 2778.156754][T29210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2778.166974][T29213] loop1: detected capacity change from 0 to 140 [ 2778.175249][T29211] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 2778.183488][T29211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:00:15 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008030000000000000800150002000000080003"], 0x40}}, 0x0) 12:00:15 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000d00040000000800010001000000080001"], 0x40}}, 0x0) [ 2778.198197][T29213] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:15 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008040000000000000800150002000000080003"], 0x40}}, 0x0) [ 2778.293517][T29219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2778.311804][T29220] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 2778.320032][T29220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2778.379750][T29222] loop1: detected capacity change from 0 to 140 [ 2778.392899][T29222] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2778.433113][T29226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:22 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:22 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006600000027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040004000b000b000e000c0008000b001c04000008007e100b00d000000008000b0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008810) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) read(r0, &(0x7f0000000180)=""/60, 0x3c) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 12:00:22 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000e00040000000800010001000000080001"], 0x40}}, 0x0) 12:00:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:22 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008020100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:22 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) (rerun: 64) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{r1, r2+60000000}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000240)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r6+10000000}, 0x0) 12:00:22 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508001100040000000800010001000000080001"], 0x40}}, 0x0) 12:00:22 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:22 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008030100000000000800150002000000080003"], 0x40}}, 0x0) [ 2785.364696][T29235] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 2785.372972][T29235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2785.383911][T29237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2785.398769][T29238] loop1: detected capacity change from 0 to 140 12:00:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x86c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2785.415165][T29238] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:22 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508001200040000000800010001000000080001"], 0x40}}, 0x0) 12:00:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008040100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:23 executing program 5: pselect6(0x40, &(0x7f0000000080)={0x0, 0xfff, 0x2e, 0x3, 0x0, 0x2, 0xffffffff, 0x20}, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) [ 2785.521767][T29247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2785.563420][T29250] loop1: detected capacity change from 0 to 140 [ 2785.575839][T29250] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2785.611774][T29253] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 2785.648177][T29256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:30 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0/../file0\x00') write(r0, &(0x7f0000000600)="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", 0x200) unlink(&(0x7f0000000000)='./file0\x00') sendfile(r0, r1, 0x0, 0xef85) 12:00:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508005f00040000000800010001000000080001"], 0x40}}, 0x0) 12:00:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:30 executing program 5: pselect6(0x0, 0x0, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x100000000, 0x7bf4, 0x6d, 0x400, 0xfffffffffffff70c}, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008050100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:30 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{r1, r2+60000000}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000240)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r6+10000000}, 0x0) 12:00:30 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000200040000000800010001000000080001"], 0x40}}, 0x0) 12:00:30 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x10000, 0x6, 0x9, 0x100000000, 0x5, 0x9, 0x3}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008060100000000000800150002000000080003"], 0x40}}, 0x0) [ 2792.566528][T29263] loop1: detected capacity change from 0 to 140 [ 2792.574351][T29264] netlink: 'syz-executor.3': attribute type 95 has an invalid length. [ 2792.582671][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2792.594548][T29263] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2792.595054][T29265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:30 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r3, r4+60000000}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:00:30 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008070100000000000800150002000000080003"], 0x40}}, 0x0) [ 2792.730544][T29273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2792.751757][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2792.762346][T29276] loop1: detected capacity change from 0 to 140 [ 2792.774503][T29276] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2792.861085][T29280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:37 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) (async) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0/../file0\x00') (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) unlink(&(0x7f0000000000)='./file0\x00') (async) sendfile(r0, r1, 0x0, 0xef85) 12:00:37 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000400040000000800010001000000080001"], 0x40}}, 0x0) 12:00:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008090100000000000800150002000000080003"], 0x40}}, 0x0) 12:00:37 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r3, r4+60000000}}, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:00:37 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) [ 2799.678874][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2799.689381][T29291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2799.706408][T29290] loop1: detected capacity change from 0 to 140 12:00:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000500040000000800010001000000080001"], 0x40}}, 0x0) 12:00:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000300000000000800150002000000080003"], 0x40}}, 0x0) 12:00:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x87c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2799.720497][T29290] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:37 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000600040000000800010001000000080001"], 0x40}}, 0x0) 12:00:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008005f00000000000800150002000000080003"], 0x40}}, 0x0) [ 2799.864063][T29304] loop1: detected capacity change from 0 to 140 [ 2799.876294][T29304] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2799.886123][T29306] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2799.902162][T29307] netlink: 'syz-executor.4': attribute type 95 has an invalid length. 12:00:46 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async, rerun: 32) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0/../file0\x00') (async) write(r0, &(0x7f0000000600)="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", 0x200) (async, rerun: 64) unlink(&(0x7f0000000000)='./file0\x00') (async, rerun: 64) sendfile(r0, r1, 0x0, 0xef85) 12:00:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000700040000000800010001000000080001"], 0x40}}, 0x0) 12:00:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000300000000000800150002000000080003"], 0x40}}, 0x0) 12:00:46 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:46 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r3, r4+60000000}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:00:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000800000000000800150002000000080003"], 0x40}}, 0x0) 12:00:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000800040000000800010001000000080001"], 0x40}}, 0x0) 12:00:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2808.965825][T29318] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 2808.974465][T29320] loop1: detected capacity change from 0 to 140 [ 2808.986334][T29320] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008005f00000000000800150002000000080003"], 0x40}}, 0x0) 12:00:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000900040000000800010001000000080001"], 0x40}}, 0x0) [ 2809.084749][T29324] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 2809.095778][T29325] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 12:00:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2809.127449][T29327] loop1: detected capacity change from 0 to 140 [ 2809.136731][T29327] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2809.196050][T29330] netlink: 'syz-executor.4': attribute type 95 has an invalid length. [ 2809.216605][T29331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2809.272385][T29333] loop1: detected capacity change from 0 to 140 [ 2809.281752][T29333] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:53 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x21, 0x80080) sendfile(r2, r1, 0x0, 0x100000001) 12:00:53 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000003000000000800150002000000080003"], 0x40}}, 0x0) 12:00:53 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000a00040000000800010001000000080001"], 0x40}}, 0x0) 12:00:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x88c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:53 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 12:00:53 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 12:00:53 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000102000000000800150002000000080003"], 0x40}}, 0x0) 12:00:53 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000b00040000000800010001000000080001"], 0x40}}, 0x0) 12:00:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:00:53 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000103000000000800150002000000080003"], 0x40}}, 0x0) [ 2816.181107][T29343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.191748][T29344] loop1: detected capacity change from 0 to 140 [ 2816.203761][T29344] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:00:53 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000c00040000000800010001000000080001"], 0x40}}, 0x0) [ 2816.271709][T29348] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2816.280020][T29348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:00:53 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000104000000000800150002000000080003"], 0x40}}, 0x0) [ 2816.382908][T29353] loop1: detected capacity change from 0 to 140 [ 2816.392616][T29354] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 2816.400820][T29354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.410536][T29353] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000105000000000800150002000000080003"], 0x40}}, 0x0) 12:01:00 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x21, 0x80080) sendfile(r2, r1, 0x0, 0x100000001) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x21, 0x80080) (async) sendfile(r2, r1, 0x0, 0x100000001) (async) 12:01:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000d00040000000800010001000000080001"], 0x40}}, 0x0) 12:01:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:00 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 12:01:00 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) 12:01:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000106000000000800150002000000080003"], 0x40}}, 0x0) 12:01:00 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) 12:01:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000e00040000000800010001000000080001"], 0x40}}, 0x0) 12:01:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2823.344842][T29367] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 2823.353064][T29367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2823.363798][T29363] loop1: detected capacity change from 0 to 140 [ 2823.373654][T29363] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000107000000000800150002000000080003"], 0x40}}, 0x0) 12:01:00 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) [ 2823.483584][T29375] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 2823.491798][T29375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2823.553375][T29379] loop1: detected capacity change from 0 to 140 [ 2823.565791][T29379] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:10 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x21, 0x80080) sendfile(r2, r1, 0x0, 0x100000001) 12:01:10 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508001000040000000800010001000000080001"], 0x40}}, 0x0) 12:01:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000109000000000800150002000000080003"], 0x40}}, 0x0) 12:01:10 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={0x0}) 12:01:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x89c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:10 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x4, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 12:01:10 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={0x0}) 12:01:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100030000000800150002000000080003"], 0x40}}, 0x0) 12:01:10 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508001100040000000800010001000000080001"], 0x40}}, 0x0) 12:01:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2832.667755][T29392] loop1: detected capacity change from 0 to 140 [ 2832.674737][T29391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2832.681255][T29392] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100050000000800150002000000080003"], 0x40}}, 0x0) 12:01:10 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={0x0}) [ 2832.827595][T29404] loop1: detected capacity change from 0 to 140 [ 2832.841176][T29404] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:19 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000000)) 12:01:19 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508001200040000000800010001000000080001"], 0x40}}, 0x0) 12:01:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8a40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100060000000800150002000000080003"], 0x40}}, 0x0) 12:01:19 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:01:19 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000200000000000000000000000000000007f0000000000000001000080000000000000008000000000000000000700000040000000f02f0000ffffffff000000000500000000000000080000000000000009000000000000002800"/144]) dup2(r2, r3) renameat(r0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 12:01:19 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:01:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100070000000800150002000000080003"], 0x40}}, 0x0) 12:01:19 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508005f00040000000800010001000000080001"], 0x40}}, 0x0) 12:01:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8a80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2841.926078][T29415] loop1: detected capacity change from 0 to 140 [ 2841.933079][T29419] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 2841.946549][T29415] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:19 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:01:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100090000000800150002000000080003"], 0x40}}, 0x0) [ 2842.072882][T29427] netlink: 'syz-executor.3': attribute type 95 has an invalid length. [ 2842.081119][T29427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2842.131399][T29430] loop1: detected capacity change from 0 to 140 [ 2842.143711][T29430] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:19 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) (async) timer_gettime(r0, &(0x7f0000000000)) (async) 12:01:19 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000350000000000800010001000000080001"], 0x40}}, 0x0) 12:01:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001c00e0000000800150002000000080003"], 0x40}}, 0x0) 12:01:19 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001"], 0x40}}, 0x0) [ 2842.356603][T29440] loop1: detected capacity change from 0 to 140 [ 2842.365402][T29441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2842.375559][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2842.386032][T29440] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:28 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "d3ae7cc641a055b2c24afac953a789deca5099097f56130d32febb9a6cc00a5455144453e1f3546b231aee32f91824be1306f5811e497ccef42073b4fc8ac56a1c0ebf87fb38e7f39501765f6d27b5714b0df81be6f88e65c980f14bfdea063fe9b2c9bdf7e768529d40dcff4ad4301fbe1711de5f67a09206d5011d1d60fc3a723a5b67b78c9d2848852c9ee04f449f1b0f91b33ad5eaad466610e9cd4a4ca293b9f24bf183274a5242305734e96014b1b8e241e4ee3740d6bea6c21d958e1ef62dae0fe9de82ab4f822f90082f2acd8f31bc3c5d6c2b0c932cc32e962cf931296d311bec7cbf3c1b4fde4dc694bcf9c92eb17f3a2ebc80e9c05d0d4649b7f264b134a2a7d99a73138886ea9cf6d34c35eea0121e9195705ebce9b368bf09907af8bd0faccc0ba7bea8eaad7735995f8b885687517626be0f6166fcf3b095ba2f8b29461a8983d684bfd7b93721fc15aa86ff54c0f11263e5925696c182434ef83e229ce7bbbd61a2cabd1891748243871de50b95edf88eaaa45cd635da280a769dbd70799d46a548b87958ff703bc4f5c135160cf3086ece5eaacf27a3b6e41c6682bfe7a4153d1c7a6f9b3d1db1014e79b848064fdda9142f9f586b4aa64fe94c4994bae4beb8cba9bd60d9f4372384aa0e65cc97eb29b9f08881754f5786e3af94f751b67e5c1dcff80d90c966c4c7c6b2756c8f7607d44c7265ae5770ad8f1fde2df22d58594708f5ee2cc75d57c4dd8db370c41740a7f22204570072fdc22a885a1c576b078ad8635aab0312df7b48db7d27ce95d4ff0b5301c8907c89f2761d09909bf97d00e0e0bac24333a4cb8d5b06d4e93e22e5f0b94f2b5c81d0c4274c40f516a4d4aedf5caa3e4b610e9f9248a1f2fac8ef5f5e6529d99bc9d757cb71c7ffea581ca899d755ee59993b116c1edcbaf66c3bc5bc6c76e3c4da58d3b448314ef3e79e6f45bd18f7dc1401f1148169b87609debe0ec56d85445c9bb31737b02f6fa27aeaf02fe92d9c696566fa2aa9fc5a76c58ecdc7dbc1d62ea95edf11c5f16ac033afe68f69d1b9ee73957563cecc3c63c4c32db8c658dd6bf97eb912a4f993d9c84905a3a64f0e6b22657160c21c2a6d2f18edca1383bbe6548473ec7791f37067c2d7822a3482cd012f7f66e6c74863ff334d07fa86a5353b4dac63c7f9e70ab124de581a95848a46b8a4f557374d1ce33e5eed260379369856ff2f02e06f5c51aa6bda5645fea8b7be64396bd28a8602909893c46a47dcdb065da2f56efea28798490bdc5f73fa5460ae53c33d25a8687d0f95ca068414c8c73bb339653dccf0fb9d76a398e0da85ded20909236157cc31c6db7f9a3a2b0d4013b0692476d7aba97b2757e20887e4b89823cd9d28fd4c1f47c764c455a7e002246ba3464300bf7e0825c64cfc9a236a93f61db8fad98e915ab5b60d879d0ada18354a72e279803e32c9f6e30adeba73360219f3d73deef8e95d0ff1f65d546eae061ba6dbe339d9d64ea407bbdf6aff92d8b80e7c1c2a584b58f7798b08b1b1c377b89c45a580cf2c5a97c3ec69fd02ff22cf576feedffd964306710531196596d1e88490a763eb344c1aee61d1fb75e4b3a0c7f8af0343cd703256b8fc6be147bf56c23d9210daf4f23ec87c275724e1dacac403d3a192ec4ad36ddcfdedca7db7e35f37a3a9485dca570e3929e05622428722a460b2e1b4eca20019b09fac2b12ff1fc73506ac8d711acafb49cba089b5a264ec65370a0fa500f2abe0dfb02a6022b7f644a6e5f69db5be5e91b84d21002599b37ec67cea7f098b26546ed8b3c545119f9848d34f72ac9221898f1f5b81eec17cc0388f04a04f3b40a591d1aae73189965127de27d28aab5b5bc34f995702761da07206a0b10f7a35643d491057ca23ceb0cc10e7b52ab168ff9d27149144f4000a68ae88f3b3742fe6e7b615a31c63313838e5a13d9314dd27968ac658ee13f2bfbf51b647d0d5d4b6556e615b4593386072dac6f7a4b424b92bea472d879e263dc65ee2ee79e4fdb8740388a9d3b1cfb5f77feb06e057f722b591c0d5ee307b1ae1073684ced145d27fdf862523f67ff50b1dbc0b32a0a8d06f03e696e489a5c9c69e4051db61a6d74f28427f23a00673fe8015eb0574edff408d03ed9d48605ec1b67bc0a33ad22658f4005b666266a47963f28e17e966ac3340e2bce8a6696cca0fafcf0de7be2fcaa3cfc5a56498286ab3b65b8257c2245e2af477855986e2706ea58b97e0533c5ee7ba3d9e4577dd1f7b2c67fd0c1559cfd1402e10c4fc5d4126c69dc2b24f73d9b65d5e04266e81499b777ed6bd52e9591eb82e97f3a01f312142b02e897232964591e1ffc9f62c98969f5a4e8bb43fb5e8461a6ac2b063b8bd33be712fbdd66aef61ffcacc44a60cf2b979b2654dfabb73255700439faeb28ec3f278e68810884b63a95a7ed8df051553507330a24047649326ed1ba58239d88dee62ea9d14b1b7c23c59221bb6a4ba907f1a5788fefb31020d432774a806eacbe859e171dacabe44e74dd4eb0aa71f80d3cedd63b27d7b36877e0ac318852e50948e319a05595f53e1dbafdb6f185780c999083089cf5358722992cad0327958b74e2d37a1d5888a172f7b9e2dc8660b5b49f5710c897fe8dfd751c43d5909fa36f22460833182968540af5d453191997330e43bde9235374b2080e6a6104e3bc6ba1762e4bb0305eab72d45c7fd58f4cd5c89e535812f9c94571c6a69333947afd484f0f289c640113e39727d739f735e6fda2f5bfe7e81a5f3cad7ac5494e56ceee14c35b1d01742bb317bd79353cb5707560e1f9b4ea451bd4d3e9830bb5d242648e6f8aea9bfd8ba257c175dffd031a387a3c9fef9e449db7f60e11586a909631810fc0183dad6be12dc6b28f1f1ab405004266c8b933318c8eecd11dda44ea413afe39203a0597efd00ce364139823537010a083ff5376b8178a20d59a95b2b40df7fb112d27c132f06c85047645e2c3b2d782fd976285f90da60e34427af951c1cca0089da4e423df53ea14c98122058d194c4143f7e2ba91c2755e160a65aef14068161faddafb9a85059c7aabe1d7c3cc00fb07b8a443e10b536a3e48badafc6431d3b6c3ad9cffa89e460a045bbeaddbfc3c9f550d53a96b4a43a3d3510be4d08115bdd85cc624c2148cb13bc2941cba5536afeaf355b51acf9d604fae07988a4642c30a31bb479d62ed015acafdb879ce0f5c32a9a6b8934d591be4261605d0eb860f8af161f256cd4ce005b6fb012cb7027dbdb195dc08ff9ebe46991c8618d72cf34eeb2f0a7f4e3652d177e4754f747252a8e75237f39a6c42f9c6cd34bb3c1cb7c4f5a86381c5c9ed8c3b3b43edbb1b41f15a487d70cb21b30be409d15f83773c0c3fc4b9a827f6417f68df9ce99453611585805567a6df2e12643ba5e2af317f51b2d0719357fd5aaf9af8b78e459dad4246f7989dac9b27ff8ec551e11499ac7aa06e26cd91c42fe2e811fbb4fc2051b438c9e0c5393de96936a1c6d0f42594e35003380c8453dae6e1a4c9cdf3e48a7fd06b2085c6f8492cdd38c2586a95954b6dd7a234e05eda46184c5af0ad400c187c0851dac0f767fea309fcd1062200601630de8fcd448ef2d1c90bc5c8c3906ec79eecc7a01ba3aee3cbbe6c49b8869960d953554e3c542ebc09fe7fddb1621f23bf088d7b040895460653f03a007fee4b4f13bdd3977f6d323109c4aada61557ceba684da306a83bdbc4b1405e8c8bde2780f2fffea3c7700e44c48283cba7d88ceb18ab5f24b3bc0a3ddd619de5908f5559d48cbba774165e45c4666ae94f609ca6a9278e2931d63a8f0b2af62b56e7537642d9222e11ab3319ce4deac0c2273ae142501d44f2944a9de9bcd99c545d8181ddaea02bf0b6eb3bb0312382d77adf1c5bd5a9a5e4095d2e521e41392657b7ae0362241942b04a104d353724e499f5ee3059f2e97952114a09cc45413b9a56ba0f010cb0bb3ad40e5f90da5870dc3cfac18c37117e00ec6a99cdb86abfd24fc50f1446157764300861392e9a389ff15e422f2be7bf236448444c2a0bb93ca6b4c7b6a8c6ec382fe7011ff86432994f3d25116ef8b95733801e55aaa6552c77f4273d1ca36117ecee8f21673968a53be810ecebe20d593870d13651b8b959c934e0fb108d3c32035e342587c77405b3d5927a51eb43e1eaa9f98632e638a9e7d5c306c567ece58a796abcdf1641fa6e2b82f4f552ec5148491106c1ab84bf72d463c2b4353a7f8d19372ef2eaf5ac63d7fb4aa0815234714a65a449199d0581f952daab549f9394d612acf8155d96d14089cd15a3112e05682196cfffceea7b61c74d9bf018fa71cd99cbd26185c739630ea2e0a3432556421da2e9288e710fbcc206cae580984c894ad8166068c58557227f98d8e34bf0568f0b938351151a14ad471cd04843e91353194ceb9379c1c361d72c27b01cd8fcf86440ff6695a6373af9595e25d5e8f0ddab8eb192ce1b446f29f857929ed3d2b32baad1d0753a713df3b12ecdcdf9206dad4d72aaf449510c903c99e19c974361d52c85ab28f7efb2ccf247be66f186f3a62c473e06635023660c6da3c8a93cb9c8486af4697b612a8197bdc2fb950dcb95d1688410aa8a7fc2e668f244bd6b7bd414837a4a063764b7f11598b07935b0d08d987a3aab2b20e003dc2ad9229f0009d84efdb00c131aabfc264e4548d4b60c57922609ccbeb1e5918e8563985a89726826be06481612aeced1592f6107744124c1a26d8e6b926cacaeeeddc69fa78b113cb71f7489ba4698da882e5b3d8bc62f771c46034a6ea0319622598df2e0985a8886ea34d1c56d87e861852b378cd2bdb0dba29068c4710bd85e113f82bd95154e84e1942a58b53e6fbbc2a6350ce1c6e271c1d47ca069da715132163d6d97b807ae50a91008b45628d2108399635a395e1ffb651d0021c4ab9ff2e710dc9e4c8174b6fb8b8d3f0a6d858fb7395e2102b00f30528b4d1664a516fb6b67441d4d8bc14d448a869050239af6a3f190029c88892d2098b2b5a335f7825a72bbe3b7c64161106e31e647f0c1b5538d5cdf2019496bdb8f080ffee977978f59da77b7db5198dd2f81651bcc0d137dd0897b5d5ed321de4461b32f2005ca79c7abbd5bc2c62467e0463dc04b4283b3d94b9fa16ed3885ffe56cfeaaa098e977dd45bc5fe6298a7cb980a904a91932627beb3fadf50bf4e4273a510ca0eb8c749d976fb4b22eb5f536f8e578c70ab9b895ad4f57e130939b7a9f18e22baac1835409f6517f88bd682c4bd3923b53b466956ba824c8170140ae835db0745aa0c7cfea3599ff4c6339f175a80ea8088e2c4bb6a4fde508ffa6ab485969c0c58626a6508f2d2264aa28f7eff4432720f1cd8159190"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000200000000000000000000000000000007f0000000000000001000080000000000000008000000000000000000700000040000000f02f0000ffffffff000000000500000000000000080000000000000009000000000000002800"/144]) (async) dup2(r2, r3) renameat(r0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') (async) write(r0, &(0x7f0000000600)="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", 0x200) (async, rerun: 64) sendfile(r0, r1, 0x0, 0xef85) (rerun: 64) 12:01:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001d90e0000000800150002000000080003"], 0x40}}, 0x0) 12:01:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000369000000000800010001000000080001"], 0x40}}, 0x0) 12:01:28 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000000)) 12:01:28 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) (async) timer_gettime(r0, &(0x7f0000000000)) 12:01:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010ec00000000800150002000000080003"], 0x40}}, 0x0) 12:01:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300030000000800010001000000080001"], 0x40}}, 0x0) 12:01:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2851.108189][T29462] loop1: detected capacity change from 0 to 140 [ 2851.115616][T29464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2851.127459][T29462] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010ed90000000800150002000000080003"], 0x40}}, 0x0) 12:01:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000302040000000800010001000000080001"], 0x40}}, 0x0) [ 2851.216512][T29475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2851.256380][T29480] loop1: detected capacity change from 0 to 140 12:01:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100400300000800150002000000080003"], 0x40}}, 0x0) [ 2851.269653][T29480] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2851.320421][T29483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:35 