1f8d5ecaed2ae661151593d63612c8dc3d63b43a56928a549c65974a8b1c2bff291c0e5e5fc904d2566604ac9a6e94e0f1e773f507ff00959a6fc42c0813a9dfbca67a992f3817edd22e460fbfddd2c1509a9859002c8d1649f75f095", @typed={0x8, 0x7d, @str=':\x00'}, @generic="08c9d6b6c149a7df6dbe1f1b08b997d0e18606af4ddede13f7769960770fedab69b9c27d1b8926913f89b210990fb0b448901e258e8c8b1ed41dd4031119a777686db90a3318dea5eab0307c375ed571181501d4ed7f5575d9844e700510477b3c4c50e41a59364441f88ce58a9f800c6b659b4e8699b8b408f8cc5327208ce6d10349e53323595c9bacdc8d190673d0155c33d6a3eea72fe4fbbac6300fad7336fb40b23d51240c04fdf8b2cf08c87ab24c95395e265d80f10a80c6c8334f", @generic="2ef41f59b57151394893f352b779c69bde9511081a5e10", @typed={0x8, 0x33, @fd=r2}]}, @typed={0x8, 0x84, @fd=r3}, @typed={0x20, 0x58, @binary="37f9c1a5a406ac87bc0b18534aa560f57dcef2317c035975ebbbcc"}, @generic="db46cce534af2ddf858eccb934b42ea04facef85", @generic="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"]}, 0x3c4}], 0x6, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r7, r6, r9}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x40, 0x4000000}, 0x800)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000002400)={{&(0x7f0000a00000/0x600000)=nil, 0x600000}, 0x1})
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000002440)={0x4, [0x3db48a5a, 0x5, 0x1, 0x800]}, &(0x7f0000002480)=0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={<r10=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xffffffffffff7fff, @remote, 0x3}, r10}}, 0x30)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000002580)={0x97, 0x9, 0x6, 0x8, 0xffffffff})
mount$9p_rdma(&(0x7f00000025c0)='127.0.0.1\x00', &(0x7f0000002600)='./file0\x00', &(0x7f0000002640)='9p\x00', 0x12, &(0x7f0000002680)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@afid={'afid', 0x3d, 0xffffffff}}, {@rq={'rq', 0x3d, 0x41}}]}})
socketpair(0x8, 0x4, 0x9, &(0x7f0000002740)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000002780)={r1, 0xade6}, 0x8)

11:49:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0)

11:49:44 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f00000010c0)='/dev/adsp#\x00', 0x0, 0xc0042)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x7, [0x8, 0x7, 0x6c, 0x1, 0x2, 0x1000, 0x6]}, 0x12)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="23ca9bbdb6157a91ca31289cc19ba064", 0x10)
finit_module(r0, &(0x7f0000000180)='wlan0wlan1{\x00', 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x33, @empty, 0x4e22, 0x2, 'ovf\x00', 0x20, 0x200000000000ff, 0x60}, 0x2c)
r1 = getpgrp(0xffffffffffffffff)
memfd_create(&(0x7f0000000040)="1300", 0x1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r2=>0x0)
kcmp(r1, r2, 0x6, r0, r0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x401, 0x210080)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)