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000200000000000000000000000000000007f0000000000000001000080000000000000008000000000000000000700000040000000f02f0000ffffffff000000000500000000000000080000000000000009000000000000002800"/144]) dup2(r2, r3) renameat(r0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "d3ae7cc641a055b2c24afac953a789deca5099097f56130d32febb9a6cc00a5455144453e1f3546b231aee32f91824be1306f5811e497ccef42073b4fc8ac56a1c0ebf87fb38e7f39501765f6d27b5714b0df81be6f88e65c980f14bfdea063fe9b2c9bdf7e768529d40dcff4ad4301fbe1711de5f67a09206d5011d1d60fc3a723a5b67b78c9d2848852c9ee04f449f1b0f91b33ad5eaad466610e9cd4a4ca293b9f24bf183274a5242305734e96014b1b8e241e4ee3740d6bea6c21d958e1ef62dae0fe9de82ab4f822f90082f2acd8f31bc3c5d6c2b0c932cc32e962cf931296d311bec7cbf3c1b4fde4dc694bcf9c92eb17f3a2ebc80e9c05d0d4649b7f264b134a2a7d99a73138886ea9cf6d34c35eea0121e9195705ebce9b368bf09907af8bd0faccc0ba7bea8eaad7735995f8b885687517626be0f6166fcf3b095ba2f8b29461a8983d684bfd7b93721fc15aa86ff54c0f11263e5925696c182434ef83e229ce7bbbd61a2cabd1891748243871de50b95edf88eaaa45cd635da280a769dbd70799d46a548b87958ff703bc4f5c135160cf3086ece5eaacf27a3b6e41c6682bfe7a4153d1c7a6f9b3d1db1014e79b848064fdda9142f9f586b4aa64fe94c4994bae4beb8cba9bd60d9f4372384aa0e65cc97eb29b9f08881754f5786e3af94f751b67e5c1dcff80d90c966c4c7c6b2756c8f7607d44c7265ae5770ad8f1fde2df22d58594708f5ee2cc75d57c4dd8db370c41740a7f22204570072fdc22a885a1c576b078ad8635aab0312df7b48db7d27ce95d4ff0b5301c8907c89f2761d09909bf97d00e0e0bac24333a4cb8d5b06d4e93e22e5f0b94f2b5c81d0c4274c40f516a4d4aedf5caa3e4b610e9f9248a1f2fac8ef5f5e6529d99bc9d757cb71c7ffea581ca899d755ee59993b116c1edcbaf66c3bc5bc6c76e3c4da58d3b448314ef3e79e6f45bd18f7dc1401f1148169b87609debe0ec56d85445c9bb31737b02f6fa27aeaf02fe92d9c696566fa2aa9fc5a76c58ecdc7dbc1d62ea95edf11c5f16ac033afe68f69d1b9ee73957563cecc3c63c4c32db8c658dd6bf97eb912a4f993d9c84905a3a64f0e6b22657160c21c2a6d2f18edca1383bbe6548473ec7791f37067c2d7822a3482cd012f7f66e6c74863ff334d07fa86a5353b4dac63c7f9e70ab124de581a95848a46b8a4f557374d1ce33e5eed260379369856ff2f02e06f5c51aa6bda5645fea8b7be64396bd28a8602909893c46a47dcdb065da2f56efea28798490bdc5f73fa5460ae53c33d25a8687d0f95ca068414c8c73bb339653dccf0fb9d76a398e0da85ded20909236157cc31c6db7f9a3a2b0d4013b0692476d7aba97b2757e20887e4b89823cd9d28fd4c1f47c764c455a7e002246ba3464300bf7e0825c64cfc9a236a93f61db8fad98e915ab5b60d879d0ada18354a72e279803e32c9f6e30adeba73360219f3d73deef8e95d0ff1f65d546eae061ba6dbe339d9d64ea407bbdf6aff92d8b80e7c1c2a584b58f7798b08b1b1c377b89c45a580cf2c5a97c3ec69fd02ff22cf576feedffd964306710531196596d1e88490a763eb344c1aee61d1fb75e4b3a0c7f8af0343cd703256b8fc6be147bf56c23d9210daf4f23ec87c275724e1dacac403d3a192ec4ad36ddcfdedca7db7e35f37a3a9485dca570e3929e05622428722a460b2e1b4eca20019b09fac2b12ff1fc73506ac8d711acafb49cba089b5a264ec65370a0fa500f2abe0dfb02a6022b7f644a6e5f69db5be5e91b84d21002599b37ec67cea7f098b26546ed8b3c545119f9848d34f72ac9221898f1f5b81eec17cc0388f04a04f3b40a591d1aae73189965127de27d28aab5b5bc34f995702761da07206a0b10f7a35643d491057ca23ceb0cc10e7b52ab168ff9d27149144f4000a68ae88f3b3742fe6e7b615a31c63313838e5a13d9314dd27968ac658ee13f2bfbf51b647d0d5d4b6556e615b4593386072dac6f7a4b424b92bea472d879e263dc65ee2ee79e4fdb8740388a9d3b1cfb5f77feb06e057f722b591c0d5ee307b1ae1073684ced145d27fdf862523f67ff50b1dbc0b32a0a8d06f03e696e489a5c9c69e4051db61a6d74f28427f23a00673fe8015eb0574edff408d03ed9d48605ec1b67bc0a33ad22658f4005b666266a47963f28e17e966ac3340e2bce8a6696cca0fafcf0de7be2fcaa3cfc5a56498286ab3b65b8257c2245e2af477855986e2706ea58b97e0533c5ee7ba3d9e4577dd1f7b2c67fd0c1559cfd1402e10c4fc5d4126c69dc2b24f73d9b65d5e04266e81499b777ed6bd52e9591eb82e97f3a01f312142b02e897232964591e1ffc9f62c98969f5a4e8bb43fb5e8461a6ac2b063b8bd33be712fbdd66aef61ffcacc44a60cf2b979b2654dfabb73255700439faeb28ec3f278e68810884b63a95a7ed8df051553507330a24047649326ed1ba58239d88dee62ea9d14b1b7c23c59221bb6a4ba907f1a5788fefb31020d432774a806eacbe859e171dacabe44e74dd4eb0aa71f80d3cedd63b27d7b36877e0ac318852e50948e319a05595f53e1dbafdb6f185780c999083089cf5358722992cad0327958b74e2d37a1d5888a172f7b9e2dc8660b5b49f5710c897fe8dfd751c43d5909fa36f22460833182968540af5d453191997330e43bde9235374b2080e6a6104e3bc6ba1762e4bb0305eab72d45c7fd58f4cd5c89e535812f9c94571c6a69333947afd484f0f289c640113e39727d739f735e6fda2f5bfe7e81a5f3cad7ac5494e56ceee14c35b1d01742bb317bd79353cb5707560e1f9b4ea451bd4d3e9830bb5d242648e6f8aea9bfd8ba257c175dffd031a387a3c9fef9e449db7f60e11586a909631810fc0183dad6be12dc6b28f1f1ab405004266c8b933318c8eecd11dda44ea413afe39203a0597efd00ce364139823537010a083ff5376b8178a20d59a95b2b40df7fb112d27c132f06c85047645e2c3b2d782fd976285f90da60e34427af951c1cca0089da4e423df53ea14c98122058d194c4143f7e2ba91c2755e160a65aef14068161faddafb9a85059c7aabe1d7c3cc00fb07b8a443e10b536a3e48badafc6431d3b6c3ad9cffa89e460a045bbeaddbfc3c9f550d53a96b4a43a3d3510be4d08115bdd85cc624c2148cb13bc2941cba5536afeaf355b51acf9d604fae07988a4642c30a31bb479d62ed015acafdb879ce0f5c32a9a6b8934d591be4261605d0eb860f8af161f256cd4ce005b6fb012cb7027dbdb195dc08ff9ebe46991c8618d72cf34eeb2f0a7f4e3652d177e4754f747252a8e75237f39a6c42f9c6cd34bb3c1cb7c4f5a86381c5c9ed8c3b3b43edbb1b41f15a487d70cb21b30be409d15f83773c0c3fc4b9a827f6417f68df9ce99453611585805567a6df2e12643ba5e2af317f51b2d0719357fd5aaf9af8b78e459dad4246f7989dac9b27ff8ec551e11499ac7aa06e26cd91c42fe2e811fbb4fc2051b438c9e0c5393de96936a1c6d0f42594e35003380c8453dae6e1a4c9cdf3e48a7fd06b2085c6f8492cdd38c2586a95954b6dd7a234e05eda46184c5af0ad400c187c0851dac0f767fea309fcd1062200601630de8fcd448ef2d1c90bc5c8c3906ec79eecc7a01ba3aee3cbbe6c49b8869960d953554e3c542ebc09fe7fddb1621f23bf088d7b040895460653f03a007fee4b4f13bdd3977f6d323109c4aada61557ceba684da306a83bdbc4b1405e8c8bde2780f2fffea3c7700e44c48283cba7d88ceb18ab5f24b3bc0a3ddd619de5908f5559d48cbba774165e45c4666ae94f609ca6a9278e2931d63a8f0b2af62b56e7537642d9222e11ab3319ce4deac0c2273ae142501d44f2944a9de9bcd99c545d8181ddaea02bf0b6eb3bb0312382d77adf1c5bd5a9a5e4095d2e521e41392657b7ae0362241942b04a104d353724e499f5ee3059f2e97952114a09cc45413b9a56ba0f010cb0bb3ad40e5f90da5870dc3cfac18c37117e00ec6a99cdb86abfd24fc50f1446157764300861392e9a389ff15e422f2be7bf236448444c2a0bb93ca6b4c7b6a8c6ec382fe7011ff86432994f3d25116ef8b95733801e55aaa6552c77f4273d1ca36117ecee8f21673968a53be810ecebe20d593870d13651b8b959c934e0fb108d3c32035e342587c77405b3d5927a51eb43e1eaa9f98632e638a9e7d5c306c567ece58a796abcdf1641fa6e2b82f4f552ec5148491106c1ab84bf72d463c2b4353a7f8d19372ef2eaf5ac63d7fb4aa0815234714a65a449199d0581f952daab549f9394d612acf8155d96d14089cd15a3112e05682196cfffceea7b61c74d9bf018fa71cd99cbd26185c739630ea2e0a3432556421da2e9288e710fbcc206cae580984c894ad8166068c58557227f98d8e34bf0568f0b938351151a14ad471cd04843e91353194ceb9379c1c361d72c27b01cd8fcf86440ff6695a6373af9595e25d5e8f0ddab8eb192ce1b446f29f857929ed3d2b32baad1d0753a713df3b12ecdcdf9206dad4d72aaf449510c903c99e19c974361d52c85ab28f7efb2ccf247be66f186f3a62c473e06635023660c6da3c8a93cb9c8486af4697b612a8197bdc2fb950dcb95d1688410aa8a7fc2e668f244bd6b7bd414837a4a063764b7f11598b07935b0d08d987a3aab2b20e003dc2ad9229f0009d84efdb00c131aabfc264e4548d4b60c57922609ccbeb1e5918e8563985a89726826be06481612aeced1592f6107744124c1a26d8e6b926cacaeeeddc69fa78b113cb71f7489ba4698da882e5b3d8bc62f771c46034a6ea0319622598df2e0985a8886ea34d1c56d87e861852b378cd2bdb0dba29068c4710bd85e113f82bd95154e84e1942a58b53e6fbbc2a6350ce1c6e271c1d47ca069da715132163d6d97b807ae50a91008b45628d2108399635a395e1ffb651d0021c4ab9ff2e710dc9e4c8174b6fb8b8d3f0a6d858fb7395e2102b00f30528b4d1664a516fb6b67441d4d8bc14d448a869050239af6a3f190029c88892d2098b2b5a335f7825a72bbe3b7c64161106e31e647f0c1b5538d5cdf2019496bdb8f080ffee977978f59da77b7db5198dd2f81651bcc0d137dd0897b5d5ed321de4461b32f2005ca79c7abbd5bc2c62467e0463dc04b4283b3d94b9fa16ed3885ffe56cfeaaa098e977dd45bc5fe6298a7cb980a904a91932627beb3fadf50bf4e4273a510ca0eb8c749d976fb4b22eb5f536f8e578c70ab9b895ad4f57e130939b7a9f18e22baac1835409f6517f88bd682c4bd3923b53b466956ba824c8170140ae835db0745aa0c7cfea3599ff4c6339f175a80ea8088e2c4bb6a4fde508ffa6ab485969c0c58626a6508f2d2264aa28f7eff4432720f1cd8159190"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYBLOB="0000000000000000200000000000000000000000000000007f0000000000000001000080000000000000008000000000000000000700000040000000f02f0000ffffffff000000000500000000000000080000000000000009000000000000002800"/144]) (async) dup2(r2, r3) (async) renameat(r0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 12:01:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8b80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000303040000000800010001000000080001"], 0x40}}, 0x0) 12:01:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100034000000800150002000000080003"], 0x40}}, 0x0) 12:01:35 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) 12:01:35 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000000)) 12:01:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000001000800150002000000080003"], 0x40}}, 0x0) 12:01:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000304040000000800010001000000080001"], 0x40}}, 0x0) 12:01:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2858.316271][T29495] loop1: detected capacity change from 0 to 140 [ 2858.324095][T29498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2858.339011][T29495] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000002000800150002000000080003"], 0x40}}, 0x0) 12:01:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000305040000000800010001000000080001"], 0x40}}, 0x0) [ 2858.420591][T29504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000003000800150002000000080003"], 0x40}}, 0x0) [ 2858.469043][T29509] loop1: detected capacity change from 0 to 140 [ 2858.480593][T29509] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2858.509659][T29513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:47 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0xef85) 12:01:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000306040000000800010001000000080001"], 0x40}}, 0x0) 12:01:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000004000800150002000000080003"], 0x40}}, 0x0) 12:01:47 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000200)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r6}, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000000)) 12:01:47 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) (async) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) (async) 12:01:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000005000800150002000000080003"], 0x40}}, 0x0) 12:01:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000307040000000800010001000000080001"], 0x40}}, 0x0) 12:01:47 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000006000800150002000000080003"], 0x40}}, 0x0) [ 2869.626406][T29526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2869.636668][T29525] loop1: detected capacity change from 0 to 140 [ 2869.650138][T29525] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:47 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 64) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) (rerun: 32) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) (async) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) 12:01:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000308040000000800010001000000080001"], 0x40}}, 0x0) [ 2869.734168][T29539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2869.821255][T29548] loop1: detected capacity change from 0 to 140 [ 2869.831540][T29548] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2869.849512][T29549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:56 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r2, 0x0, 0xef85) 12:01:56 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r2, r3+10000000}}, &(0x7f0000000200)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x0, @tid=r5}, &(0x7f00000002c0)) 12:01:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000007000800150002000000080003"], 0x40}}, 0x0) 12:01:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:01:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000309040000000800010001000000080001"], 0x40}}, 0x0) 12:01:56 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1b}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f0000000240)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 12:01:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000009000800150002000000080003"], 0x40}}, 0x0) 12:01:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030a040000000800010001000000080001"], 0x40}}, 0x0) 12:01:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2878.878113][T29559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2878.894969][T29563] loop1: detected capacity change from 0 to 140 [ 2878.908490][T29563] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:01:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001ffffff9e000800150002000000080003"], 0x40}}, 0x0) 12:01:56 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030b040000000800010001000000080001"], 0x40}}, 0x0) [ 2878.992216][T29568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000ec0000800150002000000080003"], 0x40}}, 0x0) [ 2879.039365][T29573] loop1: detected capacity change from 0 to 140 [ 2879.051540][T29573] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2879.114416][T29577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:05 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r2, 0x0, 0xef85) (async) 12:02:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030c040000000800010001000000080001"], 0x40}}, 0x0) 12:02:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000ed9000800150002000000080003"], 0x40}}, 0x0) 12:02:05 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r2, r3+10000000}}, &(0x7f0000000200)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:02:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1b}, &(0x7f0000000140)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f0000000240)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 12:02:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030d040000000800010001000000080001"], 0x40}}, 0x0) 12:02:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001ffffffef000800150002000000080003"], 0x40}}, 0x0) 12:02:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async, rerun: 64) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1b}, &(0x7f0000000140)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f0000000240)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 12:02:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2888.165905][T29593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2888.173265][T29601] loop1: detected capacity change from 0 to 140 [ 2888.187260][T29601] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001fffffff0000800150002000000080003"], 0x40}}, 0x0) 12:02:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030e040000000800010001000000080001"], 0x40}}, 0x0) [ 2888.283745][T29614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2888.345279][T29616] loop1: detected capacity change from 0 to 140 [ 2888.362194][T29616] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2888.411955][T29620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800017fffffff000800150002000000080003"], 0x40}}, 0x0) 12:02:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000310040000000800010001000000080001"], 0x40}}, 0x0) 12:02:12 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r2, r3+10000000}}, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) fsmount(r0, 0x0, 0x6) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x2, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500002665ffff018000000800395053303030669e41d6731d79928326bfc0f664817ab9362116682a43c866f0b1390fa381735a9fa8b7824827934dff71af011b855a7d560cbd9d8a963463cae3c33223eb0d287658be53c4e22bada09164b706f67e1203af7d697ba99ed0eb6e4fe91dbe35cb7f7ca3eab5b46911b3e194878fab52b2bca50bf796a35839e5fd5f0dd155c56eacf5c3f1e8442c975c6243894cb3a9186c084f425913c24fd82505105a4e80e861522d84f8b348de6630b02c283e3d2c686bd91958f2cf4db4145cf88e887dddbdffdc32ee6f18b2002e8ae3120f86ca2e93"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x9, 0x7, 0x6, 0x0, 0x6, 0x80, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0xeb}, 0x1844, 0x100000000, 0x7fff, 0x7, 0x1, 0x3, 0x81, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r6, 0x8) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:02:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800019effffff000800150002000000080003"], 0x40}}, 0x0) 12:02:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000311040000000800010001000000080001"], 0x40}}, 0x0) [ 2895.361440][T29628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2895.372837][T29631] loop1: detected capacity change from 0 to 140 [ 2895.385173][T29631] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001efffffff000800150002000000080003"], 0x40}}, 0x0) 12:02:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000312040000000800010001000000080001"], 0x40}}, 0x0) [ 2895.474984][T29638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001f0ffffff000800150002000000080003"], 0x40}}, 0x0) [ 2895.519933][T29640] loop1: detected capacity change from 0 to 140 [ 2895.531924][T29640] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000318040000000800010001000000080001"], 0x40}}, 0x0) [ 2895.594612][T29644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00108}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001100)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x0, r0, 0x3, 0x80000}) dup2(r0, r1) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) r6 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) sendfile(r6, r7, 0x0, 0xef85) 12:02:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100020000000800150002000000080003"], 0x40}}, 0x0) [ 2895.654286][T29647] loop1: detected capacity change from 0 to 140 [ 2895.673570][T29647] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2895.743189][T29652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:13 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r2, r3+10000000}}, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:02:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000325040000000800010001000000080001"], 0x40}}, 0x0) 12:02:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100030000000800150002000000080003"], 0x40}}, 0x0) 12:02:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) (async) fsmount(r0, 0x0, 0x6) (async) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x2, 0xfffffffffffffffc) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500002665ffff018000000800395053303030669e41d6731d79928326bfc0f664817ab9362116682a43c866f0b1390fa381735a9fa8b7824827934dff71af011b855a7d560cbd9d8a963463cae3c33223eb0d287658be53c4e22bada09164b706f67e1203af7d697ba99ed0eb6e4fe91dbe35cb7f7ca3eab5b46911b3e194878fab52b2bca50bf796a35839e5fd5f0dd155c56eacf5c3f1e8442c975c6243894cb3a9186c084f425913c24fd82505105a4e80e861522d84f8b348de6630b02c283e3d2c686bd91958f2cf4db4145cf88e887dddbdffdc32ee6f18b2002e8ae3120f86ca2e93"], 0x15) (async) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[], 0x53) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async, rerun: 64) r6 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) (async, rerun: 32) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x9, 0x7, 0x6, 0x0, 0x6, 0x80, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0xeb}, 0x1844, 0x100000000, 0x7fff, 0x7, 0x1, 0x3, 0x81, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r6, 0x8) (async, rerun: 32) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:02:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100040000000800150002000000080003"], 0x40}}, 0x0) 12:02:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000348040000000800010001000000080001"], 0x40}}, 0x0) 12:02:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2896.226443][T29657] loop1: detected capacity change from 0 to 140 [ 2896.233674][T29659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2896.246170][T29657] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100050000000800150002000000080003"], 0x40}}, 0x0) 12:02:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800034c040000000800010001000000080001"], 0x40}}, 0x0) [ 2896.351533][T29672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2896.361546][T29673] loop1: detected capacity change from 0 to 140 [ 2896.373332][T29673] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2896.474273][T29679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00108}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001100)={r5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x0, r0, 0x3, 0x80000}) (async, rerun: 32) dup2(r0, r1) (async, rerun: 32) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) r6 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) (rerun: 64) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) (async) sendfile(r6, r7, 0x0, 0xef85) 12:02:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100060000000800150002000000080003"], 0x40}}, 0x0) 12:02:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000360040000000800010001000000080001"], 0x40}}, 0x0) 12:02:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) fsmount(r0, 0x0, 0x6) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x2, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500002665ffff018000000800395053303030669e41d6731d79928326bfc0f664817ab9362116682a43c866f0b1390fa381735a9fa8b7824827934dff71af011b855a7d560cbd9d8a963463cae3c33223eb0d287658be53c4e22bada09164b706f67e1203af7d697ba99ed0eb6e4fe91dbe35cb7f7ca3eab5b46911b3e194878fab52b2bca50bf796a35839e5fd5f0dd155c56eacf5c3f1e8442c975c6243894cb3a9186c084f425913c24fd82505105a4e80e861522d84f8b348de6630b02c283e3d2c686bd91958f2cf4db4145cf88e887dddbdffdc32ee6f18b2002e8ae3120f86ca2e93"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x9, 0x7, 0x6, 0x0, 0x6, 0x80, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0xeb}, 0x1844, 0x100000000, 0x7fff, 0x7, 0x1, 0x3, 0x81, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r6, 0x8) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) dup2(r0, r1) (async) fsmount(r0, 0x0, 0x6) (async) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x2, 0xfffffffffffffffc) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500002665ffff018000000800395053303030669e41d6731d79928326bfc0f664817ab9362116682a43c866f0b1390fa381735a9fa8b7824827934dff71af011b855a7d560cbd9d8a963463cae3c33223eb0d287658be53c4e22bada09164b706f67e1203af7d697ba99ed0eb6e4fe91dbe35cb7f7ca3eab5b46911b3e194878fab52b2bca50bf796a35839e5fd5f0dd155c56eacf5c3f1e8442c975c6243894cb3a9186c084f425913c24fd82505105a4e80e861522d84f8b348de6630b02c283e3d2c686bd91958f2cf4db4145cf88e887dddbdffdc32ee6f18b2002e8ae3120f86ca2e93"], 0x15) (async) dup(r4) (async) write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) dup2(0xffffffffffffffff, r6) (async) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x9, 0x7, 0x6, 0x0, 0x6, 0x80, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0xeb}, 0x1844, 0x100000000, 0x7fff, 0x7, 0x1, 0x3, 0x81, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r6, 0x8) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) 12:02:20 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r2, r3+10000000}}, &(0x7f0000000200)) 12:02:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100070000000800150002000000080003"], 0x40}}, 0x0) 12:02:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000368040000000800010001000000080001"], 0x40}}, 0x0) 12:02:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2902.783572][T29686] loop1: detected capacity change from 0 to 140 [ 2902.797167][T29686] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2902.797202][T29690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:20 executing program 0: timer_create(0x1, &(0x7f0000066000)={0x0, 0x40, 0x0, @thr={&(0x7f0000000200)="df66b228279b483bb2f66505ef8f286b47d8b9164dcb5cc070804d8fe4abcc3d2106054bf4aa93433695b7a7fc1afe1fbc336de49de93c73fcda69effb450eb471b49ab6368b7d836828c1acef1e7c61022563b9812dbe54bc0e73bc9562614b5e1ebb0abde00ca7870ebe2c93f7ddb5998740465d69611c654c233ced14", &(0x7f00000002c0)="ccaa0ee7b4b583921e4b3d5ae2d10cd05c57f8571e80eac28b5d6561357cdec118d62e7a3d0f81ff7b48f524fcc57765fcdbb040ada11f84ea92279172a67b84185c45be5776c9cc8dc441c120209a3bd4f902bfe2189dc058"}}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:02:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100090000000800150002000000080003"], 0x40}}, 0x0) 12:02:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800036c040000000800010001000000080001"], 0x40}}, 0x0) [ 2902.921522][T29702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2902.963559][T29705] loop1: detected capacity change from 0 to 140 [ 2902.974737][T29705] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2903.039092][T29711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00108}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001100)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x0, r0, 0x3, 0x80000}) dup2(r0, r1) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) r6 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) sendfile(r6, r7, 0x0, 0xef85) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) dup2(r2, r3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00108}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001100)={r5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x0, r0, 0x3, 0x80000}) (async) dup2(r0, r1) (async) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) (async) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) write(r6, &(0x7f0000000600)="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", 0x200) (async) sendfile(r6, r7, 0x0, 0xef85) (async) 12:02:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000300000800150002000000080003"], 0x40}}, 0x0) 12:02:27 executing program 0: timer_create(0x1, &(0x7f0000066000)={0x0, 0x40, 0x0, @thr={&(0x7f0000000200)="df66b228279b483bb2f66505ef8f286b47d8b9164dcb5cc070804d8fe4abcc3d2106054bf4aa93433695b7a7fc1afe1fbc336de49de93c73fcda69effb450eb471b49ab6368b7d836828c1acef1e7c61022563b9812dbe54bc0e73bc9562614b5e1ebb0abde00ca7870ebe2c93f7ddb5998740465d69611c654c233ced14", &(0x7f00000002c0)="ccaa0ee7b4b583921e4b3d5ae2d10cd05c57f8571e80eac28b5d6561357cdec118d62e7a3d0f81ff7b48f524fcc57765fcdbb040ada11f84ea92279172a67b84185c45be5776c9cc8dc441c120209a3bd4f902bfe2189dc058"}}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 32) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:02:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000374040000000800010001000000080001"], 0x40}}, 0x0) 12:02:27 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000000080)) 12:02:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000500000800150002000000080003"], 0x40}}, 0x0) 12:02:27 executing program 0: timer_create(0x1, &(0x7f0000066000)={0x0, 0x40, 0x0, @thr={&(0x7f0000000200)="df66b228279b483bb2f66505ef8f286b47d8b9164dcb5cc070804d8fe4abcc3d2106054bf4aa93433695b7a7fc1afe1fbc336de49de93c73fcda69effb450eb471b49ab6368b7d836828c1acef1e7c61022563b9812dbe54bc0e73bc9562614b5e1ebb0abde00ca7870ebe2c93f7ddb5998740465d69611c654c233ced14", &(0x7f00000002c0)="ccaa0ee7b4b583921e4b3d5ae2d10cd05c57f8571e80eac28b5d6561357cdec118d62e7a3d0f81ff7b48f524fcc57765fcdbb040ada11f84ea92279172a67b84185c45be5776c9cc8dc441c120209a3bd4f902bfe2189dc058"}}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x1, &(0x7f0000066000)={0x0, 0x40, 0x0, @thr={&(0x7f0000000200)="df66b228279b483bb2f66505ef8f286b47d8b9164dcb5cc070804d8fe4abcc3d2106054bf4aa93433695b7a7fc1afe1fbc336de49de93c73fcda69effb450eb471b49ab6368b7d836828c1acef1e7c61022563b9812dbe54bc0e73bc9562614b5e1ebb0abde00ca7870ebe2c93f7ddb5998740465d69611c654c233ced14", &(0x7f00000002c0)="ccaa0ee7b4b583921e4b3d5ae2d10cd05c57f8571e80eac28b5d6561357cdec118d62e7a3d0f81ff7b48f524fcc57765fcdbb040ada11f84ea92279172a67b84185c45be5776c9cc8dc441c120209a3bd4f902bfe2189dc058"}}, &(0x7f00009b1ffc)) (async) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) 