11:49:44 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000030}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:44 executing program 4 (fault-call:0 fault-nth:75):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  370.760756] FAULT_INJECTION: forcing a failure.
[  370.760756] name failslab, interval 1, probability 0, space 0, times 0
[  370.772145] CPU: 1 PID: 15465 Comm: syz-executor4 Not tainted 4.18.0+ #205
[  370.779172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  370.788529] Call Trace:
[  370.791146]  dump_stack+0x1c9/0x2b4
[  370.794806]  ? dump_stack_print_info.cold.2+0x52/0x52
[  370.800031]  should_fail.cold.4+0xa/0x11
[  370.804124]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  370.809244]  ? lock_downgrade+0x8f0/0x8f0
[  370.813432]  ? kasan_check_read+0x11/0x20
[  370.817591]  ? rcu_is_watching+0x8c/0x150
[  370.821734]  ? graph_lock+0x170/0x170
[  370.825526]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  370.830186]  ? find_held_lock+0x36/0x1c0
[  370.834237]  ? __lock_is_held+0xb5/0x140
[  370.838330]  ? check_same_owner+0x340/0x340
[  370.842674]  ? rcu_note_context_switch+0x680/0x680
[  370.847607]  __should_failslab+0x124/0x180
[  370.851834]  should_failslab+0x9/0x14
[  370.855622]  __kmalloc+0x2b2/0x720
[  370.859154]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  370.864528]  ? match_number.isra.0+0xbf/0x280
[  370.869029]  match_number.isra.0+0xbf/0x280
[  370.873352]  ? match_strdup+0xa0/0xa0
[  370.877162]  ? match_wildcard+0x3c0/0x3c0
[  370.881308]  ? __kmalloc+0x272/0x720
[  370.885017]  match_int+0x23/0x30
[  370.888402]  parse_options+0x127c/0x29d0
[  370.892482]  ? clear_qf_name+0x150/0x150
[  370.896529]  ? __kmalloc+0x594/0x720
[  370.900237]  ? crypto_larval_alloc+0x1d0/0x1d0
[  370.904818]  ? out_of_line_wait_on_bit+0x213/0x3c0
[  370.909760]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  370.915323]  ? crypto_shash_init_tfm+0x11b/0x160
[  370.920088]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  370.925095]  ? map_id_range_down+0x1ee/0x430
[  370.929492]  ? __put_user_ns+0x60/0x60
[  370.933391]  ext4_fill_super+0x218b/0xdc10
[  370.937625]  ? plist_requeue+0x650/0x650
[  370.941674]  ? find_held_lock+0x36/0x1c0
[  370.945734]  ? ext4_calculate_overhead+0x11c0/0x11c0
[  370.950825]  ? format_decode+0xaf0/0xaf0
[  370.954883]  ? graph_lock+0x170/0x170
[  370.958675]  ? string+0x225/0x2d0
[  370.962116]  ? widen_string+0x2e0/0x2e0
[  370.966076]  ? sget_userns+0x2e3/0xf40
[  370.969950]  ? find_held_lock+0x13f/0x1c0
[  370.974089]  ? bdev_name.isra.8+0x1a1/0x1f0
[  370.978405]  ? pointer+0x157/0x990
[  370.981936]  ? netdev_bits+0xb0/0xb0
[  370.985646]  ? format_decode+0x1b1/0xaf0
[  370.989708]  ? set_precision+0xe0/0xe0
[  370.993589]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  370.999122]  ? vsnprintf+0x20d/0x1b60
[  371.002912]  ? pointer+0x990/0x990
[  371.006447]  ? snprintf+0xae/0xe0
[  371.009895]  ? vsprintf+0x40/0x40
[  371.013341]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  371.018353]  ? set_blocksize+0x2c1/0x340
[  371.022425]  mount_bdev+0x30c/0x3e0
[  371.026042]  ? ext4_calculate_overhead+0x11c0/0x11c0
[  371.031130]  ? mount_bdev+0x30c/0x3e0
[  371.034918]  ? ext4_calculate_overhead+0x11c0/0x11c0
[  371.040020]  ext4_mount+0x34/0x40
[  371.043488]  mount_fs+0xae/0x328
[  371.046882]  vfs_kern_mount.part.33+0xdc/0x4e0
[  371.051468]  ? may_umount+0xb0/0xb0
[  371.055081]  ? _raw_read_unlock+0x22/0x30
[  371.059228]  ? __get_fs_type+0x97/0xc0
[  371.063116]  do_mount+0x581/0x30e0
[  371.066671]  ? kmem_cache_alloc_trace+0x275/0x730
[  371.071508]  ? copy_mount_string+0x40/0x40
[  371.075748]  ? copy_mount_options+0x5f/0x380
[  371.080155]  ? rcu_read_lock_sched_held+0x108/0x120
[  371.085184]  ? kmem_cache_alloc_trace+0x324/0x730
[  371.090030]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  371.095577]  ? _copy_from_user+0xdf/0x150
[  371.099740]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  371.105287]  ? copy_mount_options+0x285/0x380
[  371.109794]  ksys_mount+0x12d/0x140
[  371.113428]  __x64_sys_mount+0xbe/0x150
[  371.117391]  do_syscall_64+0x1b9/0x820
[  371.121285]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  371.126676]  ? syscall_return_slowpath+0x5e0/0x5e0
[  371.131608]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  371.136611]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  371.141611]  ? recalc_sigpending_tsk+0x180/0x180
[  371.146354]  ? kasan_check_write+0x14/0x20
[  371.150578]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  371.155431]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  371.160616] RIP: 0033:0x459aba
[  371.163808] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00
[  371.182709] RSP: 002b:00007faee8c5fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  371.190408] RAX: ffffffffffffffda RBX: 00007faee8c5fb30 RCX: 0000000000459aba
[  371.197668] RDX: 00007faee8c5fad0 RSI: 0000000020000100 RDI: 00007faee8c5faf0
[  371.204934] RBP: 0000000020000100 R08: 00007faee8c5fb30 R09: 00007faee8c5fad0
[  371.212199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004
[  371.219469] R13: 0000000000000000 R14: 00000000004c9bfd R15: 000000000000004b
11:49:45 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="657874348c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000004c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013001108000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x2c}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000000), 0x1200000000, 0x4)