12:02:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800037a040000000800010001000000080001"], 0x40}}, 0x0) 12:02:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2909.927842][T29721] loop1: detected capacity change from 0 to 140 [ 2909.935318][T29723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2909.948979][T29721] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000600000800150002000000080003"], 0x40}}, 0x0) 12:02:27 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2910.057321][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2910.112389][T29734] loop1: detected capacity change from 0 to 140 [ 2910.125009][T29734] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:36 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) truncate(&(0x7f0000000000)='./file0\x00', 0x9ad) sendfile(r0, r1, 0x0, 0xef85) 12:02:36 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300050000000800010001000000080001"], 0x40}}, 0x0) 12:02:36 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000700000800150002000000080003"], 0x40}}, 0x0) 12:02:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:36 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:02:36 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:02:36 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000900000800150002000000080003"], 0x40}}, 0x0) 12:02:36 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300060000000800010001000000080001"], 0x40}}, 0x0) 12:02:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:36 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100c00e00000800150002000000080003"], 0x40}}, 0x0) [ 2919.384105][T29750] loop1: detected capacity change from 0 to 140 [ 2919.401481][T29753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2919.411115][T29750] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:36 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300070000000800010001000000080001"], 0x40}}, 0x0) [ 2919.495719][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100d90e00000800150002000000080003"], 0x40}}, 0x0) [ 2919.544365][T29764] loop1: detected capacity change from 0 to 140 [ 2919.557011][T29764] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2919.594436][T29766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:46 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) truncate(&(0x7f0000000000)='./file0\x00', 0x9ad) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x9ad) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 12:02:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300090000000800010001000000080001"], 0x40}}, 0x0) 12:02:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000ec000000800150002000000080003"], 0x40}}, 0x0) 12:02:46 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:02:46 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:02:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000ed900000800150002000000080003"], 0x40}}, 0x0) 12:02:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000a0000000800010001000000080001"], 0x40}}, 0x0) 12:02:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2928.672417][T29779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2928.677595][T29776] loop1: detected capacity change from 0 to 140 [ 2928.696045][T29776] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100004003000800150002000000080003"], 0x40}}, 0x0) 12:02:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000b0000000800010001000000080001"], 0x40}}, 0x0) [ 2928.789066][T29784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000340000800150002000000080003"], 0x40}}, 0x0) [ 2928.856572][T29788] loop1: detected capacity change from 0 to 140 [ 2928.868563][T29788] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2928.906551][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:02:55 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) truncate(&(0x7f0000000000)='./file0\x00', 0x9ad) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x9ad) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 12:02:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:02:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000c0000000800010001000000080001"], 0x40}}, 0x0) 12:02:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000010800150002000000080003"], 0x40}}, 0x0) 12:02:55 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:02:55 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = socket(0x11, 0x6, 0x2) timer_create(0x6, &(0x7f0000000440)={0x0, 0x0, 0x4, @thr={&(0x7f00000002c0)="c9f6508677899f86514a68fd3840eb4b8477d9b158055fe28ee3b986f50aab61c994f21b5bb0b4f4c666df4fd93e9583252d83329a613432949d6b0ec7523c1668e8193cf731688a517ffc36c5b195b0a1c409f47427b40e5240db6ecc8db5c01af7f7d4222e5def135d7b181d6dc5e6ffda1ee0daa9469a64f0733058fb37198bb371a84e22dcdf1525a0a87fb872ccdc1ca0f0607868a865c6ca1a8eb470c0f44a5fea7cb5bd364e4b14dd3652ab298dfa1e82cfbb565f", &(0x7f0000000380)="87342b2101e46aeb03bec312e971708576f820f5c1379c5ae829c31e23cd98d803116d30095d96346a77b6631fe67998f9d9a70c01917112041ef683fe71f2affc35a6f8bb757ef6920330bb4d6ca4982ba35b5f7b2a4be8418de05a5bab57aea1605556c1d60e0fd43f128d813da3a6bae80132192d6144dce73f57762c5ac241908f86e0b4070fc0aac30d07b0b7adf9b1cd1fc905e3f6ac5bfe175102c52679fe"}}, &(0x7f0000000480)=0x0) mq_timedsend(r2, &(0x7f00000007c0)="b5bcc71c363fe7391d932294754b37f3de7c8e3176709fec086ca14de57fb2c8a65f1e81b5d28322e211fe6b5cee7c05f29e237b3ec05d7f3f49f550ee8e790701b7015d7f89bd11c5a228d6d971d2d48b143365dc5aa295b6b8664fe15c3087532dfe343e1aaf3b4f288748910e1e02b46436890b5d1f30afa6971cf38c87c767fd221e82e3a814646b98847078767ab912282103ea6d93ff20ccb879bfc121c86d6354ef475b27fffcdca4214b5acf9c4185b0340bb387784d95b928ecce5ccd2819ab00aff3e73155de6d157ca68e5fbf906c79", 0xd5, 0xf88, &(0x7f00000008c0)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {r6, r7+10000000}}, &(0x7f0000000540)) timer_create(0x6, &(0x7f0000000740)={0x0, 0xfff, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000900)) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1111}, {r2, 0x104}, {0xffffffffffffffff, 0x200}, {r3, 0x434}, {r4}, {r8, 0x110}, {0xffffffffffffffff, 0x6101}], 0x7, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) 12:02:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000020800150002000000080003"], 0x40}}, 0x0) 12:02:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000d0000000800010001000000080001"], 0x40}}, 0x0) 12:02:55 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:02:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2938.023238][T29803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2938.042010][T29806] loop1: detected capacity change from 0 to 140 [ 2938.054112][T29806] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:02:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000030800150002000000080003"], 0x40}}, 0x0) 12:02:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000e0000000800010001000000080001"], 0x40}}, 0x0) [ 2938.155707][T29811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2938.213181][T29816] loop1: detected capacity change from 0 to 140 [ 2938.223079][T29816] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2938.262207][T29819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:04 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 12:03:04 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000040800150002000000080003"], 0x40}}, 0x0) 12:03:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:04 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300110000000800010001000000080001"], 0x40}}, 0x0) 12:03:04 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:04 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = socket(0x11, 0x6, 0x2) (async) timer_create(0x6, &(0x7f0000000440)={0x0, 0x0, 0x4, @thr={&(0x7f00000002c0)="c9f6508677899f86514a68fd3840eb4b8477d9b158055fe28ee3b986f50aab61c994f21b5bb0b4f4c666df4fd93e9583252d83329a613432949d6b0ec7523c1668e8193cf731688a517ffc36c5b195b0a1c409f47427b40e5240db6ecc8db5c01af7f7d4222e5def135d7b181d6dc5e6ffda1ee0daa9469a64f0733058fb37198bb371a84e22dcdf1525a0a87fb872ccdc1ca0f0607868a865c6ca1a8eb470c0f44a5fea7cb5bd364e4b14dd3652ab298dfa1e82cfbb565f", &(0x7f0000000380)="87342b2101e46aeb03bec312e971708576f820f5c1379c5ae829c31e23cd98d803116d30095d96346a77b6631fe67998f9d9a70c01917112041ef683fe71f2affc35a6f8bb757ef6920330bb4d6ca4982ba35b5f7b2a4be8418de05a5bab57aea1605556c1d60e0fd43f128d813da3a6bae80132192d6144dce73f57762c5ac241908f86e0b4070fc0aac30d07b0b7adf9b1cd1fc905e3f6ac5bfe175102c52679fe"}}, &(0x7f0000000480)=0x0) (async, rerun: 64) mq_timedsend(r2, &(0x7f00000007c0)="b5bcc71c363fe7391d932294754b37f3de7c8e3176709fec086ca14de57fb2c8a65f1e81b5d28322e211fe6b5cee7c05f29e237b3ec05d7f3f49f550ee8e790701b7015d7f89bd11c5a228d6d971d2d48b143365dc5aa295b6b8664fe15c3087532dfe343e1aaf3b4f288748910e1e02b46436890b5d1f30afa6971cf38c87c767fd221e82e3a814646b98847078767ab912282103ea6d93ff20ccb879bfc121c86d6354ef475b27fffcdca4214b5acf9c4185b0340bb387784d95b928ecce5ccd2819ab00aff3e73155de6d157ca68e5fbf906c79", 0xd5, 0xf88, &(0x7f00000008c0)={0x0, 0x3938700}) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {r6, r7+10000000}}, &(0x7f0000000540)) (async, rerun: 64) timer_create(0x6, &(0x7f0000000740)={0x0, 0xfff, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000900)) (async, rerun: 64) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1111}, {r2, 0x104}, {0xffffffffffffffff, 0x200}, {r3, 0x434}, {r4}, {r8, 0x110}, {0xffffffffffffffff, 0x6101}], 0x7, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) 12:03:04 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300120000000800010001000000080001"], 0x40}}, 0x0) 12:03:04 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000050800150002000000080003"], 0x40}}, 0x0) 12:03:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2947.283064][T29826] loop1: detected capacity change from 0 to 140 [ 2947.283118][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2947.302646][T29826] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:04 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000060800150002000000080003"], 0x40}}, 0x0) 12:03:04 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300020000000800010001000000080001"], 0x40}}, 0x0) [ 2947.401072][T29837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:04 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000070800150002000000080003"], 0x40}}, 0x0) [ 2947.455368][T29840] loop1: detected capacity change from 0 to 140 [ 2947.464971][T29840] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2947.525609][T29843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:11 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) (async) 12:03:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x91c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300030000000800010001000000080001"], 0x40}}, 0x0) 12:03:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000090800150002000000080003"], 0x40}}, 0x0) 12:03:11 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 32) r4 = socket(0x11, 0x6, 0x2) (async, rerun: 32) timer_create(0x6, &(0x7f0000000440)={0x0, 0x0, 0x4, @thr={&(0x7f00000002c0)="c9f6508677899f86514a68fd3840eb4b8477d9b158055fe28ee3b986f50aab61c994f21b5bb0b4f4c666df4fd93e9583252d83329a613432949d6b0ec7523c1668e8193cf731688a517ffc36c5b195b0a1c409f47427b40e5240db6ecc8db5c01af7f7d4222e5def135d7b181d6dc5e6ffda1ee0daa9469a64f0733058fb37198bb371a84e22dcdf1525a0a87fb872ccdc1ca0f0607868a865c6ca1a8eb470c0f44a5fea7cb5bd364e4b14dd3652ab298dfa1e82cfbb565f", &(0x7f0000000380)="87342b2101e46aeb03bec312e971708576f820f5c1379c5ae829c31e23cd98d803116d30095d96346a77b6631fe67998f9d9a70c01917112041ef683fe71f2affc35a6f8bb757ef6920330bb4d6ca4982ba35b5f7b2a4be8418de05a5bab57aea1605556c1d60e0fd43f128d813da3a6bae80132192d6144dce73f57762c5ac241908f86e0b4070fc0aac30d07b0b7adf9b1cd1fc905e3f6ac5bfe175102c52679fe"}}, &(0x7f0000000480)=0x0) (async) mq_timedsend(r2, &(0x7f00000007c0)="b5bcc71c363fe7391d932294754b37f3de7c8e3176709fec086ca14de57fb2c8a65f1e81b5d28322e211fe6b5cee7c05f29e237b3ec05d7f3f49f550ee8e790701b7015d7f89bd11c5a228d6d971d2d48b143365dc5aa295b6b8664fe15c3087532dfe343e1aaf3b4f288748910e1e02b46436890b5d1f30afa6971cf38c87c767fd221e82e3a814646b98847078767ab912282103ea6d93ff20ccb879bfc121c86d6354ef475b27fffcdca4214b5acf9c4185b0340bb387784d95b928ecce5ccd2819ab00aff3e73155de6d157ca68e5fbf906c79", 0xd5, 0xf88, &(0x7f00000008c0)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {r6, r7+10000000}}, &(0x7f0000000540)) (async) timer_create(0x6, &(0x7f0000000740)={0x0, 0xfff, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000900)) (async) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1111}, {r2, 0x104}, {0xffffffffffffffff, 0x200}, {r3, 0x434}, {r4}, {r8, 0x110}, {0xffffffffffffffff, 0x6101}], 0x7, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) 12:03:11 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100ffffff9e0800150002000000080003"], 0x40}}, 0x0) 12:03:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300050000000800010001000000080001"], 0x40}}, 0x0) 12:03:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000ec00800150002000000080003"], 0x40}}, 0x0) 12:03:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2954.412211][T29857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2954.422594][T29853] loop1: detected capacity change from 0 to 140 [ 2954.435765][T29853] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:11 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300060000000800010001000000080001"], 0x40}}, 0x0) 12:03:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000ed90800150002000000080003"], 0x40}}, 0x0) [ 2954.493197][T29864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2954.566631][T29868] loop1: detected capacity change from 0 to 140 [ 2954.578029][T29868] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2954.603443][T29871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100ffffffef0800150002000000080003"], 0x40}}, 0x0) 12:03:21 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300070000000800010001000000080001"], 0x40}}, 0x0) 12:03:21 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async, rerun: 32) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (rerun: 32) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async, rerun: 32) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) (rerun: 32) 12:03:21 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="de50cd87a5b053952259d369368592db476169063041bdcf51f3c540a4cc69bab5a86cca05270d", &(0x7f00000001c0)="8a215512ea5d4cda129b85412bf99f8cc098587a333917edebd4401d8fd4f79a9439f50536b8222fa087d24d6957596fc7234c478a980df180be4e717223b06b18efa71ede4c3739e0eb02f5124a1ce56b8182ef2e5e1829795b3e975f8eefbee788afddfcd48a626f4a17e898d6aa173ec0b6de9c99d1a693cc2f01552e293d42a0daa5dd7ea135a9fa9333d4cd7eaa329317"}}, &(0x7f00000002c0)=0x0) timer_gettime(r0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000440)={0x0, 0x22, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000540)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000580)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}}, &(0x7f0000000500)) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}}, 0x0) 12:03:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100fffffff00800150002000000080003"], 0x40}}, 0x0) 12:03:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300080000000800010001000000080001"], 0x40}}, 0x0) 12:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2963.590838][T29889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2963.600896][T29887] loop1: detected capacity change from 0 to 140 [ 2963.612466][T29887] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001007fffffff0800150002000000080003"], 0x40}}, 0x0) 12:03:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300090000000800010001000000080001"], 0x40}}, 0x0) [ 2963.699065][T29893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001009effffff0800150002000000080003"], 0x40}}, 0x0) 12:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x92c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2963.769213][T29898] loop1: detected capacity change from 0 to 140 [ 2963.778720][T29898] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2963.801406][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2963.921803][T29903] loop1: detected capacity change from 0 to 140 [ 2963.930904][T29903] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:28 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r2, r3) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="bd0d1c79ee478479c170dda5fa73d813de15bbaae7941b208ade81aaae51901d12dbe5381f8baa3a79eddca700c555ca157d292884321c211c8c8206245db70a0c02bb6a6465acb560c699c353e98872e02ceac7e46d9685c52bcab95d2f9af676e9f71745bfb47be3b0e69ec0a4e5184ed7445700745d8d6439e405aca19446d4862d4be12fb38e570d16ce7cb9ea2de7c1ae2fb0b9fd9bf0408b94842eb7f936dbf8c0f139c6f52848c8093d2cec6c9bf49158e09c4d11d29ef08cfbcb866bbdf400416709162d7ec3", 0xca}], 0x1, 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:03:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100efffffff0800150002000000080003"], 0x40}}, 0x0) 12:03:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000a0000000800010001000000080001"], 0x40}}, 0x0) 12:03:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:28 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:28 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="de50cd87a5b053952259d369368592db476169063041bdcf51f3c540a4cc69bab5a86cca05270d", &(0x7f00000001c0)="8a215512ea5d4cda129b85412bf99f8cc098587a333917edebd4401d8fd4f79a9439f50536b8222fa087d24d6957596fc7234c478a980df180be4e717223b06b18efa71ede4c3739e0eb02f5124a1ce56b8182ef2e5e1829795b3e975f8eefbee788afddfcd48a626f4a17e898d6aa173ec0b6de9c99d1a693cc2f01552e293d42a0daa5dd7ea135a9fa9333d4cd7eaa329317"}}, &(0x7f00000002c0)=0x0) timer_gettime(r0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000440)={0x0, 0x22, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000540)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000580)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_create(0x4, &(0x7f0000000380)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}}, &(0x7f0000000500)) (async) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}}, 0x0) 12:03:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100f0ffffff0800150002000000080003"], 0x40}}, 0x0) 12:03:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000b0000000800010001000000080001"], 0x40}}, 0x0) 12:03:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000100150002000000080003"], 0x40}}, 0x0) [ 2970.735300][T29912] loop1: detected capacity change from 0 to 140 [ 2970.743338][T29916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2970.755224][T29912] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:28 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000c0000000800010001000000080001"], 0x40}}, 0x0) [ 2970.844721][T29921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:28 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000400150002000000080003"], 0x40}}, 0x0) [ 2970.896366][T29924] loop1: detected capacity change from 0 to 140 [ 2970.906001][T29924] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2970.916325][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2970.970874][T29927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2971.034491][T29929] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 12:03:35 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r2, r3) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="bd0d1c79ee478479c170dda5fa73d813de15bbaae7941b208ade81aaae51901d12dbe5381f8baa3a79eddca700c555ca157d292884321c211c8c8206245db70a0c02bb6a6465acb560c699c353e98872e02ceac7e46d9685c52bcab95d2f9af676e9f71745bfb47be3b0e69ec0a4e5184ed7445700745d8d6439e405aca19446d4862d4be12fb38e570d16ce7cb9ea2de7c1ae2fb0b9fd9bf0408b94842eb7f936dbf8c0f139c6f52848c8093d2cec6c9bf49158e09c4d11d29ef08cfbcb866bbdf400416709162d7ec3", 0xca}], 0x1, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:03:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:35 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="de50cd87a5b053952259d369368592db476169063041bdcf51f3c540a4cc69bab5a86cca05270d", &(0x7f00000001c0)="8a215512ea5d4cda129b85412bf99f8cc098587a333917edebd4401d8fd4f79a9439f50536b8222fa087d24d6957596fc7234c478a980df180be4e717223b06b18efa71ede4c3739e0eb02f5124a1ce56b8182ef2e5e1829795b3e975f8eefbee788afddfcd48a626f4a17e898d6aa173ec0b6de9c99d1a693cc2f01552e293d42a0daa5dd7ea135a9fa9333d4cd7eaa329317"}}, &(0x7f00000002c0)=0x0) timer_gettime(r0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000440)={0x0, 0x22, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000540)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000580)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_create(0x4, &(0x7f0000000380)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}}, &(0x7f0000000500)) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}}, 0x0) 12:03:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000d0000000800010001000000080001"], 0x40}}, 0x0) 12:03:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000200000800150002000000080003"], 0x40}}, 0x0) 12:03:35 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000300000800150002000000080003"], 0x40}}, 0x0) 12:03:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000e0000000800010001000000080001"], 0x40}}, 0x0) 12:03:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x93c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2977.913358][T29939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2977.929218][T29942] loop1: detected capacity change from 0 to 140 [ 2977.938532][T29942] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000400000800150002000000080003"], 0x40}}, 0x0) 12:03:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300100000000800010001000000080001"], 0x40}}, 0x0) [ 2978.014505][T29945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2978.064663][T29948] loop1: detected capacity change from 0 to 140 [ 2978.073938][T29948] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000500000800150002000000080003"], 0x40}}, 0x0) [ 2978.129690][T29952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:44 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r2, r3) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="bd0d1c79ee478479c170dda5fa73d813de15bbaae7941b208ade81aaae51901d12dbe5381f8baa3a79eddca700c555ca157d292884321c211c8c8206245db70a0c02bb6a6465acb560c699c353e98872e02ceac7e46d9685c52bcab95d2f9af676e9f71745bfb47be3b0e69ec0a4e5184ed7445700745d8d6439e405aca19446d4862d4be12fb38e570d16ce7cb9ea2de7c1ae2fb0b9fd9bf0408b94842eb7f936dbf8c0f139c6f52848c8093d2cec6c9bf49158e09c4d11d29ef08cfbcb866bbdf400416709162d7ec3", 0xca}], 0x1, 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) dup2(r2, r3) (async) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="bd0d1c79ee478479c170dda5fa73d813de15bbaae7941b208ade81aaae51901d12dbe5381f8baa3a79eddca700c555ca157d292884321c211c8c8206245db70a0c02bb6a6465acb560c699c353e98872e02ceac7e46d9685c52bcab95d2f9af676e9f71745bfb47be3b0e69ec0a4e5184ed7445700745d8d6439e405aca19446d4862d4be12fb38e570d16ce7cb9ea2de7c1ae2fb0b9fd9bf0408b94842eb7f936dbf8c0f139c6f52848c8093d2cec6c9bf49158e09c4d11d29ef08cfbcb866bbdf400416709162d7ec3", 0xca}], 0x1, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) 12:03:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300110000000800010001000000080001"], 0x40}}, 0x0) 12:03:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000600000800150002000000080003"], 0x40}}, 0x0) 12:03:44 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:44 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x1}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:03:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000700000800150002000000080003"], 0x40}}, 0x0) 12:03:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300120000000800010001000000080001"], 0x40}}, 0x0) 12:03:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000900000800150002000000080003"], 0x40}}, 0x0) [ 2987.099478][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2987.115558][T29966] loop1: detected capacity change from 0 to 140 [ 2987.128375][T29966] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300005000000800010001000000080001"], 0x40}}, 0x0) [ 2987.223321][T29972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000003000800150002000000080003"], 0x40}}, 0x0) [ 2987.266125][T29975] loop1: detected capacity change from 0 to 140 [ 2987.275709][T29975] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2987.330218][T29978] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300006900000800010001000000080001"], 0x40}}, 0x0) 12:03:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:03:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000005000800150002000000080003"], 0x40}}, 0x0) 12:03:51 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x1}, &(0x7f0000000100)=0x0) (rerun: 32) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:03:51 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = getgid() mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2004401, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_any}, {@rq={'rq', 0x3d, 0x2}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@common=@version_L}], [{@smackfsroot={'smackfsroot', 0x3d, '\x98]\\'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}]}}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x61}, 0x18) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0xef85) 12:03:51 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:03:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000006000800150002000000080003"], 0x40}}, 0x0) 12:03:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000100010001000000080001"], 0x40}}, 0x0) 12:03:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x94c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2994.251274][T29987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2994.252091][T29989] loop1: detected capacity change from 0 to 140 [ 2994.272770][T29989] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000007000800150002000000080003"], 0x40}}, 0x0) 12:03:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000400010001000000080001"], 0x40}}, 0x0) [ 2994.369936][T29995] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 12:03:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 2994.411464][T29998] loop1: detected capacity change from 0 to 140 [ 2994.422676][T29998] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:03:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000009000800150002000000080003"], 0x40}}, 0x0) 12:03:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040200000800010001000000080001"], 0x40}}, 0x0) [ 2994.470141][T30002] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 12:03:52 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000c00e000800150002000000080003"], 0x40}}, 0x0) [ 2994.527164][T30004] loop1: detected capacity change from 0 to 140 [ 2994.538484][T30004] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 2994.574394][T30008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:04:00 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = getgid() mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2004401, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_any}, {@rq={'rq', 0x3d, 0x2}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@common=@version_L}], [{@smackfsroot={'smackfsroot', 0x3d, '\x98]\\'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}]}}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x61}, 0x18) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0xef85) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) getgid() (async) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2004401, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_any}, {@rq={'rq', 0x3d, 0x2}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@common=@version_L}], [{@smackfsroot={'smackfsroot', 0x3d, '\x98]\\'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}]}}) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x61}, 0x18) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r2, 0x0, 0xef85) (async) 12:04:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040300000800010001000000080001"], 0x40}}, 0x0) 12:04:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000d90e000800150002000000080003"], 0x40}}, 0x0) 12:04:00 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x1}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x1}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 12:04:00 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:00 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040400000800010001000000080001"], 0x40}}, 0x0) 12:04:00 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000ec0000800150002000000080003"], 0x40}}, 0x0) 12:04:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3003.434494][T30018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3003.449034][T30021] loop1: detected capacity change from 0 to 140 [ 3003.461161][T30021] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040500000800010001000000080001"], 0x40}}, 0x0) 12:04:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000ed9000800150002000000080003"], 0x40}}, 0x0) [ 3003.543610][T30029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3003.600085][T30033] loop1: detected capacity change from 0 to 140 [ 3003.613648][T30033] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x95c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3003.643648][T30036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3003.733945][T30039] loop1: detected capacity change from 0 to 140 [ 3003.745010][T30039] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:12 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = getgid() mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2004401, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x5}}, {@common=@access_any}, {@rq={'rq', 0x3d, 0x2}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@common=@version_L}], [{@smackfsroot={'smackfsroot', 0x3d, '\x98]\\'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}]}}) (async, rerun: 32) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x61}, 0x18) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r2, 0x0, 0xef85) 12:04:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000001000150002000000080003"], 0x40}}, 0x0) 12:04:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040600000800010001000000080001"], 0x40}}, 0x0) 12:04:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:12 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000000000)="aa581c81343d3e", &(0x7f0000000080)="d4f76f52e7744f73f8582199f8746eb3f035d2da9642edd19466e306d0309ed546fb"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x1, &(0x7f0000000480)={0x0, 0x1e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x4, &(0x7f0000000240)={0x0, 0xe, 0x1, @thr={&(0x7f00000002c0)="b10e5a26870bc3ac23630a70af59f319de8339e201cb2ea0a9d8a861e7b19e1a4f7da594be797ba89872d51820ebf91f200e20ce9d698d758d92e5b6a586a17d7df2d0aecf5dd023e1e6d720f8054e3559c51b3653b738543ca22964b7e3a8cf9f42ee005653", &(0x7f0000000340)="a6e3337ec3bfdc25af4d6af1b6cc5f7b3dc9a73e9cd909c9041f6a186a459b527ae57170fbe0240169279f2a82f65e747d28e4b650bd86326eb6f92005580e0ac2d0c7b597e5f2bf23ca80eb631dae361d485a43a99f05ed469af19df65277fbcd6b761e1ea417e7418c3752f6d16227b739c371cfac4a4fc4c2987dca9daf903b6e69407ab6beded112572453da070562b3cca058b17f896a5eb9fb5cf9d700cc092922ba4d223a7e8c04581a2343b7fdde51153903c09692f0b0690c2724101e9ea68d692960a0c650ae3bd63f"}}, &(0x7f0000000440)) 12:04:12 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040700000800010001000000080001"], 0x40}}, 0x0) 12:04:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000001800150002000000080003"], 0x40}}, 0x0) 12:04:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3014.721977][T30055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3014.733136][T30057] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3014.742954][T30058] loop1: detected capacity change from 0 to 140 [ 3014.754852][T30058] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040800000800010001000000080001"], 0x40}}, 0x0) 12:04:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000002000150002000000080003"], 0x40}}, 0x0) [ 3014.859872][T30062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3014.878697][T30064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:04:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3014.909269][T30065] loop1: detected capacity change from 0 to 140 [ 3014.922797][T30065] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3014.987273][T30068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3015.004094][T30069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3015.070218][T30071] loop1: detected capacity change from 0 to 140 [ 3015.081488][T30071] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:23 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x111002, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x42242, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x74) write(r0, &(0x7f0000000600)="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", 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) sendfile(r0, r1, 0x0, 0xef85) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={{r3, r4/1000+60000}, {r5, r6/1000+60000}}, 0x100) 12:04:23 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000000000)="aa581c81343d3e", &(0x7f0000000080)="d4f76f52e7744f73f8582199f8746eb3f035d2da9642edd19466e306d0309ed546fb"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x1, &(0x7f0000000480)={0x0, 0x1e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x4, &(0x7f0000000240)={0x0, 0xe, 0x1, @thr={&(0x7f00000002c0)="b10e5a26870bc3ac23630a70af59f319de8339e201cb2ea0a9d8a861e7b19e1a4f7da594be797ba89872d51820ebf91f200e20ce9d698d758d92e5b6a586a17d7df2d0aecf5dd023e1e6d720f8054e3559c51b3653b738543ca22964b7e3a8cf9f42ee005653", &(0x7f0000000340)="a6e3337ec3bfdc25af4d6af1b6cc5f7b3dc9a73e9cd909c9041f6a186a459b527ae57170fbe0240169279f2a82f65e747d28e4b650bd86326eb6f92005580e0ac2d0c7b597e5f2bf23ca80eb631dae361d485a43a99f05ed469af19df65277fbcd6b761e1ea417e7418c3752f6d16227b739c371cfac4a4fc4c2987dca9daf903b6e69407ab6beded112572453da070562b3cca058b17f896a5eb9fb5cf9d700cc092922ba4d223a7e8c04581a2343b7fdde51153903c09692f0b0690c2724101e9ea68d692960a0c650ae3bd63f"}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000000000)="aa581c81343d3e", &(0x7f0000000080)="d4f76f52e7744f73f8582199f8746eb3f035d2da9642edd19466e306d0309ed546fb"}}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) timer_create(0x1, &(0x7f0000000480)={0x0, 0x1e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) (async) timer_create(0x4, &(0x7f0000000240)={0x0, 0xe, 0x1, @thr={&(0x7f00000002c0)="b10e5a26870bc3ac23630a70af59f319de8339e201cb2ea0a9d8a861e7b19e1a4f7da594be797ba89872d51820ebf91f200e20ce9d698d758d92e5b6a586a17d7df2d0aecf5dd023e1e6d720f8054e3559c51b3653b738543ca22964b7e3a8cf9f42ee005653", &(0x7f0000000340)="a6e3337ec3bfdc25af4d6af1b6cc5f7b3dc9a73e9cd909c9041f6a186a459b527ae57170fbe0240169279f2a82f65e747d28e4b650bd86326eb6f92005580e0ac2d0c7b597e5f2bf23ca80eb631dae361d485a43a99f05ed469af19df65277fbcd6b761e1ea417e7418c3752f6d16227b739c371cfac4a4fc4c2987dca9daf903b6e69407ab6beded112572453da070562b3cca058b17f896a5eb9fb5cf9d700cc092922ba4d223a7e8c04581a2343b7fdde51153903c09692f0b0690c2724101e9ea68d692960a0c650ae3bd63f"}}, &(0x7f0000000440)) (async) 12:04:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000002800150002000000080003"], 0x40}}, 0x0) 12:04:23 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040900000800010001000000080001"], 0x40}}, 0x0) 12:04:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x96c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:23 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000003000150002000000080003"], 0x40}}, 0x0) 12:04:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:23 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040a00000800010001000000080001"], 0x40}}, 0x0) [ 3026.181688][T30083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3026.182061][T30082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3026.192100][T30085] loop1: detected capacity change from 0 to 140 [ 3026.212854][T30085] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3026.320309][T30089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3026.343355][T30091] loop1: detected capacity change from 0 to 140 [ 3026.351394][T30092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:04:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000002000800150002000000080003"], 0x40}}, 0x0) 12:04:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000003000800150002000000080003"], 0x40}}, 0x0) [ 3026.363462][T30091] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3026.478677][T30099] loop1: detected capacity change from 0 to 140 [ 3026.490147][T30099] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:32 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x111002, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x42242, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x74) write(r0, &(0x7f0000000600)="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", 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) sendfile(r0, r1, 0x0, 0xef85) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={{r3, r4/1000+60000}, {r5, r6/1000+60000}}, 0x100) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x111002, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x42242, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x74) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) (async) sendfile(r0, r1, 0x0, 0xef85) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) utimensat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={{r3, r4/1000+60000}, {r5, r6/1000+60000}}, 0x100) (async) 12:04:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040b00000800010001000000080001"], 0x40}}, 0x0) 12:04:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000004000800150002000000080003"], 0x40}}, 0x0) 12:04:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:32 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000000000)="aa581c81343d3e", &(0x7f0000000080)="d4f76f52e7744f73f8582199f8746eb3f035d2da9642edd19466e306d0309ed546fb"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x1, &(0x7f0000000480)={0x0, 0x1e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x4, &(0x7f0000000240)={0x0, 0xe, 0x1, @thr={&(0x7f00000002c0)="b10e5a26870bc3ac23630a70af59f319de8339e201cb2ea0a9d8a861e7b19e1a4f7da594be797ba89872d51820ebf91f200e20ce9d698d758d92e5b6a586a17d7df2d0aecf5dd023e1e6d720f8054e3559c51b3653b738543ca22964b7e3a8cf9f42ee005653", &(0x7f0000000340)="a6e3337ec3bfdc25af4d6af1b6cc5f7b3dc9a73e9cd909c9041f6a186a459b527ae57170fbe0240169279f2a82f65e747d28e4b650bd86326eb6f92005580e0ac2d0c7b597e5f2bf23ca80eb631dae361d485a43a99f05ed469af19df65277fbcd6b761e1ea417e7418c3752f6d16227b739c371cfac4a4fc4c2987dca9daf903b6e69407ab6beded112572453da070562b3cca058b17f896a5eb9fb5cf9d700cc092922ba4d223a7e8c04581a2343b7fdde51153903c09692f0b0690c2724101e9ea68d692960a0c650ae3bd63f"}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000000000)="aa581c81343d3e", &(0x7f0000000080)="d4f76f52e7744f73f8582199f8746eb3f035d2da9642edd19466e306d0309ed546fb"}}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) timer_create(0x1, &(0x7f0000000480)={0x0, 0x1e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) (async) timer_create(0x4, &(0x7f0000000240)={0x0, 0xe, 0x1, @thr={&(0x7f00000002c0)="b10e5a26870bc3ac23630a70af59f319de8339e201cb2ea0a9d8a861e7b19e1a4f7da594be797ba89872d51820ebf91f200e20ce9d698d758d92e5b6a586a17d7df2d0aecf5dd023e1e6d720f8054e3559c51b3653b738543ca22964b7e3a8cf9f42ee005653", &(0x7f0000000340)="a6e3337ec3bfdc25af4d6af1b6cc5f7b3dc9a73e9cd909c9041f6a186a459b527ae57170fbe0240169279f2a82f65e747d28e4b650bd86326eb6f92005580e0ac2d0c7b597e5f2bf23ca80eb631dae361d485a43a99f05ed469af19df65277fbcd6b761e1ea417e7418c3752f6d16227b739c371cfac4a4fc4c2987dca9daf903b6e69407ab6beded112572453da070562b3cca058b17f896a5eb9fb5cf9d700cc092922ba4d223a7e8c04581a2343b7fdde51153903c09692f0b0690c2724101e9ea68d692960a0c650ae3bd63f"}}, &(0x7f0000000440)) (async) 12:04:32 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000005000800150002000000080003"], 0x40}}, 0x0) 12:04:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040c00000800010001000000080001"], 0x40}}, 0x0) 12:04:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3035.455931][T30113] loop1: detected capacity change from 0 to 140 [ 3035.462745][T30112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3035.474434][T30113] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000006000800150002000000080003"], 0x40}}, 0x0) 12:04:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040d00000800010001000000080001"], 0x40}}, 0x0) 12:04:33 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200), &(0x7f0000000240)) timer_settime(r1, 0x1, &(0x7f00000002c0), &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r4, r5+10000000}}, &(0x7f00000003c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x4, &(0x7f0000000000)) [ 3035.572860][T30119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3035.606497][T30126] loop1: detected capacity change from 0 to 140 [ 3035.619683][T30126] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3035.677138][T30130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:04:42 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async, rerun: 64) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x111002, 0x0) (rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x42242, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x74) (async) write(r0, &(0x7f0000000600)="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", 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) (async) sendfile(r0, r1, 0x0, 0xef85) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={{r3, r4/1000+60000}, {r5, r6/1000+60000}}, 0x100) 12:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000007000800150002000000080003"], 0x40}}, 0x0) 12:04:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040e00000800010001000000080001"], 0x40}}, 0x0) 12:04:42 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) timer_create(0x2, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200), &(0x7f0000000240)) timer_settime(r1, 0x1, &(0x7f00000002c0), &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r4, r5+10000000}}, &(0x7f00000003c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) clock_gettime(0x4, &(0x7f0000000000)) 12:04:42 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000009000800150002000000080003"], 0x40}}, 0x0) 12:04:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300041000000800010001000000080001"], 0x40}}, 0x0) 12:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3044.834587][T30144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3044.838366][T30146] loop1: detected capacity change from 0 to 140 [ 3044.855895][T30146] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300041100000800010001000000080001"], 0x40}}, 0x0) 12:04:42 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000030800150002000000080003"], 0x40}}, 0x0) 12:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3044.958398][T30150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3044.982664][T30153] loop1: detected capacity change from 0 to 140 [ 3044.997121][T30153] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3045.070998][T30157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3045.127163][T30159] loop1: detected capacity change from 0 to 140 [ 3045.138417][T30159] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:51 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000000)='./file0\x00', 0xc0800, 0x45) 12:04:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000050800150002000000080003"], 0x40}}, 0x0) 12:04:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300041200000800010001000000080001"], 0x40}}, 0x0) 12:04:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x98c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:51 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200), &(0x7f0000000240)) (async) timer_settime(r1, 0x1, &(0x7f00000002c0), &(0x7f0000000300)) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r4, r5+10000000}}, &(0x7f00000003c0)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 12:04:51 executing program 5: timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300041800000800010001000000080001"], 0x40}}, 0x0) 12:04:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000060800150002000000080003"], 0x40}}, 0x0) 12:04:51 executing program 5: timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) [ 3054.093111][T30169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3054.114716][T30172] loop1: detected capacity change from 0 to 140 [ 3054.129184][T30172] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000070800150002000000080003"], 0x40}}, 0x0) 12:04:51 executing program 5: timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) [ 3054.206365][T30176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3054.308559][T30182] loop1: detected capacity change from 0 to 140 [ 3054.318008][T30182] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000000)='./file0\x00', 0xc0800, 0x45) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) open(&(0x7f0000000000)='./file0\x00', 0xc0800, 0x45) (async) 12:04:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300042500000800010001000000080001"], 0x40}}, 0x0) 12:04:58 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:04:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000090800150002000000080003"], 0x40}}, 0x0) 12:04:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:04:58 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xf, 0x2}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:04:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000c00e0800150002000000080003"], 0x40}}, 0x0) 12:04:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300044800000800010001000000080001"], 0x40}}, 0x0) 12:04:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3061.280329][T30191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3061.296355][T30192] loop1: detected capacity change from 0 to 140 [ 3061.309565][T30192] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:04:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000d90e0800150002000000080003"], 0x40}}, 0x0) 12:04:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300044c00000800010001000000080001"], 0x40}}, 0x0) 12:04:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000ec00800150002000000080003"], 0x40}}, 0x0) [ 3061.424613][T30200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3061.447172][T30202] loop1: detected capacity change from 0 to 140 [ 3061.456858][T30202] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3061.531633][T30205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:05:10 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) open(&(0x7f0000000000)='./file0\x00', 0xc0800, 0x45) 12:05:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x99c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:10 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300046000000800010001000000080001"], 0x40}}, 0x0) 12:05:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000ed90800150002000000080003"], 0x40}}, 0x0) 12:05:10 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xf, 0x2}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:05:10 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000020800150002000000080003"], 0x40}}, 0x0) 12:05:10 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300046800000800010001000000080001"], 0x40}}, 0x0) 12:05:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3072.752575][T30216] loop1: detected capacity change from 0 to 140 [ 3072.762271][T30217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3072.774262][T30216] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:10 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000030800150002000000080003"], 0x40}}, 0x0) 12:05:10 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300046c00000800010001000000080001"], 0x40}}, 0x0) 12:05:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3072.870813][T30228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3072.891140][T30229] loop1: detected capacity change from 0 to 140 [ 3072.901926][T30229] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3072.963399][T30233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.047157][T30235] loop1: detected capacity change from 0 to 140 [ 3073.058756][T30235] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:21 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd9a, @private2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x45}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb364}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8036}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @loopback, 0x7f}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x800, @empty, 0x2c11fd6e}}, {0x20, 0x2, @in6={0xa, 0x3, 0xfbe4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040884}, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000ef85) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/59, 0x3b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r2, 0xb976c000) 12:05:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000040800150002000000080003"], 0x40}}, 0x0) 12:05:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300047400000800010001000000080001"], 0x40}}, 0x0) 12:05:21 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xf, 0x2}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 12:05:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9a80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:21 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000050800150002000000080003"], 0x40}}, 0x0) 12:05:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300047a00000800010001000000080001"], 0x40}}, 0x0) 12:05:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9ac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3084.086879][T30245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3084.097273][T30246] loop1: detected capacity change from 0 to 140 [ 3084.110355][T30246] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:21 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000060800150002000000080003"], 0x40}}, 0x0) 12:05:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040003000800010001000000080001"], 0x40}}, 0x0) [ 3084.210932][T30253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3084.238546][T30254] loop1: detected capacity change from 0 to 140 12:05:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3084.255404][T30254] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3084.319768][T30258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3084.379964][T30260] loop1: detected capacity change from 0 to 140 [ 3084.391175][T30260] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:32 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd9a, @private2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x45}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb364}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8036}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @loopback, 0x7f}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x800, @empty, 0x2c11fd6e}}, {0x20, 0x2, @in6={0xa, 0x3, 0xfbe4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040884}, 0x10) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000ef85) (async) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/59, 0x3b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r2, 0xb976c000) 12:05:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000070800150002000000080003"], 0x40}}, 0x0) 12:05:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040005000800010001000000080001"], 0x40}}, 0x0) 12:05:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:32 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:32 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r7, r8+60000000}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_ro(r10, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) 12:05:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000090800150002000000080003"], 0x40}}, 0x0) 12:05:32 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040006000800010001000000080001"], 0x40}}, 0x0) 12:05:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9b80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3095.440329][T30270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3095.450277][T30269] loop1: detected capacity change from 0 to 140 [ 3095.463240][T30269] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000001800150002000000080003"], 0x40}}, 0x0) 12:05:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040007000800010001000000080001"], 0x40}}, 0x0) [ 3095.555606][T30275] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:05:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000002000150002000000080003"], 0x40}}, 0x0) [ 3095.625941][T30279] loop1: detected capacity change from 0 to 140 [ 3095.635486][T30279] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3095.648900][T30280] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.686369][T30282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3095.755270][T30284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:05:40 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd9a, @private2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x45}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb364}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8036}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @loopback, 0x7f}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x800, @empty, 0x2c11fd6e}}, {0x20, 0x2, @in6={0xa, 0x3, 0xfbe4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040884}, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async, rerun: 32) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000ef85) (rerun: 32) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/59, 0x3b) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r2, 0xb976c000) 