11:49:45 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0)

11:49:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0xf, {0x3}}, 0x14}}, 0x0)

11:49:45 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x12, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 4 (fault-call:0 fault-nth:76):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:45 executing program 2:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x3, 0x4)
r0 = socket$inet(0x10, 0x8000000003, 0x4)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x210080)
connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1}}, 0x1e)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0)

11:49:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000038f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  371.361201] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x100000000000000, {0x3}}, 0x14}}, 0x0)

11:49:45 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
sync_file_range(r0, 0xffffffff00000000, 0x1ff, 0x3)
fchmod(r0, 0x100)
r1 = semget$private(0x0, 0x0, 0xe0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x3ff, 0x1800}, {0x3, 0x48000000, 0x1000}, {0x3, 0x6, 0x800}], 0x3, &(0x7f00000000c0)={r2, r3+30000000})
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)

11:49:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f8}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xd, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:45 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040))

[  371.608989] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  371.688916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  371.766144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:49:45 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000006c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000035f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x3002000000000000, {0x3}}, 0x14}}, 0x0)

11:49:45 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
mkdir(&(0x7f0000000300)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80000)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6be, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={r2, r3, 0x6, 0x2}, 0x10)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000740))
mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f00000002c0))
unshare(0x6010100)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r4, 0x0)
clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240))
mount(&(0x7f0000000700)='./control\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0xfffffffffffffffd})
r5 = creat(&(0x7f0000000040)='./control/file1\x00', 0x0)
write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
fgetxattr(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="62747266732e6367726f757065743075731f42090047625c5e328471367657152613d4d28c2fe8795ca799cd21f01402aca782eca8ab7b873996c00b12936ef93b8747fb988c0f97dfa6847573c3411fedb76b544f1463e98661b97f4cff97ba7b6cd8ef1bfdb90295789d307e"], &(0x7f0000000340)=""/197, 0xc5)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x42, @tick=0x7269, 0x5, {0x6, 0x7}, 0x10001, 0x3, 0x3})
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffdfffffffffffe)
fchmod(r4, 0x20)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00')
mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8)
setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f00000004c0)="485004dbff7d377f61e695cb9d5c9aa882d4649ecb3d6540e2df3c2685adfb2d4ac077aadb87", 0x26)
close(r1)

11:49:45 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x11, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:45 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='\nxt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = inotify_init1(0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000))
ptrace$setopts(0x4205, r2, 0x2, 0xa07000)

11:49:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0xf00000000000000, {0x3}}, 0x14}}, 0x0)

[  371.930586] IPVS: ftp: loaded support on port[0] = 21
11:49:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010017000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:45 executing program 2:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000005f80), 0x0, &(0x7f0000005a80)=ANY=[]}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00')
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x8}, 0x8)

11:49:45 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x5, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:46 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='%xt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:46 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

11:49:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  372.229943] IPVS: ftp: loaded support on port[0] = 21
11:49:46 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x9, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:46 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434f4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:46 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

11:49:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010037f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)="6264657600d2998e2bb6ea053ea071c36986354b48b298b7b749cec342148fa169896a6c74d685fa20275b52e3e9c2c8500bc9c10a799b8d9ebeb9e605610e05bee673d859ecc889f07515a038f5434ffcacc72cd849d76e657007000000c98bd957ce293f78a24f2ce979dbfcd8469fc6b00d2397d976218fba879b9d682907a3222fd4ecba994ebcd438a2ab790c8a30364899d39309a52a62d5864a99bdc6d6c18ebd03d8be1bc211e0317e4e9450317d61011bc9e53d084049ae000000", 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x490100, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000140)={0x8001, 0x1, 0x197b, @random="330e6116492e", 'bcsh0\x00'})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x60d, 0x2, &(0x7f0000000200)})
mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000440))
umount2(&(0x7f00000004c0)='./file0\x00', 0x2)

11:49:47 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='e\nt4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000013}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010049f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:47 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = socket$alg(0x26, 0x5, 0x0)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/154, 0x9a}], 0x6, 0x0, 0x0, 0x2}, 0x20)
getpeername$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0xffffffffffffff1b)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7afb", 0x8)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x100, 0x0)
openat$cgroup_int(r3, &(0x7f0000000640)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)

11:49:47 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:47 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

11:49:47 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000d000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000280))
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x4)
write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0xf9, 0x100, 0x5}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r1, 0x4)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x0, 0x2, 0x2}, 0xadec}}, 0x18)

11:49:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x5801}}, 0x14}}, 0x0)

11:49:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='e%t4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 5:
r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff)
keyctl$clear(0x7, r0)
set_mempolicy(0xc002, &(0x7f0000000180)=0xfff, 0x8000)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=<r1=>0x0)
prlimit64(r1, 0x0, &(0x7f0000000100)={0x2, 0x4}, &(0x7f0000000140))

11:49:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010097ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf}}, 0x14}}, 0x0)

11:49:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x7, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ex\n4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000002000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100f9f20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)="68634782cf1a0fd3d3e78c1029799aea1539a67a64909f9d0d2e57d19252e59546eb86828d4814d987e16953cec13f3756d83f1d679751b7172775dc44b68e61378a5f4898e214539744be4b0bd509c5e00f6b6b946ea46beeb912e2ce06f8c36752be05416f804e9b511f5cb8a1678d4b27dbabad514ffd75fdca9e03e191f47390998097e6626c0772f00f16a6a9233182212c8211c7babc298298824bc26b3539308cce7fa7f068a66102b58bb53faee4db71959274a86bb720e4dae8d3f4b2b88bf28b374deebfa22fd82498cee6008e1c30383087e1a90510e802c422527baf208386a4f54b821feb13192319", 0xef}, {&(0x7f0000000280)="b117fbf60f25adc3886f941432cc411de956e9388b8de12d7f5f9f", 0x1b}, {&(0x7f00000002c0)="8ceb75c80ded098b98d05e036413cf5286f7901bbc8260654c1d5f3c800bd16600c473028271df899a", 0x29}, {&(0x7f0000000340)="683b47dbad1150f5f54ecfceacdaaac23b2eeaa917", 0x15}, {&(0x7f00000003c0)="80e0ba255b317f971a219952d5885279fbeec11c82a65795deced8660cdb3978eba7a9a2cdd87d5a98bde5607ff5015f9e282d0d66ac722e18163d22099a7e5f9da6aeeacbb9550b6ab7dd61d6710344e1f212cfc482878860e621", 0x5b}], 0x5, &(0x7f0000000440), 0x0, 0x20000000}, 0xc100)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b014", 0xc5}], 0x1, &(0x7f0000000200)}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x398, 0x4)
recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe35ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade0c74eee1b31a420d7914c9d75db25855ae32798edc1b47e0f0f88429b2b60ae63", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0)

[  374.668063] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0x13, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x34000}}, 0x14}}, 0x0)

11:49:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x100000000}, &(0x7f0000000180)=0x8)
mlock(&(0x7f0000761000/0x2000)=nil, 0x2000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="9273079897c044ab68023b4774643c7da782a352f19c100af12b4be8d998bdf33d525536e201e38ef9e13cbdf9298db9944fe7cc40f7c9d92ba42ce0e6679faa9c4e9daeaf7fec1724d2d44aa6c9d4d159d9d3b5508c5d7d857b15401360148826e75fa262d1733a7428d433483b0c49174ec9057b48bb6b2ef6bd9b97b2b2a16b11071c019f038a9a42b32e2b1fe285bbe16f96cfc410870abe4928442506d0a0dbf350f3d205ddf8b431f70b46ffced5d1dc1057b9bbca626dfe357819ecbe5db3055194a93e289af20cd2ef2ca01758508b85ab7420e807f29f6150")
sendfile(r0, r1, &(0x7f0000000000), 0x100000080000000)
pipe(&(0x7f00000000c0))