12:05:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9bc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040009000800010001000000080001"], 0x40}}, 0x0) 12:05:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000002800150002000000080003"], 0x40}}, 0x0) 12:05:40 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) (async) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r7, r8+60000000}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_ro(r10, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) 12:05:40 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000a000800010001000000080001"], 0x40}}, 0x0) 12:05:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000003000150002000000080003"], 0x40}}, 0x0) 12:05:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3102.639213][T30294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3102.641075][T30298] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3102.658900][T30297] loop1: detected capacity change from 0 to 140 [ 3102.670748][T30297] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000b000800010001000000080001"], 0x40}}, 0x0) 12:05:40 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000400150002000000080003"], 0x40}}, 0x0) [ 3102.735850][T30300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3102.772778][T30302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:05:40 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000c000800010001000000080001"], 0x40}}, 0x0) [ 3102.809119][T30304] loop1: detected capacity change from 0 to 140 [ 3102.818540][T30304] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3102.844381][T30306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3102.886768][T30308] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3102.952250][T30310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:05:49 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) creat(&(0x7f0000000000)='./file0\x00', 0x13c) 12:05:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000001000150002000000080003"], 0x40}}, 0x0) 12:05:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000d000800010001000000080001"], 0x40}}, 0x0) 12:05:49 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r7, r8+60000000}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_ro(r10, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) (async) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f0000000440)) (async) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r7, r8+60000000}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff}}, './file0\x00'}) (async) openat$cgroup_ro(r10, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) (async) 12:05:49 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000001800150002000000080003"], 0x40}}, 0x0) 12:05:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000e000800010001000000080001"], 0x40}}, 0x0) 12:05:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9c80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3111.831332][T30317] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 3111.841421][T30320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3111.851453][T30321] loop1: detected capacity change from 0 to 140 [ 3111.865232][T30321] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004b50e000800010001000000080001"], 0x40}}, 0x0) 12:05:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000002800150002000000080003"], 0x40}}, 0x0) [ 3111.937188][T30325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3111.948164][T30326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:05:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9cc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3112.033109][T30330] loop1: detected capacity change from 0 to 140 [ 3112.042601][T30330] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3112.055600][T30331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3112.067311][T30332] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3112.164026][T30334] loop1: detected capacity change from 0 to 140 [ 3112.174982][T30334] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:58 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000600)="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", 0x200) (rerun: 64) sendfile(r0, r1, 0x0, 0xef85) (async, rerun: 64) creat(&(0x7f0000000000)='./file0\x00', 0x13c) (rerun: 64) 12:05:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004c00e000800010001000000080001"], 0x40}}, 0x0) 12:05:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000003000150002000000080003"], 0x40}}, 0x0) 12:05:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:05:58 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000000), &(0x7f0000000080)) 12:05:58 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:05:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040011000800010001000000080001"], 0x40}}, 0x0) 12:05:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000802150002000000080003"], 0x40}}, 0x0) 12:05:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3121.033682][T30341] loop1: detected capacity change from 0 to 140 [ 3121.044280][T30342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3121.055257][T30343] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3121.066694][T30341] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:05:58 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000803150002000000080003"], 0x40}}, 0x0) 12:05:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040012000800010001000000080001"], 0x40}}, 0x0) [ 3121.167204][T30349] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3121.179908][T30350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:05:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9d80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3121.207408][T30352] loop1: detected capacity change from 0 to 140 [ 3121.221251][T30352] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3121.296423][T30355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3121.309949][T30356] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3121.359024][T30358] loop1: detected capacity change from 0 to 140 [ 3121.370818][T30358] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:07 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) creat(&(0x7f0000000000)='./file0\x00', 0x13c) 12:06:07 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040018000800010001000000080001"], 0x40}}, 0x0) 12:06:07 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000804150002000000080003"], 0x40}}, 0x0) 12:06:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9dc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:07 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000000), &(0x7f0000000080)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000000), &(0x7f0000000080)) (async) 12:06:07 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:07 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000805150002000000080003"], 0x40}}, 0x0) 12:06:07 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040020000800010001000000080001"], 0x40}}, 0x0) 12:06:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3130.444646][T30369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3130.461057][T30370] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3130.471350][T30371] loop1: detected capacity change from 0 to 140 [ 3130.484672][T30371] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:08 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000806150002000000080003"], 0x40}}, 0x0) 12:06:08 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040025000800010001000000080001"], 0x40}}, 0x0) [ 3130.562265][T30375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3130.579750][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:08 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040048000800010001000000080001"], 0x40}}, 0x0) [ 3130.630134][T30378] loop1: detected capacity change from 0 to 140 [ 3130.642145][T30378] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3130.651938][T30380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3130.693026][T30385] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3130.754659][T30387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000807150002000000080003"], 0x40}}, 0x0) 12:06:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004004c000800010001000000080001"], 0x40}}, 0x0) 12:06:17 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000000), &(0x7f0000000080)) 12:06:17 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x11c, r2, 0x605, 0x0, 0x0, {0x2, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\b\xbc\x90;\xa8F\xcd3\xb86e_qS\x02\x00\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x9aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x11c}, 0x1, 0xf000000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r2, 0x210, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x200008c1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef85) 12:06:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000809150002000000080003"], 0x40}}, 0x0) 12:06:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040060000800010001000000080001"], 0x40}}, 0x0) 12:06:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9e80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3139.696478][T30401] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3139.697174][T30404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3139.716597][T30406] loop1: detected capacity change from 0 to 140 [ 3139.728329][T30406] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008005f0002000000080003"], 0x40}}, 0x0) [ 3139.806727][T30408] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:06:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040068000800010001000000080001"], 0x40}}, 0x0) 12:06:17 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) [ 3139.847711][T30411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3139.869321][T30412] loop1: detected capacity change from 0 to 140 [ 3139.880426][T30412] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9ec0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008005f0002000000080003"], 0x40}}, 0x0) 12:06:17 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004006c000800010001000000080001"], 0x40}}, 0x0) [ 3139.942688][T30414] netlink: 'syz-executor.4': attribute type 95 has an invalid length. [ 3139.980751][T30416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3140.035121][T30421] loop1: detected capacity change from 0 to 140 [ 3140.045159][T30421] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3140.069050][T30422] netlink: 'syz-executor.4': attribute type 95 has an invalid length. [ 3140.109900][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3140.175831][T30426] loop1: detected capacity change from 0 to 140 [ 3140.186743][T30426] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:20 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x11c, r2, 0x605, 0x0, 0x0, {0x2, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\b\xbc\x90;\xa8F\xcd3\xb86e_qS\x02\x00\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x9aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x11c}, 0x1, 0xf000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r2, 0x210, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x200008c1) (async, rerun: 32) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (rerun: 32) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) 12:06:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150202000000080003"], 0x40}}, 0x0) 12:06:26 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040074000800010001000000080001"], 0x40}}, 0x0) 12:06:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:26 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) 12:06:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150302000000080003"], 0x40}}, 0x0) 12:06:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:26 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004007a000800010001000000080001"], 0x40}}, 0x0) 12:06:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3148.951370][T30437] loop1: detected capacity change from 0 to 140 [ 3148.962330][T30443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3148.973128][T30437] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150402000000080003"], 0x40}}, 0x0) 12:06:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) [ 3149.102240][T30450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3149.112785][T30451] loop1: detected capacity change from 0 to 140 [ 3149.124743][T30451] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x11c, r2, 0x605, 0x0, 0x0, {0x2, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\b\xbc\x90;\xa8F\xcd3\xb86e_qS\x02\x00\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x9aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x11c}, 0x1, 0xf000000}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r2, 0x210, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x200008c1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) 12:06:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040eb5000800010001000000080001"], 0x40}}, 0x0) 12:06:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9fc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150502000000080003"], 0x40}}, 0x0) 12:06:35 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) 12:06:35 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040ec0000800010001000000080001"], 0x40}}, 0x0) 12:06:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150602000000080003"], 0x40}}, 0x0) 12:06:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3158.234530][T30464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3158.250603][T30466] loop1: detected capacity change from 0 to 140 [ 3158.264814][T30466] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:35 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000b00010001000000080001"], 0x40}}, 0x0) 12:06:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150702000000080003"], 0x40}}, 0x0) [ 3158.335289][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3158.396600][T30476] loop1: detected capacity change from 0 to 140 [ 3158.409084][T30476] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3158.451998][T30480] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3158.460217][T30480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3158.501793][T30482] loop1: detected capacity change from 0 to 140 [ 3158.514624][T30482] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:44 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) 12:06:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150902000000080003"], 0x40}}, 0x0) 12:06:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000c00010001000000080001"], 0x40}}, 0x0) 12:06:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa080, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:44 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:44 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x3a, 0x1, @thr={&(0x7f00000001c0)="f6da37d237ad6b466ba117c42ad3bd0872443523ec300da7ebf1fb18a0edcd02bfb36ba292dc0ac864b034930ab3b0a46d6f5112ddf52c8cafbe1d1a6c4ac3779a81ec023b3a16dac4ea0e1f41989f3c7d06c578d84d1b27133fd8ba649d74f033459e68e9831477eb74afe6d966fcfc0f9e18f34bccfaefde3df92459a56247119651a0cf9f5a3d63eadb1f7bdb", &(0x7f00000002c0)="483dd14fe77c6013d78c0c8a57a7a66fcc508d026949934379d759b6fcb9bb21da9af516a36e4bf7a878d8081946ac42b620f584b7e3c1aa9f4957716891394767c7b57d88c938f7602f0334ae9455c585f0e5e2b2bb26db077244862b4e83fc71319399f02f3ba059b555554295b31c294ee5042c9ce3485a1bf3fc141a7d4f7feb2d605d370daeb5904036f8fea8261861aa9a7766aa19e4f72cc65d30315f8f25b4bf6ea6576f195903f45d34ec431495a1f04d7e8434a39f8d627d1b6f8b574765be667b430426e7"}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0xc220}, {0xffffffffffffffff, 0xa00}, {0xffffffffffffffff, 0x580}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x40a}, {r3}, {0xffffffffffffffff, 0x200}, {r5, 0x200}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0xcb9]}, 0x8) 12:06:44 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000010003"], 0x40}}, 0x0) 12:06:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000002000010001000000080001"], 0x40}}, 0x0) 12:06:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa0c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3167.456676][T30491] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3167.462703][T30489] loop1: detected capacity change from 0 to 140 [ 3167.464812][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3167.480023][T30489] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000040003"], 0x40}}, 0x0) 12:06:45 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000002800010001000000080001"], 0x40}}, 0x0) [ 3167.566571][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3167.584127][T30497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3167.592290][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa100, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3167.649266][T30500] loop1: detected capacity change from 0 to 140 [ 3167.663723][T30500] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3167.709912][T30503] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 3167.727424][T30504] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3167.788882][T30506] loop1: detected capacity change from 0 to 140 [ 3167.799815][T30506] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:51 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) 12:06:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002020000080003"], 0x40}}, 0x0) 12:06:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000002900010001000000080001"], 0x40}}, 0x0) 12:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa140, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:51 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x3a, 0x1, @thr={&(0x7f00000001c0)="f6da37d237ad6b466ba117c42ad3bd0872443523ec300da7ebf1fb18a0edcd02bfb36ba292dc0ac864b034930ab3b0a46d6f5112ddf52c8cafbe1d1a6c4ac3779a81ec023b3a16dac4ea0e1f41989f3c7d06c578d84d1b27133fd8ba649d74f033459e68e9831477eb74afe6d966fcfc0f9e18f34bccfaefde3df92459a56247119651a0cf9f5a3d63eadb1f7bdb", &(0x7f00000002c0)="483dd14fe77c6013d78c0c8a57a7a66fcc508d026949934379d759b6fcb9bb21da9af516a36e4bf7a878d8081946ac42b620f584b7e3c1aa9f4957716891394767c7b57d88c938f7602f0334ae9455c585f0e5e2b2bb26db077244862b4e83fc71319399f02f3ba059b555554295b31c294ee5042c9ce3485a1bf3fc141a7d4f7feb2d605d370daeb5904036f8fea8261861aa9a7766aa19e4f72cc65d30315f8f25b4bf6ea6576f195903f45d34ec431495a1f04d7e8434a39f8d627d1b6f8b574765be667b430426e7"}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0xc220}, {0xffffffffffffffff, 0xa00}, {0xffffffffffffffff, 0x580}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x40a}, {r3}, {0xffffffffffffffff, 0x200}, {r5, 0x200}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0xcb9]}, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x3a, 0x1, @thr={&(0x7f00000001c0)="f6da37d237ad6b466ba117c42ad3bd0872443523ec300da7ebf1fb18a0edcd02bfb36ba292dc0ac864b034930ab3b0a46d6f5112ddf52c8cafbe1d1a6c4ac3779a81ec023b3a16dac4ea0e1f41989f3c7d06c578d84d1b27133fd8ba649d74f033459e68e9831477eb74afe6d966fcfc0f9e18f34bccfaefde3df92459a56247119651a0cf9f5a3d63eadb1f7bdb", &(0x7f00000002c0)="483dd14fe77c6013d78c0c8a57a7a66fcc508d026949934379d759b6fcb9bb21da9af516a36e4bf7a878d8081946ac42b620f584b7e3c1aa9f4957716891394767c7b57d88c938f7602f0334ae9455c585f0e5e2b2bb26db077244862b4e83fc71319399f02f3ba059b555554295b31c294ee5042c9ce3485a1bf3fc141a7d4f7feb2d605d370daeb5904036f8fea8261861aa9a7766aa19e4f72cc65d30315f8f25b4bf6ea6576f195903f45d34ec431495a1f04d7e8434a39f8d627d1b6f8b574765be667b430426e7"}}, &(0x7f0000000080)) (async) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0xc220}, {0xffffffffffffffff, 0xa00}, {0xffffffffffffffff, 0x580}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x40a}, {r3}, {0xffffffffffffffff, 0x200}, {r5, 0x200}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0xcb9]}, 0x8) (async) 12:06:51 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000003000010001000000080001"], 0x40}}, 0x0) 12:06:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002030000080003"], 0x40}}, 0x0) 12:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa180, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3173.718726][T30517] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3173.730296][T30515] loop1: detected capacity change from 0 to 140 [ 3173.742570][T30515] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300047fffffff00010001000000080001"], 0x40}}, 0x0) 12:06:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002040000080003"], 0x40}}, 0x0) [ 3173.803221][T30521] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3173.856471][T30525] loop1: detected capacity change from 0 to 140 [ 3173.869553][T30525] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa1c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3173.904280][T30528] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3173.999838][T30536] loop1: detected capacity change from 0 to 140 [ 3174.010915][T30536] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:59 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) 12:06:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040002000800010001000000080001"], 0x40}}, 0x0) 12:06:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa200, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:06:59 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:06:59 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f0000000000)={0x0, 0x3a, 0x1, @thr={&(0x7f00000001c0)="f6da37d237ad6b466ba117c42ad3bd0872443523ec300da7ebf1fb18a0edcd02bfb36ba292dc0ac864b034930ab3b0a46d6f5112ddf52c8cafbe1d1a6c4ac3779a81ec023b3a16dac4ea0e1f41989f3c7d06c578d84d1b27133fd8ba649d74f033459e68e9831477eb74afe6d966fcfc0f9e18f34bccfaefde3df92459a56247119651a0cf9f5a3d63eadb1f7bdb", &(0x7f00000002c0)="483dd14fe77c6013d78c0c8a57a7a66fcc508d026949934379d759b6fcb9bb21da9af516a36e4bf7a878d8081946ac42b620f584b7e3c1aa9f4957716891394767c7b57d88c938f7602f0334ae9455c585f0e5e2b2bb26db077244862b4e83fc71319399f02f3ba059b555554295b31c294ee5042c9ce3485a1bf3fc141a7d4f7feb2d605d370daeb5904036f8fea8261861aa9a7766aa19e4f72cc65d30315f8f25b4bf6ea6576f195903f45d34ec431495a1f04d7e8434a39f8d627d1b6f8b574765be667b430426e7"}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0xc220}, {0xffffffffffffffff, 0xa00}, {0xffffffffffffffff, 0x580}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x40a}, {r3}, {0xffffffffffffffff, 0x200}, {r5, 0x200}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0xcb9]}, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x3a, 0x1, @thr={&(0x7f00000001c0)="f6da37d237ad6b466ba117c42ad3bd0872443523ec300da7ebf1fb18a0edcd02bfb36ba292dc0ac864b034930ab3b0a46d6f5112ddf52c8cafbe1d1a6c4ac3779a81ec023b3a16dac4ea0e1f41989f3c7d06c578d84d1b27133fd8ba649d74f033459e68e9831477eb74afe6d966fcfc0f9e18f34bccfaefde3df92459a56247119651a0cf9f5a3d63eadb1f7bdb", &(0x7f00000002c0)="483dd14fe77c6013d78c0c8a57a7a66fcc508d026949934379d759b6fcb9bb21da9af516a36e4bf7a878d8081946ac42b620f584b7e3c1aa9f4957716891394767c7b57d88c938f7602f0334ae9455c585f0e5e2b2bb26db077244862b4e83fc71319399f02f3ba059b555554295b31c294ee5042c9ce3485a1bf3fc141a7d4f7feb2d605d370daeb5904036f8fea8261861aa9a7766aa19e4f72cc65d30315f8f25b4bf6ea6576f195903f45d34ec431495a1f04d7e8434a39f8d627d1b6f8b574765be667b430426e7"}}, &(0x7f0000000080)) (async) timer_settime(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0xc220}, {0xffffffffffffffff, 0xa00}, {0xffffffffffffffff, 0x580}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x40a}, {r3}, {0xffffffffffffffff, 0x200}, {r5, 0x200}], 0xa, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0xcb9]}, 0x8) (async) 12:06:59 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002050000080003"], 0x40}}, 0x0) 12:06:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040003000800010001000000080001"], 0x40}}, 0x0) 12:06:59 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002060000080003"], 0x40}}, 0x0) 12:06:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa240, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3182.041869][T30548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3182.052114][T30547] loop1: detected capacity change from 0 to 140 [ 3182.063118][T30547] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:06:59 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002070000080003"], 0x40}}, 0x0) 12:06:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040004000800010001000000080001"], 0x40}}, 0x0) [ 3182.147123][T30553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:06:59 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 3182.190335][T30556] loop1: detected capacity change from 0 to 140 [ 3182.202603][T30556] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3182.260606][T30579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:05 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = inotify_init1(0x80800) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) fallocate(r2, 0x35, 0xfff, 0xf01) 12:07:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa280, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002090000080003"], 0x40}}, 0x0) 12:07:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040005000800010001000000080001"], 0x40}}, 0x0) 12:07:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x3, &(0x7f0000000080)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 12:07:05 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:05 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:07:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000300080003"], 0x40}}, 0x0) 12:07:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040006000800010001000000080001"], 0x40}}, 0x0) 12:07:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa2c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3188.357089][T30589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3188.368376][T30592] loop1: detected capacity change from 0 to 140 [ 3188.379995][T30592] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:06 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="dcadf763dfe987429c47d195d35ee987acc731fe41500b3cf407df3c79ba86c530edd1acb1f4d85be9a70ce7e4cbe9f334869ed7bb5bb48b8fe27de9e27358c51279bd7dc89e5b9ff6f8ee5b458a199c236eec1fe14358c1a542266ece9f387651ab105c50c8cc0285dbfe9b7955fb7b7a3067e222cccf509a4366d1fdf5d7ac08b6796729797530ffba8563ce53b00ae330333620427bd2d2974397ddc0e385ea335e3847b665c1157b67cfcdac449baa249efb10ebe33c13b0cada3fce9c0e923f9c69c7b0d40c0908a7cd0a4ef664a1b954d215d02e1b4aabb874c2c05727ea5b5c1d603b9f0b24ce961968e148910ddef4", &(0x7f0000000240)="e874949b3a528beef0706b17ca"}}, &(0x7f00009b1ffc)) timer_create(0x6, &(0x7f0000000140)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x3f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000400)) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x41, 0x2, @thr={&(0x7f0000000000)="60f013b1a3ad57c070df4da81ce0389fa692b3651a27df55738a", &(0x7f0000000040)="cf544baacfc3908313ce9e331c8d6cc026c8c4bc1ba38a2c50957b8765111d555cadfef9c9121cc0c723fba81215ed5081a49379c27c1073da43422e14c776087b0b832b44f080e7b723c45a506a8afb845b95739e94ed2a5e"}}, &(0x7f0000000200)) clock_nanosleep(0x8, 0x1, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:07:06 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000500080003"], 0x40}}, 0x0) [ 3188.496884][T30603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3188.508135][T30605] loop1: detected capacity change from 0 to 140 [ 3188.518650][T30605] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:12 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = inotify_init1(0x80800) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) fallocate(r2, 0x35, 0xfff, 0xf01) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) inotify_init1(0x80800) (async) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async) fallocate(r2, 0x35, 0xfff, 0xf01) (async) 12:07:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040007000800010001000000080001"], 0x40}}, 0x0) 12:07:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:12 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="dcadf763dfe987429c47d195d35ee987acc731fe41500b3cf407df3c79ba86c530edd1acb1f4d85be9a70ce7e4cbe9f334869ed7bb5bb48b8fe27de9e27358c51279bd7dc89e5b9ff6f8ee5b458a199c236eec1fe14358c1a542266ece9f387651ab105c50c8cc0285dbfe9b7955fb7b7a3067e222cccf509a4366d1fdf5d7ac08b6796729797530ffba8563ce53b00ae330333620427bd2d2974397ddc0e385ea335e3847b665c1157b67cfcdac449baa249efb10ebe33c13b0cada3fce9c0e923f9c69c7b0d40c0908a7cd0a4ef664a1b954d215d02e1b4aabb874c2c05727ea5b5c1d603b9f0b24ce961968e148910ddef4", &(0x7f0000000240)="e874949b3a528beef0706b17ca"}}, &(0x7f00009b1ffc)) timer_create(0x6, &(0x7f0000000140)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x3f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000400)) (async) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x41, 0x2, @thr={&(0x7f0000000000)="60f013b1a3ad57c070df4da81ce0389fa692b3651a27df55738a", &(0x7f0000000040)="cf544baacfc3908313ce9e331c8d6cc026c8c4bc1ba38a2c50957b8765111d555cadfef9c9121cc0c723fba81215ed5081a49379c27c1073da43422e14c776087b0b832b44f080e7b723c45a506a8afb845b95739e94ed2a5e"}}, &(0x7f0000000200)) clock_nanosleep(0x8, 0x1, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:07:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000600080003"], 0x40}}, 0x0) 12:07:12 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000700080003"], 0x40}}, 0x0) 12:07:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040008000800010001000000080001"], 0x40}}, 0x0) 12:07:13 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="dcadf763dfe987429c47d195d35ee987acc731fe41500b3cf407df3c79ba86c530edd1acb1f4d85be9a70ce7e4cbe9f334869ed7bb5bb48b8fe27de9e27358c51279bd7dc89e5b9ff6f8ee5b458a199c236eec1fe14358c1a542266ece9f387651ab105c50c8cc0285dbfe9b7955fb7b7a3067e222cccf509a4366d1fdf5d7ac08b6796729797530ffba8563ce53b00ae330333620427bd2d2974397ddc0e385ea335e3847b665c1157b67cfcdac449baa249efb10ebe33c13b0cada3fce9c0e923f9c69c7b0d40c0908a7cd0a4ef664a1b954d215d02e1b4aabb874c2c05727ea5b5c1d603b9f0b24ce961968e148910ddef4", &(0x7f0000000240)="e874949b3a528beef0706b17ca"}}, &(0x7f00009b1ffc)) (async) timer_create(0x6, &(0x7f0000000140)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x3f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000400)) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x41, 0x2, @thr={&(0x7f0000000000)="60f013b1a3ad57c070df4da81ce0389fa692b3651a27df55738a", &(0x7f0000000040)="cf544baacfc3908313ce9e331c8d6cc026c8c4bc1ba38a2c50957b8765111d555cadfef9c9121cc0c723fba81215ed5081a49379c27c1073da43422e14c776087b0b832b44f080e7b723c45a506a8afb845b95739e94ed2a5e"}}, &(0x7f0000000200)) (async) clock_nanosleep(0x8, 0x1, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 3195.526118][T30616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3195.537839][T30617] loop1: detected capacity change from 0 to 140 [ 3195.552847][T30617] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa340, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000900080003"], 0x40}}, 0x0) 12:07:13 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x1, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f0000000080)=0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x29, 0x1, @thr={&(0x7f00000001c0)="87380d275f3f5040503f90e1", &(0x7f0000000200)="7072cc45415c7c91510b0627d741a9c6d17e08a490f926bcf90798873c5d55d3de9e6b3d4080c07dec453d4c45c0e4d3d0c6b1292c0a7d256cb47bf8"}}, &(0x7f00000002c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000008580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/196, 0xc4}], 0x9}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}, {&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/229, 0xe5}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/135, 0x87}], 0x8, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000003440)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/206, 0xce}, {&(0x7f0000002300)=""/211, 0xd3}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/32, 0x20}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/162, 0xa2}, {&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/201, 0xc9}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/117, 0x75}], 0x8, &(0x7f0000003a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003ac0)=""/8, 0x8}, {&(0x7f0000003b00)=""/61, 0x3d}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004b80), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/44, 0x2c}, {&(0x7f0000006c40)=""/84, 0x54}, {&(0x7f0000006cc0)=""/82, 0x52}, {&(0x7f0000006d40)=""/7, 0x7}, {&(0x7f0000006d80)=""/246, 0xf6}], 0x7, &(0x7f0000006f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006f40), 0x6e, &(0x7f0000008480)=[{&(0x7f0000006fc0)=""/145, 0x91}, {&(0x7f0000007080)=""/83, 0x53}, {&(0x7f0000007100)=""/205, 0xcd}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/149, 0x95}, {&(0x7f00000082c0)=""/186, 0xba}, {&(0x7f0000008380)=""/197, 0xc5}], 0x7, &(0x7f0000008740)=ANY=[@ANYBLOB="14000000000000000100000001000000b9e4a8af021d68b01e65d64bfe2a5ec794126658bd1536d7a5fa5be23095475062589fb00bbab02dfc0d0c0cc3e06b277096592ccc8b8a4620b6be49ecc88574eea11a0cdb55d4fc5d9de25c618618fc09bdc5959346e76776bfc569b886c53dd687a615dcd3480d7960443df68e4a216aac99e204fbfd5e8f206c1d361e115615b5a3b14c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x7, 0x2000, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x4, 0x8, 0x6, 0x2, 0x100000001, 0x10000, 0xb0, 0x80000000}, &(0x7f0000000340)={0x8, 0x3f, 0x5, 0xe0, 0x7, 0x200, 0x7fff, 0x5}, &(0x7f0000000380)={0xff, 0x100000001, 0x9, 0x7, 0x1, 0x9, 0x7, 0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff]}, 0x8}) [ 3195.630818][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3195.706794][T30631] loop1: detected capacity change from 0 to 140 [ 3195.722392][T30631] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:20 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async, rerun: 64) sendfile(r0, r1, 0x0, 0xef85) (async, rerun: 64) r2 = inotify_init1(0x80800) (async) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async) fallocate(r2, 0x35, 0xfff, 0xf01) 12:07:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040009000800010001000000080001"], 0x40}}, 0x0) 12:07:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002c00e00080003"], 0x40}}, 0x0) 12:07:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa380, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:20 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:20 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x1, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f0000000080)=0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x29, 0x1, @thr={&(0x7f00000001c0)="87380d275f3f5040503f90e1", &(0x7f0000000200)="7072cc45415c7c91510b0627d741a9c6d17e08a490f926bcf90798873c5d55d3de9e6b3d4080c07dec453d4c45c0e4d3d0c6b1292c0a7d256cb47bf8"}}, &(0x7f00000002c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000008580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/196, 0xc4}], 0x9}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}, {&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/229, 0xe5}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/135, 0x87}], 0x8, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000003440)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/206, 0xce}, {&(0x7f0000002300)=""/211, 0xd3}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/32, 0x20}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/162, 0xa2}, {&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/201, 0xc9}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/117, 0x75}], 0x8, &(0x7f0000003a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003ac0)=""/8, 0x8}, {&(0x7f0000003b00)=""/61, 0x3d}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004b80), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/44, 0x2c}, {&(0x7f0000006c40)=""/84, 0x54}, {&(0x7f0000006cc0)=""/82, 0x52}, {&(0x7f0000006d40)=""/7, 0x7}, {&(0x7f0000006d80)=""/246, 0xf6}], 0x7, &(0x7f0000006f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006f40), 0x6e, &(0x7f0000008480)=[{&(0x7f0000006fc0)=""/145, 0x91}, {&(0x7f0000007080)=""/83, 0x53}, {&(0x7f0000007100)=""/205, 0xcd}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/149, 0x95}, {&(0x7f00000082c0)=""/186, 0xba}, {&(0x7f0000008380)=""/197, 0xc5}], 0x7, &(0x7f0000008740)=ANY=[@ANYBLOB="14000000000000000100000001000000b9e4a8af021d68b01e65d64bfe2a5ec794126658bd1536d7a5fa5be23095475062589fb00bbab02dfc0d0c0cc3e06b277096592ccc8b8a4620b6be49ecc88574eea11a0cdb55d4fc5d9de25c618618fc09bdc5959346e76776bfc569b886c53dd687a615dcd3480d7960443df68e4a216aac99e204fbfd5e8f206c1d361e115615b5a3b14c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x7, 0x2000, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x4, 0x8, 0x6, 0x2, 0x100000001, 0x10000, 0xb0, 0x80000000}, &(0x7f0000000340)={0x8, 0x3f, 0x5, 0xe0, 0x7, 0x200, 0x7fff, 0x5}, &(0x7f0000000380)={0xff, 0x100000001, 0x9, 0x7, 0x1, 0x9, 0x7, 0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff]}, 0x8}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_create(0x1, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f0000000080)) (async) timer_create(0x1, &(0x7f0000000240)={0x0, 0x29, 0x1, @thr={&(0x7f00000001c0)="87380d275f3f5040503f90e1", &(0x7f0000000200)="7072cc45415c7c91510b0627d741a9c6d17e08a490f926bcf90798873c5d55d3de9e6b3d4080c07dec453d4c45c0e4d3d0c6b1292c0a7d256cb47bf8"}}, &(0x7f00000002c0)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000008580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/196, 0xc4}], 0x9}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}, {&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/229, 0xe5}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/135, 0x87}], 0x8, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000003440)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/206, 0xce}, {&(0x7f0000002300)=""/211, 0xd3}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/32, 0x20}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/162, 0xa2}, {&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/201, 0xc9}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/117, 0x75}], 0x8, &(0x7f0000003a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003ac0)=""/8, 0x8}, {&(0x7f0000003b00)=""/61, 0x3d}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004b80), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/44, 0x2c}, {&(0x7f0000006c40)=""/84, 0x54}, {&(0x7f0000006cc0)=""/82, 0x52}, {&(0x7f0000006d40)=""/7, 0x7}, {&(0x7f0000006d80)=""/246, 0xf6}], 0x7, &(0x7f0000006f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006f40), 0x6e, &(0x7f0000008480)=[{&(0x7f0000006fc0)=""/145, 0x91}, {&(0x7f0000007080)=""/83, 0x53}, {&(0x7f0000007100)=""/205, 0xcd}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/149, 0x95}, {&(0x7f00000082c0)=""/186, 0xba}, {&(0x7f0000008380)=""/197, 0xc5}], 0x7, &(0x7f0000008740)=ANY=[@ANYBLOB="14000000000000000100000001000000b9e4a8af021d68b01e65d64bfe2a5ec794126658bd1536d7a5fa5be23095475062589fb00bbab02dfc0d0c0cc3e06b277096592ccc8b8a4620b6be49ecc88574eea11a0cdb55d4fc5d9de25c618618fc09bdc5959346e76776bfc569b886c53dd687a615dcd3480d7960443df68e4a216aac99e204fbfd5e8f206c1d361e115615b5a3b14c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x7, 0x2000, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) pselect6(0x40, &(0x7f0000000300)={0x4, 0x8, 0x6, 0x2, 0x100000001, 0x10000, 0xb0, 0x80000000}, &(0x7f0000000340)={0x8, 0x3f, 0x5, 0xe0, 0x7, 0x200, 0x7fff, 0x5}, &(0x7f0000000380)={0xff, 0x100000001, 0x9, 0x7, 0x1, 0x9, 0x7, 0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff]}, 0x8}) (async) 12:07:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002d90e00080003"], 0x40}}, 0x0) 12:07:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000a000800010001000000080001"], 0x40}}, 0x0) 12:07:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa3c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3202.718965][T30645] loop1: detected capacity change from 0 to 140 [ 3202.727470][T30647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3202.739974][T30645] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:20 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500020ec000080003"], 0x40}}, 0x0) 12:07:20 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x1, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f0000000080)=0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x29, 0x1, @thr={&(0x7f00000001c0)="87380d275f3f5040503f90e1", &(0x7f0000000200)="7072cc45415c7c91510b0627d741a9c6d17e08a490f926bcf90798873c5d55d3de9e6b3d4080c07dec453d4c45c0e4d3d0c6b1292c0a7d256cb47bf8"}}, &(0x7f00000002c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000008580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/196, 0xc4}], 0x9}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}, {&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/229, 0xe5}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/135, 0x87}], 0x8, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000003440)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/206, 0xce}, {&(0x7f0000002300)=""/211, 0xd3}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/32, 0x20}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/162, 0xa2}, {&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/201, 0xc9}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/117, 0x75}], 0x8, &(0x7f0000003a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003ac0)=""/8, 0x8}, {&(0x7f0000003b00)=""/61, 0x3d}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004b80), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/44, 0x2c}, {&(0x7f0000006c40)=""/84, 0x54}, {&(0x7f0000006cc0)=""/82, 0x52}, {&(0x7f0000006d40)=""/7, 0x7}, {&(0x7f0000006d80)=""/246, 0xf6}], 0x7, &(0x7f0000006f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006f40), 0x6e, &(0x7f0000008480)=[{&(0x7f0000006fc0)=""/145, 0x91}, {&(0x7f0000007080)=""/83, 0x53}, {&(0x7f0000007100)=""/205, 0xcd}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/149, 0x95}, {&(0x7f00000082c0)=""/186, 0xba}, {&(0x7f0000008380)=""/197, 0xc5}], 0x7, &(0x7f0000008740)=ANY=[@ANYBLOB="14000000000000000100000001000000b9e4a8af021d68b01e65d64bfe2a5ec794126658bd1536d7a5fa5be23095475062589fb00bbab02dfc0d0c0cc3e06b277096592ccc8b8a4620b6be49ecc88574eea11a0cdb55d4fc5d9de25c618618fc09bdc5959346e76776bfc569b886c53dd687a615dcd3480d7960443df68e4a216aac99e204fbfd5e8f206c1d361e115615b5a3b14c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x7, 0x2000, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x4, 0x8, 0x6, 0x2, 0x100000001, 0x10000, 0xb0, 0x80000000}, &(0x7f0000000340)={0x8, 0x3f, 0x5, 0xe0, 0x7, 0x200, 0x7fff, 0x5}, &(0x7f0000000380)={0xff, 0x100000001, 0x9, 0x7, 0x1, 0x9, 0x7, 0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff]}, 0x8}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_create(0x1, &(0x7f0000000000)={0x0, 0x25, 0x1}, &(0x7f0000000080)) (async) timer_create(0x1, &(0x7f0000000240)={0x0, 0x29, 0x1, @thr={&(0x7f00000001c0)="87380d275f3f5040503f90e1", &(0x7f0000000200)="7072cc45415c7c91510b0627d741a9c6d17e08a490f926bcf90798873c5d55d3de9e6b3d4080c07dec453d4c45c0e4d3d0c6b1292c0a7d256cb47bf8"}}, &(0x7f00000002c0)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000008580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/196, 0xc4}], 0x9}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}, {&(0x7f0000001b00)=""/65, 0x41}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/229, 0xe5}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/135, 0x87}], 0x8, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000003440)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/10, 0xa}, {&(0x7f0000002200)=""/206, 0xce}, {&(0x7f0000002300)=""/211, 0xd3}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/32, 0x20}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/162, 0xa2}, {&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/201, 0xc9}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/117, 0x75}], 0x8, &(0x7f0000003a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003ac0)=""/8, 0x8}, {&(0x7f0000003b00)=""/61, 0x3d}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004b80), 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/44, 0x2c}, {&(0x7f0000006c40)=""/84, 0x54}, {&(0x7f0000006cc0)=""/82, 0x52}, {&(0x7f0000006d40)=""/7, 0x7}, {&(0x7f0000006d80)=""/246, 0xf6}], 0x7, &(0x7f0000006f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006f40), 0x6e, &(0x7f0000008480)=[{&(0x7f0000006fc0)=""/145, 0x91}, {&(0x7f0000007080)=""/83, 0x53}, {&(0x7f0000007100)=""/205, 0xcd}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/149, 0x95}, {&(0x7f00000082c0)=""/186, 0xba}, {&(0x7f0000008380)=""/197, 0xc5}], 0x7, &(0x7f0000008740)=ANY=[@ANYBLOB="14000000000000000100000001000000b9e4a8af021d68b01e65d64bfe2a5ec794126658bd1536d7a5fa5be23095475062589fb00bbab02dfc0d0c0cc3e06b277096592ccc8b8a4620b6be49ecc88574eea11a0cdb55d4fc5d9de25c618618fc09bdc5959346e76776bfc569b886c53dd687a615dcd3480d7960443df68e4a216aac99e204fbfd5e8f206c1d361e115615b5a3b14c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x7, 0x2000, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) pselect6(0x40, &(0x7f0000000300)={0x4, 0x8, 0x6, 0x2, 0x100000001, 0x10000, 0xb0, 0x80000000}, &(0x7f0000000340)={0x8, 0x3f, 0x5, 0xe0, 0x7, 0x200, 0x7fff, 0x5}, &(0x7f0000000380)={0xff, 0x100000001, 0x9, 0x7, 0x1, 0x9, 0x7, 0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7fff]}, 0x8}) (async) 12:07:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000b000800010001000000080001"], 0x40}}, 0x0) [ 3202.846731][T30657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3202.885777][T30660] loop1: detected capacity change from 0 to 140 [ 3202.894704][T30660] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3202.974826][T30665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:27 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 12:07:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000008000100010000000800010001000000080001000000000008001500020ed900080003"], 0x40}}, 0x0) 12:07:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000c000800010001000000080001"], 0x40}}, 0x0) 12:07:27 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0300270000000000000000000000fd4596e7b7000000"], 0x1c}}, 0x4000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:07:27 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000100003"], 0x40}}, 0x0) 12:07:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000d000800010001000000080001"], 0x40}}, 0x0) 12:07:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa440, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3209.909696][T30683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3209.909801][T30682] loop1: detected capacity change from 0 to 140 [ 3209.932118][T30682] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000e000800010001000000080001"], 0x40}}, 0x0) 12:07:27 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000180003"], 0x40}}, 0x0) [ 3210.015728][T30686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3210.032297][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 12:07:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3210.061001][T30689] loop1: detected capacity change from 0 to 140 [ 3210.073050][T30689] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3210.114967][T30691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3210.149882][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3210.189997][T30695] loop1: detected capacity change from 0 to 140 [ 3210.199530][T30695] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:34 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 12:07:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040010000800010001000000080001"], 0x40}}, 0x0) 12:07:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000200003"], 0x40}}, 0x0) 12:07:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa4c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:34 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0300270000000000000000000000fd4596e7b7000000"], 0x1c}}, 0x4000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0300270000000000000000000000fd4596e7b7000000"], 0x1c}}, 0x4000000) (async) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 12:07:34 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000280003"], 0x40}}, 0x0) 12:07:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040011000800010001000000080001"], 0x40}}, 0x0) 12:07:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3217.050436][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3217.062591][T30705] loop1: detected capacity change from 0 to 140 [ 3217.072251][T30706] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3217.084211][T30705] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040012000800010001000000080001"], 0x40}}, 0x0) 12:07:34 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0300270000000000000000000000fd4596e7b7000000"], 0x1c}}, 0x4000000) (async) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:07:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000300003"], 0x40}}, 0x0) [ 3217.180236][T30712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3217.194345][T30713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3217.231391][T30718] loop1: detected capacity change from 0 to 140 [ 3217.245609][T30718] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3217.325142][T30722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3217.341014][T30727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 12:07:41 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) 12:07:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa540, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040018000800010001000000080001"], 0x40}}, 0x0) 12:07:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000200080003"], 0x40}}, 0x0) 12:07:41 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x27, 0x1, @thr={&(0x7f0000000000)="f238dc9c3ec031e46ec75fff", &(0x7f0000000080)="6c4219d0874d3f736ef5914f8e88fbb1f285757d840621c3f748e2b2c0853ec61555ef1e986bbef37ee63dfca26a759e6b7d19"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{r1, r2+60000000}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 12:07:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (rerun: 64) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x27, 0x1, @thr={&(0x7f0000000000)="f238dc9c3ec031e46ec75fff", &(0x7f0000000080)="6c4219d0874d3f736ef5914f8e88fbb1f285757d840621c3f748e2b2c0853ec61555ef1e986bbef37ee63dfca26a759e6b7d19"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{r1, r2+60000000}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 12:07:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040025000800010001000000080001"], 0x40}}, 0x0) 12:07:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000300080003"], 0x40}}, 0x0) 12:07:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa580, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3224.226015][T30734] loop1: detected capacity change from 0 to 140 [ 3224.226638][T30736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3224.245030][T30734] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 64) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x27, 0x1, @thr={&(0x7f0000000000)="f238dc9c3ec031e46ec75fff", &(0x7f0000000080)="6c4219d0874d3f736ef5914f8e88fbb1f285757d840621c3f748e2b2c0853ec61555ef1e986bbef37ee63dfca26a759e6b7d19"}}, &(0x7f0000000200)=0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{r1, r2+60000000}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) 12:07:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000400080003"], 0x40}}, 0x0) [ 3224.344150][T30742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3224.398229][T30748] loop1: detected capacity change from 0 to 140 [ 3224.411513][T30748] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:48 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 12:07:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa5c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:48 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040048000800010001000000080001"], 0x40}}, 0x0) 12:07:48 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000500080003"], 0x40}}, 0x0) 12:07:48 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000680)) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) timer_create(0x2, &(0x7f0000000440)={0x0, 0x18, 0x4, @thr={&(0x7f0000000300)="3a963aef484d4a06e747f48e4cf3f458c7886bac3e77e9875f30fe660463e249c06d2093f1ef85903dd3aeaf014a0556fc8d333e1987176a3f066d8101f807a4d60cf637a3408d951b98790b24d19632c9b69e97b1a9b74f82e3879329fd508f4775bc042fc758a7078ee5603480cab21a2568f697246259d213131fc69450", &(0x7f0000000380)="376670f8a3b2e0187b9a7ff89b8356c215dadaa06c42aef1769a614db60bffc220d31a2887b403a4604e435f519754d9970e7b6385bd346d56461154fb0b4c84565b8b26aa81c40735d88fbd375fbed10e2b3774b4f046944a8ec38faabaffe9fe98e17bfad84b88367133dd9c7a9581d55a5a497a40ad33084318981c355b324c358e4ecc0f6df1c0cd503fdb1e2099403b92995a6194fa81f6f70e93ec7d73c9995db471c036"}}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000540)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000580)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r10, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) 12:07:48 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x8) 12:07:48 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004004c000800010001000000080001"], 0x40}}, 0x0) 12:07:48 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000600080003"], 0x40}}, 0x0) 12:07:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3231.347892][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3231.362572][T30764] loop1: detected capacity change from 0 to 140 [ 3231.375993][T30764] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:48 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000700080003"], 0x40}}, 0x0) 12:07:48 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040060000800010001000000080001"], 0x40}}, 0x0) [ 3231.476548][T30770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa640, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3231.524861][T30772] loop1: detected capacity change from 0 to 140 [ 3231.534534][T30772] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3231.585340][T30776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3231.664707][T30778] loop1: detected capacity change from 0 to 140 [ 3231.675846][T30778] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:55 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) 12:07:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040068000800010001000000080001"], 0x40}}, 0x0) 12:07:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000900080003"], 0x40}}, 0x0) 12:07:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa680, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:55 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x0) 12:07:55 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000680)) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) timer_create(0x2, &(0x7f0000000440)={0x0, 0x18, 0x4, @thr={&(0x7f0000000300)="3a963aef484d4a06e747f48e4cf3f458c7886bac3e77e9875f30fe660463e249c06d2093f1ef85903dd3aeaf014a0556fc8d333e1987176a3f066d8101f807a4d60cf637a3408d951b98790b24d19632c9b69e97b1a9b74f82e3879329fd508f4775bc042fc758a7078ee5603480cab21a2568f697246259d213131fc69450", &(0x7f0000000380)="376670f8a3b2e0187b9a7ff89b8356c215dadaa06c42aef1769a614db60bffc220d31a2887b403a4604e435f519754d9970e7b6385bd346d56461154fb0b4c84565b8b26aa81c40735d88fbd375fbed10e2b3774b4f046944a8ec38faabaffe9fe98e17bfad84b88367133dd9c7a9581d55a5a497a40ad33084318981c355b324c358e4ecc0f6df1c0cd503fdb1e2099403b92995a6194fa81f6f70e93ec7d73c9995db471c036"}}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000540)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000580)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r10, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000005c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f0000000600)) (async) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000680)) (async) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) (async) timer_create(0x2, &(0x7f0000000440)={0x0, 0x18, 0x4, @thr={&(0x7f0000000300)="3a963aef484d4a06e747f48e4cf3f458c7886bac3e77e9875f30fe660463e249c06d2093f1ef85903dd3aeaf014a0556fc8d333e1987176a3f066d8101f807a4d60cf637a3408d951b98790b24d19632c9b69e97b1a9b74f82e3879329fd508f4775bc042fc758a7078ee5603480cab21a2568f697246259d213131fc69450", &(0x7f0000000380)="376670f8a3b2e0187b9a7ff89b8356c215dadaa06c42aef1769a614db60bffc220d31a2887b403a4604e435f519754d9970e7b6385bd346d56461154fb0b4c84565b8b26aa81c40735d88fbd375fbed10e2b3774b4f046944a8ec38faabaffe9fe98e17bfad84b88367133dd9c7a9581d55a5a497a40ad33084318981c355b324c358e4ecc0f6df1c0cd503fdb1e2099403b92995a6194fa81f6f70e93ec7d73c9995db471c036"}}, &(0x7f0000000480)) (async) clock_gettime(0x0, &(0x7f00000004c0)) (async) clock_gettime(0x0, &(0x7f0000000500)) (async) timer_settime(r5, 0x1, &(0x7f0000000540)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000580)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r10, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) (async) 12:07:55 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x0) 12:07:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000003080003"], 0x40}}, 0x0) 12:07:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004006c000800010001000000080001"], 0x40}}, 0x0) 12:07:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa6c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:07:56 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000680)) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) timer_create(0x2, &(0x7f0000000440)={0x0, 0x18, 0x4, @thr={&(0x7f0000000300)="3a963aef484d4a06e747f48e4cf3f458c7886bac3e77e9875f30fe660463e249c06d2093f1ef85903dd3aeaf014a0556fc8d333e1987176a3f066d8101f807a4d60cf637a3408d951b98790b24d19632c9b69e97b1a9b74f82e3879329fd508f4775bc042fc758a7078ee5603480cab21a2568f697246259d213131fc69450", &(0x7f0000000380)="376670f8a3b2e0187b9a7ff89b8356c215dadaa06c42aef1769a614db60bffc220d31a2887b403a4604e435f519754d9970e7b6385bd346d56461154fb0b4c84565b8b26aa81c40735d88fbd375fbed10e2b3774b4f046944a8ec38faabaffe9fe98e17bfad84b88367133dd9c7a9581d55a5a497a40ad33084318981c355b324c358e4ecc0f6df1c0cd503fdb1e2099403b92995a6194fa81f6f70e93ec7d73c9995db471c036"}}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000540)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000580)) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r10, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000005c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f0000000600)) (async) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000680)) (async) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) (async) timer_create(0x2, &(0x7f0000000440)={0x0, 0x18, 0x4, @thr={&(0x7f0000000300)="3a963aef484d4a06e747f48e4cf3f458c7886bac3e77e9875f30fe660463e249c06d2093f1ef85903dd3aeaf014a0556fc8d333e1987176a3f066d8101f807a4d60cf637a3408d951b98790b24d19632c9b69e97b1a9b74f82e3879329fd508f4775bc042fc758a7078ee5603480cab21a2568f697246259d213131fc69450", &(0x7f0000000380)="376670f8a3b2e0187b9a7ff89b8356c215dadaa06c42aef1769a614db60bffc220d31a2887b403a4604e435f519754d9970e7b6385bd346d56461154fb0b4c84565b8b26aa81c40735d88fbd375fbed10e2b3774b4f046944a8ec38faabaffe9fe98e17bfad84b88367133dd9c7a9581d55a5a497a40ad33084318981c355b324c358e4ecc0f6df1c0cd503fdb1e2099403b92995a6194fa81f6f70e93ec7d73c9995db471c036"}}, &(0x7f0000000480)) (async) clock_gettime(0x0, &(0x7f00000004c0)) (async) clock_gettime(0x0, &(0x7f0000000500)) (async) timer_settime(r5, 0x1, &(0x7f0000000540)={{r6, r7+60000000}, {r8, r9+60000000}}, &(0x7f0000000580)) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) (async) timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r10, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) (async) [ 3238.468989][T30786] loop1: detected capacity change from 0 to 140 [ 3238.478156][T30789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3238.491992][T30786] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:07:56 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000340), &(0x7f00000003c0)={0x77359400}, 0x0) [ 3238.601562][T30809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3238.622033][T30811] loop1: detected capacity change from 0 to 140 [ 3238.636421][T30811] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:03 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 12:08:03 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000005080003"], 0x40}}, 0x0) 12:08:03 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040074000800010001000000080001"], 0x40}}, 0x0) 12:08:03 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), 0x0, &(0x7f00000003c0)={0x77359400}, 0x8) 12:08:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:03 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) 12:08:03 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000006080003"], 0x40}}, 0x0) 12:08:03 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004007a000800010001000000080001"], 0x40}}, 0x0) 12:08:03 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000300), 0x0, 0x0, 0x8) 12:08:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa740, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3245.586155][T30836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3245.596636][T30838] loop1: detected capacity change from 0 to 140 [ 3245.608415][T30838] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:03 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) 12:08:03 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000007080003"], 0x40}}, 0x0) [ 3245.715229][T30846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3245.744762][T30849] loop1: detected capacity change from 0 to 140 [ 3245.760231][T30849] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:12 executing program 2: r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x60c2, 0xb0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0xef85) 12:08:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000030800010001000000080001"], 0x40}}, 0x0) 12:08:12 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) 12:08:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa780, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000009080003"], 0x40}}, 0x0) 12:08:12 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) (async) 12:08:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000000080015000200c00e080003"], 0x40}}, 0x0) 12:08:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000050800010001000000080001"], 0x40}}, 0x0) 12:08:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa7c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3254.877192][T30863] loop1: detected capacity change from 0 to 140 [ 3254.886408][T30865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3254.900622][T30863] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:12 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf250800030004000000080001000100000008000100010000000800010000000000080015000200d90e080003"], 0x40}}, 0x0) 12:08:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000060800010001000000080001"], 0x40}}, 0x0) 12:08:12 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) [ 3254.995378][T30871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3255.044812][T30875] loop1: detected capacity change from 0 to 140 [ 3255.055307][T30875] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3255.121037][T30882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:19 executing program 2: r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x60c2, 0xb0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0xef85) open(&(0x7f0000000000)='./file0/file0\x00', 0x60c2, 0xb0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) (async) ftruncate(r1, 0x0) (async) sendfile(r0, r1, 0x0, 0xef85) (async) 12:08:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000ec0080003"], 0x40}}, 0x0) 12:08:19 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 12:08:19 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000070800010001000000080001"], 0x40}}, 0x0) 12:08:19 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) 12:08:19 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) 12:08:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000ed9080003"], 0x40}}, 0x0) 12:08:19 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000090800010001000000080001"], 0x40}}, 0x0) 12:08:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa840, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3262.089222][T30892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3262.100765][T30893] loop1: detected capacity change from 0 to 140 [ 3262.111089][T30893] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:19 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280), 0x0) 12:08:19 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 3262.234616][T30908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3262.250288][T30909] loop1: detected capacity change from 0 to 140 [ 3262.265064][T30909] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:26 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000a0800010001000000080001"], 0x40}}, 0x0) 12:08:26 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000000)="e6a3d4e655e64365912c58d8e6c34aa84180d8276d9d29d72470e6bade15470f1046672a32bf1fcdbaa7495692322455835737fb", 0x34, 0x5, &(0x7f00000001c0)={r4, r5+10000000}) 12:08:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280), 0x0) 12:08:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000002080003"], 0x40}}, 0x0) 12:08:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa880, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:26 executing program 2: r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x60c2, 0xb0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) ftruncate(r1, 0x0) (async) sendfile(r0, r1, 0x0, 0xef85) 12:08:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280), 0x0) 12:08:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000003080003"], 0x40}}, 0x0) 12:08:26 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000b0800010001000000080001"], 0x40}}, 0x0) 12:08:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa8c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) [ 3269.364164][T30932] loop1: detected capacity change from 0 to 140 [ 3269.370836][T30930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3269.383475][T30932] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000004080003"], 0x40}}, 0x0) 12:08:26 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000c0800010001000000080001"], 0x40}}, 0x0) [ 3269.483429][T30941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3269.511337][T30943] loop1: detected capacity change from 0 to 140 [ 3269.523019][T30943] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3269.585352][T30948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000005080003"], 0x40}}, 0x0) 12:08:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:33 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000d0800010001000000080001"], 0x40}}, 0x0) 12:08:33 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) 12:08:33 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (rerun: 32) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000000)="e6a3d4e655e64365912c58d8e6c34aa84180d8276d9d29d72470e6bade15470f1046672a32bf1fcdbaa7495692322455835737fb", 0x34, 0x5, &(0x7f00000001c0)={r4, r5+10000000}) 12:08:33 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="760000000100000008000000d3a7fdb6000000000900000040000000"], &(0x7f0000000180), 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/209, 0xd1}]}, &(0x7f0000000140)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10000, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) fchown(r4, r6, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000001900)=[{&(0x7f0000000240)="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", 0xfe, 0x2}, {&(0x7f0000000340)="f0792da7a979f08ae696544dfcd8b9659d808710b3460b7259a32e54f40aa26390a543abf185c50b529e1cc935317fcf09ebb8dae7f2bc40cb8f6ac0a64411aae1889853e38478fb2debff144fc5e8675b987efebb2afea67105a63c22976bb31fe53956a29343ae3be1a66a8519e12b40c2805631dcfc047717663fcd68df1fdaf3118b9e6f7a69d54f480fd82898d1fdbf381ab25dc2", 0x97, 0x4}, {&(0x7f0000000400)="eea4f81ad48670200ec81265ddb1b7c1e054f59fef102fed9f88a5cb374f47751096891d0c8edfab94d36d093cd8b14c13342d0001ee22392fa0f6731ab6af9fca090480b49f80e880feac25290d3b9cea5e", 0x52}, {&(0x7f0000000800)="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", 0x1000, 0x40}, {&(0x7f0000000480)="8413f3d157f6b91b2367675b5452a16066cb09af1ff8356ec7c508fcdfc8df471b169147597f1cdeedb91c6e371f1551c1bc859d80d212ed775c9ce9e971b7ebefeb76d2e7d1fb7b21fee7408a0e1b16f2e7474112d54ec58b54149dc774f5", 0x5f, 0x100000000}, {&(0x7f0000000500)="7cd678a33639eece1acd48a65f94cb8c93ea8fb71460ea55e0d1280a9c23d843402880d7d967da19ebab7ae91ca36a20701e54b33f7de194e5b95498a65fc14345d5b7f89b454096afec0d21d89c15fc23d6356032687dab792722148e717af8a7e4808bf1d790a114071877ce38e468d60c22097a40c75704d06a517ab5457df32816c2ab21edfbef400df3c7ab8623eb258a68ef10d2", 0x97, 0x4}, {&(0x7f0000001800)="6b99eb1bc623057aabf0e43d1abae81648ac2493b570fe7a1e41a1ebac9894112390d1150d8a6191bfc951a46ee1de9c2dff6910aaa97a61010892d8770f1f3051ddc74079608665c72c04947124dcc297445c447e7dc7c0026c05644daeec89fabd3dc90bc7ed14c1fa92026e9fa7ca30f2dc0361ac8c5525e6a40aac8ed12446ee00d5c370e26673d726333209b7f70de7b9fc002ac2cde54be7573570f0a223721415ceab2b7a7d343c9d2d99bb47e4fe6e1f91e125e88656b6f8717ff43cab477d5f8f87b22d6e05919872be1035d5dd37f213b081ece7180be06c3a9b3c4f2462ff27281c59ad7b5315ff7b85e3c2486e", 0xf3, 0x7}], 0x28080, &(0x7f0000002e40)=ANY=[@ANYBLOB='utf8=0,utf8=1,measure,euid>', @ANYRESDEC=r6, @ANYBLOB="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"]) r7 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x78}, 0xffffffffffffffff, 0x0, r2, 0x1) r8 = dup2(r3, r7) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001a40)={0x0, "23f3bb33abad73d3366ff4ca21a5a9fa"}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002a40)={r9, 0xfff, 0x1ff}) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x4) 12:08:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000006080003"], 0x40}}, 0x0) 12:08:34 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) dup2(r2, r3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000000)="e6a3d4e655e64365912c58d8e6c34aa84180d8276d9d29d72470e6bade15470f1046672a32bf1fcdbaa7495692322455835737fb", 0x34, 0x5, &(0x7f00000001c0)={r4, r5+10000000}) 12:08:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400000e0800010001000000080001"], 0x40}}, 0x0) 12:08:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa940, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3276.496841][T30957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.499649][T30958] loop1: detected capacity change from 0 to 140 [ 3276.522647][T30958] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:34 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) 12:08:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000007080003"], 0x40}}, 0x0) 12:08:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400b50e0800010001000000080001"], 0x40}}, 0x0) [ 3276.612251][T30967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.648007][T30973] loop1: detected capacity change from 0 to 140 12:08:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa980, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000009080003"], 0x40}}, 0x0) [ 3276.661009][T30973] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:34 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400c00e0800010001000000080001"], 0x40}}, 0x0) 12:08:34 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) [ 3276.718852][T30979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3276.791178][T30982] loop1: detected capacity change from 0 to 140 [ 3276.804066][T30982] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3276.856175][T30986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:41 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="760000000100000008000000d3a7fdb6000000000900000040000000"], &(0x7f0000000180), 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/209, 0xd1}]}, &(0x7f0000000140)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10000, 0x0, 0x0}) (async, rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) fchown(r4, r6, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000001900)=[{&(0x7f0000000240)="931d683976736800cbac552ed6380b2bda66bdc62549847eda45fbe0347ebe3421f3a95d4d7f26881a778c8e5a72ffe0014bfc2a30afd2280e2b39ba3ad90cfce637e621cc84850ceedb532148bc7821f0b539333928d9809df13ca9f59d0ccb6e975cfd21469e5c5e28ec48c21401d85f8f291edf50f3e66b563c0af566a48049d51318c2342cde364040d4f86a4c87d9ed56659557522ccf63c8f26c2e5fcac43ec179043e30a68d8a28bac17d8ffcbcad62408a5da7b9947d8fcd8fe3127e538448f3cb30a9310b074168a1330d32ebe834fbeac6291992568b025fa37ced22566e8e08cced75686ef5625ff8a19196ef0af55d1c102b22b2a99ac73f", 0xfe, 0x2}, {&(0x7f0000000340)="f0792da7a979f08ae696544dfcd8b9659d808710b3460b7259a32e54f40aa26390a543abf185c50b529e1cc935317fcf09ebb8dae7f2bc40cb8f6ac0a64411aae1889853e38478fb2debff144fc5e8675b987efebb2afea67105a63c22976bb31fe53956a29343ae3be1a66a8519e12b40c2805631dcfc047717663fcd68df1fdaf3118b9e6f7a69d54f480fd82898d1fdbf381ab25dc2", 0x97, 0x4}, {&(0x7f0000000400)="eea4f81ad48670200ec81265ddb1b7c1e054f59fef102fed9f88a5cb374f47751096891d0c8edfab94d36d093cd8b14c13342d0001ee22392fa0f6731ab6af9fca090480b49f80e880feac25290d3b9cea5e", 0x52}, {&(0x7f0000000800)="71db79dfb57437eef0f1c78bb1c45556894361a823aaed2eeff814afedc990bdb5c1d36e22fe140d87681079e5c55938bc0782d680e34ecd43de1c6da7c76ce7ace518d0473d022f98338a60a26b56cd8ab11cc33f8d160e3a7d107e23004e5e84b92c7e1c7d893c5bd05c632a54ea0137b19cdf0dfae9bdb4389ec07f5183c7c16c70039a13e3666051c8ddf7e2bf376e035819b23cf7988ef203023cc458a95476d13580f5f9f51d570aad136ed3a67ff7143d74c60d8c167d78b7c5c21a15abd5ded3740db5e327f352fe17fd77b0b38a7e2ac67965556089708863cbe9a1fb77ed5311ecc90f47610b37422ef63299ed7d4d070c1434225c305017687354af5d77ea68ceb4a0288ee6097617a6d57601d8368c17b5c14b97aa5c084192e53a9cc1b52d6b9db85e99291fb72f3232f1c3f4be5657faffd3b182a3d070c8b9dc39f4a42cee715799315385db9d29cbdf4e76aec052325f4ca85fad134b061d0d6903a8c98a64adfeb4abb8289cf0d8441b0d7a7bf537eedadb586c17705f5d5bdae0f0d4179d4d4e5a7b49b104168e1a5f883938cc92b2704c0aa3c4e99fff03fe6e18bff64da279168a57e5c13c54d73f75e68546de6150b5d509693e6d7a17849e51600c32c0acfbb7ce595805c9518d7c49598deee024e973a82ff3f97c27cbf0bef82e588530549bfb26d24653764bc0fd2b3a849b0d079a26e99ff07625e7ac0b265afbb82c3c30b7c138763b67143b28a12aaf0996c87ef63963b62f7b4139277d02284c4b68a4393bb4d6655343d89a66797fd2e65f9a1842f05fd32964ddaa6df622030354652123b8f0c665016302dfc9d9cf96151d4271ef959ba6592d2c22f74023511334107169a28f616e112752b7b953a513639982b959a69a178a30788f02be57eb553d3271a91c64ddb161d423e5e12b6ac723101eecc3743230d0773bfb2be6faadac0f1bb729b11fc1aea5d60588208a95ae57341fc10d03be92630e823931ad19005e5440a42cb464ac4c49c9e6f94abb3620dd20c735c290165c3cf44f32edc66a8bef2b68807fe4a3faefc7e6783356d8c07f7c9ac9488040f32530a2f318b5ad94bd466f6e3a2520d134e61136a5f3f579dc4d221146e7af35570ed6fce8c695f4b0136ab9fa6cffa0e35888d6bbf107042455d1dc4096ea873089c634f297dc463823f9c0a7b2e5b7812a445f34a47d89960d9f23dceccbd09469015e7d1f935a18c50b9d7f90ba44d8b98cbafc703d52034fdd2c22243e93f07018eccf321ac9b4eb4a698fd6e187728ed66fd98e26aefa2a85565982de50457a7e127eefa3c03ae9cc12ebe0f022aa9b47d445a7c1f71539c592b5c88b380984033ccb43bd4a480d63dd1b7e39889afd5d158a1a3170bdb19b7f0ca539c4e997174074936d3b366c3a27befbc9e2efef659c3c908b542bef2e66ee97a49a479241fd028b3c99fdd453da3e2f0686d1878157c8211fec01375df40d8c852d03f4920dee744d4e7fa59eb08d90403d243732c06f91f689ee2d3b35aab8642ef96988dd71b718d94a78cc1c9c3ec2250bcc96cece18807c37af48e06cb2d93fb33a578090eb66b500d275b45f048ef6809d00cadc7458f71147404cd6a60ebc6c2404f55e35abf12869a22004bd8bb812c2577787e7750b288715af473a43d7a976922ad5fbb2de9ec18f87b95b62a7291511942fc1619355d590253f1703e863ceec5b0856192a9aa59a34a4dd1a42f15d2a169f65c576a4eea87b684bf6c88b5955496bc74ca21ad91678306d795ca9cac2810897a48c27fae06d578f7305de1ad55f49e89fa70c55a14e279d3d7b9fcfb2cb92b0e271b8bfe15798d19214090bb82e71c87f732ca5641259b9d8cff6eaeeddc924942a6f47db6041a4ec7c3273691f87da1de5b456adbb1a4db253f5dfe1bc3349779756e541149ddc31e755aebfae837cac3ec2a71d83058d840d26c471fc748665420323e4bc9c0e3ae5045799e8907168090a7b013ab8d547f114f5fac0e66639d047fa45e3b6ef44bb41d9f6490f642eae2e2147bc622df2c502eed6c6cf538449ec3ee56c73852cf6112a738eb4c31c795860730fb6f95cdba1ef88e8cb45a81d7a77d1bd58e3700bb30949fa49ba2e7962ef58375149d3695761c92ed8917547cc9f3070fb0fbdbfd728dd4171ac58df75f30ccb4d48b11ea026ef1a070ae0b4e0d2e85616b3d646ffa30b7e0e50fb2a7e1c9cfdd5d1592d1266214348a2393d24c72570b7927ec2660e2b62713760cb97a96e995c0a87dc6b970fa6af132f48d4e2bd9c52bee8fae636dde44770e2746ca9bf7f43a363036ed60587d0a268ae76209b2b0f8abb8702b9d25f70c1d4e5e7a1d3714cdc4c5e1c3618097986fb563646b0abf21c04415b9dd26b77ff4084481416e12279145087d8a7c46190e1655d7701b46e3b6ca500596e66b23509851c62f34470017cac9311f450020cba2dc198ad49b6c4b6c8ffa6e5e71e7737d1861d98d67ae39b82cd0a81d1e1bec65600779f9f7295217ce0ea8b9f298a7014085c27eacc5db6e6d4e8bc0c02d23fadb506194be3503014ec8d82f77020357b5a7b078c3431f5c8a42abaabe3d3c6a01926970548cc9ae48767b08c0a954553173b4055dd31ef288c289034fa16c388c57816c628d00f66f741f7598e4eba3c9e7530e539903a88ca98026f952ae19a344e015850d6b86c0f2704775050159553da33f4e5e75ab172f0969b8405ec442cc202151639597ed186569fe4976cafade401caf9a570f9213c5906b4ee9796698929b3be54606afe47872b410ecea30c7bfb0742f24993697155e2ec17780ca9001e8f53aae780042df985c26b16c4a8c2d3661ffeb6cbbefa66cc4d57487fcbcb014ec6bf9fdd5cc4539136106df578483401cc645b236bb6b05bf2aed45c53edc89a6ff854c711487671d01e4c980e2816d0453f2bd20475764d3d193db0f22b38606fa43ca8d2ee240366114d298f715ee84e1b36f2455095881d80dd12f247ab3c659bf0c6506a6901e052f5397cd144640edaefb08ce65bfe646f039b0f86cc479810d7392bd61710c091545fb6d04bd629aa04cad3306a4d1a8a8e3a5c784aea8763aac0c09d5308d3e5d083ee9b5c5f1f9e15c516e12d05b314df41916b805489e2a0562ffe21a1779763034029096d572157cf4004cf58cda9bc44c4a8a70a92fe7a4b4c3cd1c6a4c1fc5fae7d726b6c9f0904b71c37730cbdc24d0b596ec682233f11689165ddcb8ddc9194e2ad23c8db1027b50389b4211775ca6c79fda33d39095c7cd91d6390fc34f0bf4732399ceba5e7d90598797d8a4c0d31bc71cc94fc082b79e95c94c575ebc3cd8a02b3430b270ab354bf06c22c684ea12e11d07e709816dcd1efbf128e95e56e193177991b81c4af0d766cd42000aa3f951d27b43fefdb3d0edecc1f99ea5d16161300788ed87b64e582fae486316d864ed693a3c48e8b3183bd75e25fdda6769dce281c768b36e950d24d1e976d95fb0561842f2f040c060d3abc546d507eb6c250bae4c36a6bef316eb6cb5832975141815a430f8e67f7457c1fa9e33e101ff79d8cf2ecafed3ce3d855cb90052922b19288a4c51edb8a0dbb1c0a786c6f310c24686cf31c604ec2981acc6223451bbd956c7728450f6e3c2ecac2efbb82466881409586cd73ced2bc0a7b0808ddf0ddd685e3836ca915d28b5be4944ff5d0042291cb4bc7c725dfb5a9eb0df5b68fced9c972e3e883cf06e5f5162f21e097d52fde34d99303cd8d2ce26ee7ebe9d336b4a170ede3930d267e478b20b80ed255656367e011f350b35c1be65d4add894e7683a5b537ab6988e9e80c31b0c0dfe53625afd9b6d4dcc70bdaf6bf72d0ed21da34c30c3ddca05351b3a013d0e9673f69705f1edf90f2620b9e2b580960058309e9cabbfd954206422e471fb8e8689c18ab0548da6197629297a9371e9b896ae224f09cad6f8b8febab3a9c14f4c47e10b126ba8b34bcb8136e30eab9fedbb160ae4a0d4a4c5e6f630fb23065646f242aed8ecff885133d95fc747e347f2bed73133e10d219af9f9960cc7768b75a63494224ec8823c64d469718a6e15a4e3ecba5b40a5c2f598bbd8037c79f89983df2a1a4830b9e8759bb060c8cfa8e5a95786d173e3510ddeaf0bddea2d7aa30056f518d16d5bc99a69ffcd1d72eeaca4422fa5f700c8addad472191d12117678c02ba8fccbfeaff298fab14748052eef0b5b59547ef92a6cb871e698ca5e0ea1f99734f45d1ece917bf25d3a0bd107f84671eaf4efa1d9fd02f2a3815b61f7618848277a337617bc40027b5788d3f363e30bb6f93d40ce454d874f787dd95395892fe9b7bd396c05ddd0942a8310ff9260340e12bc79241f77468dc816870c12c6c4572b578397ecc262e68e4c7b7a5f07f6efd1c36f0ca905d3ee0b38f5477c8796500eefd0ffd87f564f1d1a18a68ececed0842c71231826950108516126673a73798d16aabf1f1a68ae35b0dba472ea969cae99279dbb5237ef6c80f41f6dbd50ef3e5b104e39af46bc6e780c887078a53d5fac0eb8f2401839020ccfeeeecd5ed452637326a9357332f8788b0e64155759d774f8ff1e41ea5db365417271eceea8f294bbc1fd2aef605547579179fc10a6133d8de12675e4a468caf9066e4e8cfffc1424bd0fbec168782f2406eec9c2937af4ea0ea64ad0c5965396c246d63e0942668b0d4ef2fce346957cbb7138c560bd95874ea11107e1d1391994f6296625ec1bbb9f54d969fc0e5e16df3cb1537006f4abb3fc0fa6e4e21cc3053be9b84b7d87ece535c270776ff4e18be59ed6a02ae5e889fe832300005c66608789e12a8937784cb44f1993ac984f1c4c722f144e21ec91b550158ba48bf7cdf721c3739c36ea6b770b298fd2b473a2e69ef141fc6fe60a37cfbc1e32e9eda2bd149af405d1d8638d5bc1a2a717a1b3dba918af8a25690be28148efbce1021edd8e3f9f8a816d6e8aceb2b32d6c4afaca08be628c53929a710908d99dcfea67f87f04f2037ef7185b1643022747679d588df483f0b4c20f8181d7ee7a89a5acc70a72bf5f7994eca790fc181d9b7275dda23f92884b80e7c5b0d985bd94941eb5087db9cdcc5428ca937e41edb23101eb78146b159de5b8a2478cfb577055786784d8ddb38d1c57f40e7afe6dc60036e84790b188be462222bd11e8e53948870505889e6d6451ee57cf275d83215bf8c0cb87f3d6f26b87c3faccd1ba33a451e310c94a6bd1b9c964184693d82ff646d5ee019546fb4393715ae934b8c7fbf03a8cff0021cd5fce898e1ec9384b907c617bf52f208704e08a225cca04084e18ee4f12a5b634e488265b2f7ea0988584f9742ade28b22f18c0c2ae2f34117ba8a82af7fcbdac91dc39c7b567419a586ad0adac549e1237f968635f450ee726566ab76256f773db6b3504c4d057059819c22e544a345868a33e91febf8d6f0df462bc4b2227341d8e02a5213ecd05360e1ac5be90f75bbd8a9ebf47d70ce6c89f506868008f3a4af56773aff52a8b7734423a1853c2ad9bc2a2c4d401520498571d2640e31803bb85252fa0688e61f4b9cfca763623e4a2f30f6fb108869cb6522236e1740f9291b0512de6db3fc112e1134680d03f1785b5d90afd38b0ab2532209e398f2d23d07965e1c25929aa43d18f112d19e61a574e41bc8e1f259eac17f652a67e5698d3b93fa3c6096243249a8b0d6360c792c699d83be6d40a98568ca6cce7b715131da613fa4270d3b7c46247a96", 0x1000, 0x40}, {&(0x7f0000000480)="8413f3d157f6b91b2367675b5452a16066cb09af1ff8356ec7c508fcdfc8df471b169147597f1cdeedb91c6e371f1551c1bc859d80d212ed775c9ce9e971b7ebefeb76d2e7d1fb7b21fee7408a0e1b16f2e7474112d54ec58b54149dc774f5", 0x5f, 0x100000000}, {&(0x7f0000000500)="7cd678a33639eece1acd48a65f94cb8c93ea8fb71460ea55e0d1280a9c23d843402880d7d967da19ebab7ae91ca36a20701e54b33f7de194e5b95498a65fc14345d5b7f89b454096afec0d21d89c15fc23d6356032687dab792722148e717af8a7e4808bf1d790a114071877ce38e468d60c22097a40c75704d06a517ab5457df32816c2ab21edfbef400df3c7ab8623eb258a68ef10d2", 0x97, 0x4}, {&(0x7f0000001800)="6b99eb1bc623057aabf0e43d1abae81648ac2493b570fe7a1e41a1ebac9894112390d1150d8a6191bfc951a46ee1de9c2dff6910aaa97a61010892d8770f1f3051ddc74079608665c72c04947124dcc297445c447e7dc7c0026c05644daeec89fabd3dc90bc7ed14c1fa92026e9fa7ca30f2dc0361ac8c5525e6a40aac8ed12446ee00d5c370e26673d726333209b7f70de7b9fc002ac2cde54be7573570f0a223721415ceab2b7a7d343c9d2d99bb47e4fe6e1f91e125e88656b6f8717ff43cab477d5f8f87b22d6e05919872be1035d5dd37f213b081ece7180be06c3a9b3c4f2462ff27281c59ad7b5315ff7b85e3c2486e", 0xf3, 0x7}], 0x28080, &(0x7f0000002e40)=ANY=[@ANYBLOB='utf8=0,utf8=1,measure,euid>', @ANYRESDEC=r6, @ANYBLOB="2c66736d616769633d3078303030303030303030383030303030302c6673757569643d62333338003863372d3432365f7db1ed52288f575134302d64625835303934662c00fde50e20156fddf12ec1b39508040f99926b534b5a0d966df2f42ce5bf4458794e0ab4df0a4bbb2fee4e7aca7ddf69ff4a7279dcfcf6d96028dad54544c31de0a1cecef2766cd70223ca799ae70918650ef29c1a1a6c809621e8eb9dcb9a462674d9ccf6b5b334c48b8fb42d311bce1c49236bd082e282a052c5dce211e61fecfc2d737b37a247d5203b50aa57c89a2ef11d9a18f4b56bbfd7f255bf48e2d652442adff11d8f5c72f902a472e73b681b2925378c55e38c3cd1486f6c"]) (async, rerun: 32) r7 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x78}, 0xffffffffffffffff, 0x0, r2, 0x1) (rerun: 32) r8 = dup2(r3, r7) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001a40)={0x0, "23f3bb33abad73d3366ff4ca21a5a9fa"}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002a40)={r9, 0xfff, 0x1ff}) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x4) 12:08:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x2, 0x7, @thr={&(0x7f0000000340)="4ce67e8b64d3a51848c8fbab4c8ce447fa6eae911f18a90df9dac9ea6f7c314661427c0733842134c78b2e7e87873ac16b523e7d6dea152fd11ceb5bfe9aa28db463642c84f12ff871141692661f9c63a57b3c6b935a8b78aab1148cb5c93925286f870b4788bc512301552a20aa8e8f", &(0x7f00000003c0)="0d17678be900f97c51dad7eebc27ffd7e030f400d8dbea0d5de46b171476fa328d474a81789b7fa29b2beef66586610318c8d924e90464f7b3231ae7751a51b351088dbf5c71272f1646d41c2b98747b1e4a134cea1fc0effdfd580382f9627c3f19da791018a6bec40e4e969d09edd028e09a7fc16d9496584d87c9a9cbc4ce644f4fa3da2eff198023228313ede5ac460de73b0da45b0787dc2fa4035b55bc9408319ac2f297aee2"}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2a, 0x2}, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r7+10000000}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {r8, r9+60000000}}, 0x0) pselect6(0x40, &(0x7f0000000480)={0x1, 0x3, 0x9, 0x4, 0x10001, 0x20, 0xce3, 0x36e3d52f}, &(0x7f00000004c0)={0x1, 0x1, 0x400, 0x0, 0x97, 0x5, 0x6, 0x4}, &(0x7f0000000500)={0x3f, 0x0, 0x2, 0x9, 0xe56, 0x4, 0x1, 0xa178}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1]}, 0x8}) 12:08:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000180003"], 0x40}}, 0x0) 12:08:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa9c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000110800010001000000080001"], 0x40}}, 0x0) 12:08:41 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) 12:08:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000200003"], 0x40}}, 0x0) 12:08:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000120800010001000000080001"], 0x40}}, 0x0) 12:08:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaa00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3283.662482][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3283.676638][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3283.687224][T30998] loop1: detected capacity change from 0 to 140 [ 3283.699317][T30998] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:41 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r0, r1+60000000}, 0x0) 12:08:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000280003"], 0x40}}, 0x0) 12:08:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000180800010001000000080001"], 0x40}}, 0x0) [ 3283.733649][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3283.773812][T31002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3283.809958][T31004] loop1: detected capacity change from 0 to 140 [ 3283.822502][T31004] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3283.844179][T31008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3283.886228][T31010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:52 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="760000000100000008000000d3a7fdb6000000000900000040000000"], &(0x7f0000000180), 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/209, 0xd1}]}, &(0x7f0000000140)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10000, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) fchown(r4, r6, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000001900)=[{&(0x7f0000000240)="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", 0xfe, 0x2}, {&(0x7f0000000340)="f0792da7a979f08ae696544dfcd8b9659d808710b3460b7259a32e54f40aa26390a543abf185c50b529e1cc935317fcf09ebb8dae7f2bc40cb8f6ac0a64411aae1889853e38478fb2debff144fc5e8675b987efebb2afea67105a63c22976bb31fe53956a29343ae3be1a66a8519e12b40c2805631dcfc047717663fcd68df1fdaf3118b9e6f7a69d54f480fd82898d1fdbf381ab25dc2", 0x97, 0x4}, {&(0x7f0000000400)="eea4f81ad48670200ec81265ddb1b7c1e054f59fef102fed9f88a5cb374f47751096891d0c8edfab94d36d093cd8b14c13342d0001ee22392fa0f6731ab6af9fca090480b49f80e880feac25290d3b9cea5e", 0x52}, {&(0x7f0000000800)="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", 0x1000, 0x40}, {&(0x7f0000000480)="8413f3d157f6b91b2367675b5452a16066cb09af1ff8356ec7c508fcdfc8df471b169147597f1cdeedb91c6e371f1551c1bc859d80d212ed775c9ce9e971b7ebefeb76d2e7d1fb7b21fee7408a0e1b16f2e7474112d54ec58b54149dc774f5", 0x5f, 0x100000000}, {&(0x7f0000000500)="7cd678a33639eece1acd48a65f94cb8c93ea8fb71460ea55e0d1280a9c23d843402880d7d967da19ebab7ae91ca36a20701e54b33f7de194e5b95498a65fc14345d5b7f89b454096afec0d21d89c15fc23d6356032687dab792722148e717af8a7e4808bf1d790a114071877ce38e468d60c22097a40c75704d06a517ab5457df32816c2ab21edfbef400df3c7ab8623eb258a68ef10d2", 0x97, 0x4}, {&(0x7f0000001800)="6b99eb1bc623057aabf0e43d1abae81648ac2493b570fe7a1e41a1ebac9894112390d1150d8a6191bfc951a46ee1de9c2dff6910aaa97a61010892d8770f1f3051ddc74079608665c72c04947124dcc297445c447e7dc7c0026c05644daeec89fabd3dc90bc7ed14c1fa92026e9fa7ca30f2dc0361ac8c5525e6a40aac8ed12446ee00d5c370e26673d726333209b7f70de7b9fc002ac2cde54be7573570f0a223721415ceab2b7a7d343c9d2d99bb47e4fe6e1f91e125e88656b6f8717ff43cab477d5f8f87b22d6e05919872be1035d5dd37f213b081ece7180be06c3a9b3c4f2462ff27281c59ad7b5315ff7b85e3c2486e", 0xf3, 0x7}], 0x28080, &(0x7f0000002e40)=ANY=[@ANYBLOB='utf8=0,utf8=1,measure,euid>', @ANYRESDEC=r6, @ANYBLOB="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"]) r7 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x78}, 0xffffffffffffffff, 0x0, r2, 0x1) r8 = dup2(r3, r7) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001a40)={0x0, "23f3bb33abad73d3366ff4ca21a5a9fa"}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002a40)={r9, 0xfff, 0x1ff}) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x4) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write(r0, &(0x7f0000000600)="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", 0x200) (async) sendfile(r0, r1, 0x0, 0xef85) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="760000000100000008000000d3a7fdb6000000000900000040000000"], &(0x7f0000000180), 0x1000) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/209, 0xd1}]}, &(0x7f0000000140)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10000, 0x0, 0x0}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r6) (async) fchown(r4, r6, 0x0) (async) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000001900)=[{&(0x7f0000000240)="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", 0xfe, 0x2}, {&(0x7f0000000340)="f0792da7a979f08ae696544dfcd8b9659d808710b3460b7259a32e54f40aa26390a543abf185c50b529e1cc935317fcf09ebb8dae7f2bc40cb8f6ac0a64411aae1889853e38478fb2debff144fc5e8675b987efebb2afea67105a63c22976bb31fe53956a29343ae3be1a66a8519e12b40c2805631dcfc047717663fcd68df1fdaf3118b9e6f7a69d54f480fd82898d1fdbf381ab25dc2", 0x97, 0x4}, {&(0x7f0000000400)="eea4f81ad48670200ec81265ddb1b7c1e054f59fef102fed9f88a5cb374f47751096891d0c8edfab94d36d093cd8b14c13342d0001ee22392fa0f6731ab6af9fca090480b49f80e880feac25290d3b9cea5e", 0x52}, {&(0x7f0000000800)="71db79dfb57437eef0f1c78bb1c45556894361a823aaed2eeff814afedc990bdb5c1d36e22fe140d87681079e5c55938bc0782d680e34ecd43de1c6da7c76ce7ace518d0473d022f98338a60a26b56cd8ab11cc33f8d160e3a7d107e23004e5e84b92c7e1c7d893c5bd05c632a54ea0137b19cdf0dfae9bdb4389ec07f5183c7c16c70039a13e3666051c8ddf7e2bf376e035819b23cf7988ef203023cc458a95476d13580f5f9f51d570aad136ed3a67ff7143d74c60d8c167d78b7c5c21a15abd5ded3740db5e327f352fe17fd77b0b38a7e2ac67965556089708863cbe9a1fb77ed5311ecc90f47610b37422ef63299ed7d4d070c1434225c305017687354af5d77ea68ceb4a0288ee6097617a6d57601d8368c17b5c14b97aa5c084192e53a9cc1b52d6b9db85e99291fb72f3232f1c3f4be5657faffd3b182a3d070c8b9dc39f4a42cee715799315385db9d29cbdf4e76aec052325f4ca85fad134b061d0d6903a8c98a64adfeb4abb8289cf0d8441b0d7a7bf537eedadb586c17705f5d5bdae0f0d4179d4d4e5a7b49b104168e1a5f883938cc92b2704c0aa3c4e99fff03fe6e18bff64da279168a57e5c13c54d73f75e68546de6150b5d509693e6d7a17849e51600c32c0acfbb7ce595805c9518d7c49598deee024e973a82ff3f97c27cbf0bef82e588530549bfb26d24653764bc0fd2b3a849b0d079a26e99ff07625e7ac0b265afbb82c3c30b7c138763b67143b28a12aaf0996c87ef63963b62f7b4139277d02284c4b68a4393bb4d6655343d89a66797fd2e65f9a1842f05fd32964ddaa6df622030354652123b8f0c665016302dfc9d9cf96151d4271ef959ba6592d2c22f74023511334107169a28f616e112752b7b953a513639982b959a69a178a30788f02be57eb553d3271a91c64ddb161d423e5e12b6ac723101eecc3743230d0773bfb2be6faadac0f1bb729b11fc1aea5d60588208a95ae57341fc10d03be92630e823931ad19005e5440a42cb464ac4c49c9e6f94abb3620dd20c735c290165c3cf44f32edc66a8bef2b68807fe4a3faefc7e6783356d8c07f7c9ac9488040f32530a2f318b5ad94bd466f6e3a2520d134e61136a5f3f579dc4d221146e7af35570ed6fce8c695f4b0136ab9fa6cffa0e35888d6bbf107042455d1dc4096ea873089c634f297dc463823f9c0a7b2e5b7812a445f34a47d89960d9f23dceccbd09469015e7d1f935a18c50b9d7f90ba44d8b98cbafc703d52034fdd2c22243e93f07018eccf321ac9b4eb4a698fd6e187728ed66fd98e26aefa2a85565982de50457a7e127eefa3c03ae9cc12ebe0f022aa9b47d445a7c1f71539c592b5c88b380984033ccb43bd4a480d63dd1b7e39889afd5d158a1a3170bdb19b7f0ca539c4e997174074936d3b366c3a27befbc9e2efef659c3c908b542bef2e66ee97a49a479241fd028b3c99fdd453da3e2f0686d1878157c8211fec01375df40d8c852d03f4920dee744d4e7fa59eb08d90403d243732c06f91f689ee2d3b35aab8642ef96988dd71b718d94a78cc1c9c3ec2250bcc96cece18807c37af48e06cb2d93fb33a578090eb66b500d275b45f048ef6809d00cadc7458f71147404cd6a60ebc6c2404f55e35abf12869a22004bd8bb812c2577787e7750b288715af473a43d7a976922ad5fbb2de9ec18f87b95b62a7291511942fc1619355d590253f1703e863ceec5b0856192a9aa59a34a4dd1a42f15d2a169f65c576a4eea87b684bf6c88b5955496bc74ca21ad91678306d795ca9cac2810897a48c27fae06d578f7305de1ad55f49e89fa70c55a14e279d3d7b9fcfb2cb92b0e271b8bfe15798d19214090bb82e71c87f732ca5641259b9d8cff6eaeeddc924942a6f47db6041a4ec7c3273691f87da1de5b456adbb1a4db253f5dfe1bc3349779756e541149ddc31e755aebfae837cac3ec2a71d83058d840d26c471fc748665420323e4bc9c0e3ae5045799e8907168090a7b013ab8d547f114f5fac0e66639d047fa45e3b6ef44bb41d9f6490f642eae2e2147bc622df2c502eed6c6cf538449ec3ee56c73852cf6112a738eb4c31c795860730fb6f95cdba1ef88e8cb45a81d7a77d1bd58e3700bb30949fa49ba2e7962ef58375149d3695761c92ed8917547cc9f3070fb0fbdbfd728dd4171ac58df75f30ccb4d48b11ea026ef1a070ae0b4e0d2e85616b3d646ffa30b7e0e50fb2a7e1c9cfdd5d1592d1266214348a2393d24c72570b7927ec2660e2b62713760cb97a96e995c0a87dc6b970fa6af132f48d4e2bd9c52bee8fae636dde44770e2746ca9bf7f43a363036ed60587d0a268ae76209b2b0f8abb8702b9d25f70c1d4e5e7a1d3714cdc4c5e1c3618097986fb563646b0abf21c04415b9dd26b77ff4084481416e12279145087d8a7c46190e1655d7701b46e3b6ca500596e66b23509851c62f34470017cac9311f450020cba2dc198ad49b6c4b6c8ffa6e5e71e7737d1861d98d67ae39b82cd0a81d1e1bec65600779f9f7295217ce0ea8b9f298a7014085c27eacc5db6e6d4e8bc0c02d23fadb506194be3503014ec8d82f77020357b5a7b078c3431f5c8a42abaabe3d3c6a01926970548cc9ae48767b08c0a954553173b4055dd31ef288c289034fa16c388c57816c628d00f66f741f7598e4eba3c9e7530e539903a88ca98026f952ae19a344e015850d6b86c0f2704775050159553da33f4e5e75ab172f0969b8405ec442cc202151639597ed186569fe4976cafade401caf9a570f9213c5906b4ee9796698929b3be54606afe47872b410ecea30c7bfb0742f24993697155e2ec17780ca9001e8f53aae780042df985c26b16c4a8c2d3661ffeb6cbbefa66cc4d57487fcbcb014ec6bf9fdd5cc4539136106df578483401cc645b236bb6b05bf2aed45c53edc89a6ff854c711487671d01e4c980e2816d0453f2bd20475764d3d193db0f22b38606fa43ca8d2ee240366114d298f715ee84e1b36f2455095881d80dd12f247ab3c659bf0c6506a6901e052f5397cd144640edaefb08ce65bfe646f039b0f86cc479810d7392bd61710c091545fb6d04bd629aa04cad3306a4d1a8a8e3a5c784aea8763aac0c09d5308d3e5d083ee9b5c5f1f9e15c516e12d05b314df41916b805489e2a0562ffe21a1779763034029096d572157cf4004cf58cda9bc44c4a8a70a92fe7a4b4c3cd1c6a4c1fc5fae7d726b6c9f0904b71c37730cbdc24d0b596ec682233f11689165ddcb8ddc9194e2ad23c8db1027b50389b4211775ca6c79fda33d39095c7cd91d6390fc34f0bf4732399ceba5e7d90598797d8a4c0d31bc71cc94fc082b79e95c94c575ebc3cd8a02b3430b270ab354bf06c22c684ea12e11d07e709816dcd1efbf128e95e56e193177991b81c4af0d766cd42000aa3f951d27b43fefdb3d0edecc1f99ea5d16161300788ed87b64e582fae486316d864ed693a3c48e8b3183bd75e25fdda6769dce281c768b36e950d24d1e976d95fb0561842f2f040c060d3abc546d507eb6c250bae4c36a6bef316eb6cb5832975141815a430f8e67f7457c1fa9e33e101ff79d8cf2ecafed3ce3d855cb90052922b19288a4c51edb8a0dbb1c0a786c6f310c24686cf31c604ec2981acc6223451bbd956c7728450f6e3c2ecac2efbb82466881409586cd73ced2bc0a7b0808ddf0ddd685e3836ca915d28b5be4944ff5d0042291cb4bc7c725dfb5a9eb0df5b68fced9c972e3e883cf06e5f5162f21e097d52fde34d99303cd8d2ce26ee7ebe9d336b4a170ede3930d267e478b20b80ed255656367e011f350b35c1be65d4add894e7683a5b537ab6988e9e80c31b0c0dfe53625afd9b6d4dcc70bdaf6bf72d0ed21da34c30c3ddca05351b3a013d0e9673f69705f1edf90f2620b9e2b580960058309e9cabbfd954206422e471fb8e8689c18ab0548da6197629297a9371e9b896ae224f09cad6f8b8febab3a9c14f4c47e10b126ba8b34bcb8136e30eab9fedbb160ae4a0d4a4c5e6f630fb23065646f242aed8ecff885133d95fc747e347f2bed73133e10d219af9f9960cc7768b75a63494224ec8823c64d469718a6e15a4e3ecba5b40a5c2f598bbd8037c79f89983df2a1a4830b9e8759bb060c8cfa8e5a95786d173e3510ddeaf0bddea2d7aa30056f518d16d5bc99a69ffcd1d72eeaca4422fa5f700c8addad472191d12117678c02ba8fccbfeaff298fab14748052eef0b5b59547ef92a6cb871e698ca5e0ea1f99734f45d1ece917bf25d3a0bd107f84671eaf4efa1d9fd02f2a3815b61f7618848277a337617bc40027b5788d3f363e30bb6f93d40ce454d874f787dd95395892fe9b7bd396c05ddd0942a8310ff9260340e12bc79241f77468dc816870c12c6c4572b578397ecc262e68e4c7b7a5f07f6efd1c36f0ca905d3ee0b38f5477c8796500eefd0ffd87f564f1d1a18a68ececed0842c71231826950108516126673a73798d16aabf1f1a68ae35b0dba472ea969cae99279dbb5237ef6c80f41f6dbd50ef3e5b104e39af46bc6e780c887078a53d5fac0eb8f2401839020ccfeeeecd5ed452637326a9357332f8788b0e64155759d774f8ff1e41ea5db365417271eceea8f294bbc1fd2aef605547579179fc10a6133d8de12675e4a468caf9066e4e8cfffc1424bd0fbec168782f2406eec9c2937af4ea0ea64ad0c5965396c246d63e0942668b0d4ef2fce346957cbb7138c560bd95874ea11107e1d1391994f6296625ec1bbb9f54d969fc0e5e16df3cb1537006f4abb3fc0fa6e4e21cc3053be9b84b7d87ece535c270776ff4e18be59ed6a02ae5e889fe832300005c66608789e12a8937784cb44f1993ac984f1c4c722f144e21ec91b550158ba48bf7cdf721c3739c36ea6b770b298fd2b473a2e69ef141fc6fe60a37cfbc1e32e9eda2bd149af405d1d8638d5bc1a2a717a1b3dba918af8a25690be28148efbce1021edd8e3f9f8a816d6e8aceb2b32d6c4afaca08be628c53929a710908d99dcfea67f87f04f2037ef7185b1643022747679d588df483f0b4c20f8181d7ee7a89a5acc70a72bf5f7994eca790fc181d9b7275dda23f92884b80e7c5b0d985bd94941eb5087db9cdcc5428ca937e41edb23101eb78146b159de5b8a2478cfb577055786784d8ddb38d1c57f40e7afe6dc60036e84790b188be462222bd11e8e53948870505889e6d6451ee57cf275d83215bf8c0cb87f3d6f26b87c3faccd1ba33a451e310c94a6bd1b9c964184693d82ff646d5ee019546fb4393715ae934b8c7fbf03a8cff0021cd5fce898e1ec9384b907c617bf52f208704e08a225cca04084e18ee4f12a5b634e488265b2f7ea0988584f9742ade28b22f18c0c2ae2f34117ba8a82af7fcbdac91dc39c7b567419a586ad0adac549e1237f968635f450ee726566ab76256f773db6b3504c4d057059819c22e544a345868a33e91febf8d6f0df462bc4b2227341d8e02a5213ecd05360e1ac5be90f75bbd8a9ebf47d70ce6c89f506868008f3a4af56773aff52a8b7734423a1853c2ad9bc2a2c4d401520498571d2640e31803bb85252fa0688e61f4b9cfca763623e4a2f30f6fb108869cb6522236e1740f9291b0512de6db3fc112e1134680d03f1785b5d90afd38b0ab2532209e398f2d23d07965e1c25929aa43d18f112d19e61a574e41bc8e1f259eac17f652a67e5698d3b93fa3c6096243249a8b0d6360c792c699d83be6d40a98568ca6cce7b715131da613fa4270d3b7c46247a96", 0x1000, 0x40}, {&(0x7f0000000480)="8413f3d157f6b91b2367675b5452a16066cb09af1ff8356ec7c508fcdfc8df471b169147597f1cdeedb91c6e371f1551c1bc859d80d212ed775c9ce9e971b7ebefeb76d2e7d1fb7b21fee7408a0e1b16f2e7474112d54ec58b54149dc774f5", 0x5f, 0x100000000}, {&(0x7f0000000500)="7cd678a33639eece1acd48a65f94cb8c93ea8fb71460ea55e0d1280a9c23d843402880d7d967da19ebab7ae91ca36a20701e54b33f7de194e5b95498a65fc14345d5b7f89b454096afec0d21d89c15fc23d6356032687dab792722148e717af8a7e4808bf1d790a114071877ce38e468d60c22097a40c75704d06a517ab5457df32816c2ab21edfbef400df3c7ab8623eb258a68ef10d2", 0x97, 0x4}, {&(0x7f0000001800)="6b99eb1bc623057aabf0e43d1abae81648ac2493b570fe7a1e41a1ebac9894112390d1150d8a6191bfc951a46ee1de9c2dff6910aaa97a61010892d8770f1f3051ddc74079608665c72c04947124dcc297445c447e7dc7c0026c05644daeec89fabd3dc90bc7ed14c1fa92026e9fa7ca30f2dc0361ac8c5525e6a40aac8ed12446ee00d5c370e26673d726333209b7f70de7b9fc002ac2cde54be7573570f0a223721415ceab2b7a7d343c9d2d99bb47e4fe6e1f91e125e88656b6f8717ff43cab477d5f8f87b22d6e05919872be1035d5dd37f213b081ece7180be06c3a9b3c4f2462ff27281c59ad7b5315ff7b85e3c2486e", 0xf3, 0x7}], 0x28080, &(0x7f0000002e40)=ANY=[@ANYBLOB='utf8=0,utf8=1,measure,euid>', @ANYRESDEC=r6, @ANYBLOB="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"]) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x78}, 0xffffffffffffffff, 0x0, r2, 0x1) (async) dup2(r3, r7) (async) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001a40)={0x0, "23f3bb33abad73d3366ff4ca21a5a9fa"}) (async) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002a40)={r9, 0xfff, 0x1ff}) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x4) (async) 12:08:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaa40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:08:52 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000300003"], 0x40}}, 0x0) 12:08:52 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000200800010001000000080001"], 0x40}}, 0x0) 12:08:52 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) 12:08:52 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x2, 0x7, @thr={&(0x7f0000000340)="4ce67e8b64d3a51848c8fbab4c8ce447fa6eae911f18a90df9dac9ea6f7c314661427c0733842134c78b2e7e87873ac16b523e7d6dea152fd11ceb5bfe9aa28db463642c84f12ff871141692661f9c63a57b3c6b935a8b78aab1148cb5c93925286f870b4788bc512301552a20aa8e8f", &(0x7f00000003c0)="0d17678be900f97c51dad7eebc27ffd7e030f400d8dbea0d5de46b171476fa328d474a81789b7fa29b2beef66586610318c8d924e90464f7b3231ae7751a51b351088dbf5c71272f1646d41c2b98747b1e4a134cea1fc0effdfd580382f9627c3f19da791018a6bec40e4e969d09edd028e09a7fc16d9496584d87c9a9cbc4ce644f4fa3da2eff198023228313ede5ac460de73b0da45b0787dc2fa4035b55bc9408319ac2f297aee2"}}, &(0x7f00009b1ffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_getoverrun(r1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2a, 0x2}, &(0x7f0000000080)=0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) (async) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r7+10000000}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {r8, r9+60000000}}, 0x0) (async) pselect6(0x40, &(0x7f0000000480)={0x1, 0x3, 0x9, 0x4, 0x10001, 0x20, 0xce3, 0x36e3d52f}, &(0x7f00000004c0)={0x1, 0x1, 0x400, 0x0, 0x97, 0x5, 0x6, 0x4}, &(0x7f0000000500)={0x3f, 0x0, 0x2, 0x9, 0xe56, 0x4, 0x1, 0xa178}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1]}, 0x8}) 12:08:52 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000250800010001000000080001"], 0x40}}, 0x0) 12:08:52 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000040003"], 0x40}}, 0x0) 12:08:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaa80, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3294.961647][T31017] loop1: detected capacity change from 0 to 140 [ 3294.972080][T31019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3294.983032][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3294.984353][T31017] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:08:52 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000480800010001000000080001"], 0x40}}, 0x0) 12:08:52 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000100003"], 0x40}}, 0x0) 12:08:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaac0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3295.091119][T31026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3295.101785][T31028] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 3295.120104][T31029] loop1: detected capacity change from 0 to 140 [ 3295.129715][T31029] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3295.198140][T31032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3295.225873][T31033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3295.261845][T31035] loop1: detected capacity change from 0 to 140 [ 3295.274515][T31035] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) 12:09:01 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) statx(r0, &(0x7f0000000200)='./file0\x00', 0x400, 0x7fe, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="757dc4365e1950dc885e87f3740601fbadf4c7c87050aedf03484e585e30315afd47a897a312a86f7a20ef614a67b3a97299ebd78533dc33adae63b0be1c23f0f7b79e08771b2f77aeefd9d7148cf686a3b0fee562e2eb3c8aa3329bc79131de85b03ad5f1baff34a768e5c931080276316bfaf358ad385c3ab115e59a053cd5a9f74f01037d1371e86c764fc7a9311a7807", 0x92, 0xffff}], 0x40084, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@nonumtail}], [{@hash}, {@euid_lt={'euid<', r2}}, {@obj_role={'obj_role', 0x3d, '#!\'/:.'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '$@}:.'}}, {@smackfshat}]}) 12:09:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400004c0800010001000000080001"], 0x40}}, 0x0) 12:09:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000180003"], 0x40}}, 0x0) 12:09:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xab00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 12:09:01 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x2, 0x7, @thr={&(0x7f0000000340)="4ce67e8b64d3a51848c8fbab4c8ce447fa6eae911f18a90df9dac9ea6f7c314661427c0733842134c78b2e7e87873ac16b523e7d6dea152fd11ceb5bfe9aa28db463642c84f12ff871141692661f9c63a57b3c6b935a8b78aab1148cb5c93925286f870b4788bc512301552a20aa8e8f", &(0x7f00000003c0)="0d17678be900f97c51dad7eebc27ffd7e030f400d8dbea0d5de46b171476fa328d474a81789b7fa29b2beef66586610318c8d924e90464f7b3231ae7751a51b351088dbf5c71272f1646d41c2b98747b1e4a134cea1fc0effdfd580382f9627c3f19da791018a6bec40e4e969d09edd028e09a7fc16d9496584d87c9a9cbc4ce644f4fa3da2eff198023228313ede5ac460de73b0da45b0787dc2fa4035b55bc9408319ac2f297aee2"}}, &(0x7f00009b1ffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_getoverrun(r1) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 32) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2a, 0x2}, &(0x7f0000000080)=0x0) (rerun: 32) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) clock_gettime(0x0, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r7+10000000}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {r8, r9+60000000}}, 0x0) pselect6(0x40, &(0x7f0000000480)={0x1, 0x3, 0x9, 0x4, 0x10001, 0x20, 0xce3, 0x36e3d52f}, &(0x7f00000004c0)={0x1, 0x1, 0x400, 0x0, 0x97, 0x5, 0x6, 0x4}, &(0x7f0000000500)={0x3f, 0x0, 0x2, 0x9, 0xe56, 0x4, 0x1, 0xa178}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1]}, 0x8}) 12:09:01 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={r1, r2+60000000}, 0x0) [ 3304.247030][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3304.257078][T31045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3304.267558][T31048] ================================================================== [ 3304.275655][T31048] BUG: KCSAN: data-race in do_timer_create / do_timer_create [ 3304.283028][T31048] [ 3304.285341][T31048] write to 0xffff888102651704 of 4 bytes by task 31049 on cpu 1: [ 3304.293081][T31048] do_timer_create+0x376/0xa80 [ 3304.297847][T31048] __x64_sys_timer_create+0xb7/0xe0 [ 3304.303049][T31048] do_syscall_64+0x44/0xd0 [ 3304.307492][T31048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3304.313392][T31048] [ 3304.315706][T31048] read to 0xffff888102651704 of 4 bytes by task 31048 on cpu 0: [ 3304.323325][T31048] do_timer_create+0x1e3/0xa80 [ 3304.328097][T31048] __x64_sys_timer_create+0xb7/0xe0 [ 3304.333309][T31048] do_syscall_64+0x44/0xd0 [ 3304.337726][T31048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3304.343615][T31048] 12:09:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000600800010001000000080001"], 0x40}}, 0x0) 12:09:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000280003"], 0x40}}, 0x0) [ 3304.345923][T31048] value changed: 0x00000017 -> 0x00000020 [ 3304.351629][T31048] [ 3304.353943][T31048] Reported by Kernel Concurrency Sanitizer on: [ 3304.360079][T31048] CPU: 0 PID: 31048 Comm: syz-executor.0 Not tainted 5.17.0-rc5-syzkaller-00004-g038101e6b2cd-dirty #0 [ 3304.371096][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3304.381143][T31048] ================================================================== 12:09:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000680800010001000000080001"], 0x40}}, 0x0) 12:09:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xab40, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 3304.396510][T31047] loop1: detected capacity change from 0 to 140 [ 3304.406031][T31047] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3304.424153][T31051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:09:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf2508000300040000000800010001000000080001000100000008000100000000000800150002000000300003"], 0x40}}, 0x0) [ 3304.474370][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 12:09:02 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000a14090327bd7000ffdbdf25080003000400006c0800010001000000080001"], 0x40}}, 0x0) [ 3304.533148][T31056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3304.555980][T31057] loop1: detected capacity change from 0 to 140 [ 3304.565468][T31057] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (70 blocks) [ 3304.600745][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3304.666428][T31061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.