11:49:48 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x10}, 0x2c)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x100000001, 0x4, &(0x7f0000001440)=[{&(0x7f0000000140)="d82e226a4483e25668bfaa63bcfab8f26c6ea35d2239e465ab3c6d02025b260cbdf7ce1acda85045630bf6c573cbdfcb451f627dd1a4d959e9fd2ba91ade332fd421e0dac7b7dca5c32421a09fe8c7e7ddcbe1a8bb2e8c0d9f96b3ce2c605918b27f7404ff7c6022ecedfb1d90374c4f2db0cc6b7d49b7bec0c3a43cf8890f76862e811269e94d9697edc4ed443a78f8c29e390f0618bfc86289406a04537fa632c3cc707368b3a268", 0xa9, 0x5}, {&(0x7f0000000200)="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", 0x1000, 0xfff}, {&(0x7f0000001200)="eac4e5f7958cd51b", 0x8}, {&(0x7f0000001380)="2d78a82d074d76c595cf276d5f06b2361b41b8c7ca754a236963e020df4a4b816d1a0fa7cdb5f343a8a6203c4fc03db023ab08b3f69ce918509a9560485ecda3051c5bebc265086739ce92d43ed7d6ce7f5d427854eeadff1f85773081af1943a772e590327f606b6b6ceff0b9e1893139f91bece3a14d793641df11aebdee50b4d56346c04ee41c74dbe2060a819e850e2e22ad16c5368776fbcb7a18a07a8c31f6b145b3918b50e505f150c0a5889dfab336a790b265", 0xb7, 0x20000000}], 0x1000, &(0x7f00000014c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d302c726f6469722c757466383d302c756e695f786c0674653d302c6e66733d6e6f7374616c655f726f2c00"])
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001340)={r0, &(0x7f0000001180), &(0x7f0000001280)=""/130}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000000c0)=""/127}, 0x18)

11:49:48 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f44c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ex%4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100e4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  374.754196] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000000f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e000000000000}}, 0x14}}, 0x0)

11:49:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x200000d0, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:48 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=<r1=>0x0)
ptrace$peek(0x2, r1, &(0x7f0000000140))
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/155, 0x9b}], 0x1)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
pwrite64(r0, &(0x7f0000000040), 0x6a17, 0x0)

11:49:48 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='extc\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e}}, 0x14}}, 0x0)

11:49:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:49 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
unshare(0x40000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x801, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x1, 0x5, 0x3, 'queue0\x00', 0xea3})
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x7, 0xfffffffffffffff8, 0x80, 0x8000, 0x0, 0x8, 0x1, 0x6, 0x1ff, 0x5})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {}, 0x6, {0x2, 0x0, @local}, 'gre0\x00'})

11:49:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x600000, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000140)="fbdc5f5fb1c34af34d858339b20b6934a6b885e066cdc587fbcab5efe67346cf3970238dddcf2ca82d974465136fc7abbfb526971c4481d09319a0481bdb09383c25a82b9795cc81f25754fe7493163972f87d1e14bcaf8764dcc9a336156417452a19061cff73ad7d717191a0196151400b76e31a1c396a323cd3cc07a4f97adcf5719fac30c991b2dcfaab9fc6f3033d16b34f65da1cefee4aab5b19a02b2f46", 0xa1}], 0x1)
read(r1, &(0x7f0000000200)=""/93, 0xfffffffffffffe15)

11:49:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000000f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  375.409722] IPVS: ftp: loaded support on port[0] = 21
[  375.472498] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  375.499749] IPVS: ftp: loaded support on port[0] = 21
11:49:49 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x3002}}, 0x14}}, 0x0)

11:49:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext+\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f433}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:49 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x20000150)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x200, 0xffffffffffff7bc6, 0x1, 0x2, 0x3, 0x3, 0xfffffffffffffffa, 0x17, 0x40, 0x355, 0x401, 0x5, 0x38, 0x1, 0x9, 0x9, 0x7}, [{0x4, 0xc61, 0xffffffffffffa73d, 0x4d4d, 0x3, 0x7f, 0x3}, {0x1, 0xff, 0x4, 0x6, 0xffffffffffffffff, 0x2, 0x1f, 0x7fff}], "69669aaec156d8c57fec780039c5674a8bb8def0d512d92d364cc18d5261a19b4f9a2ddaa97a8f352ec6c40c677add3319c4035d9fcd9c69cedf98d145d8c76280f89f5d472de1ac8f715444ad083c7187d7793242de79642ea48188d3c23a24f1f8257926a13b0e52832d1272151727da03211fcb3bdaa9fd7ce68c3507197fd2b10a", [[], [], [], [], [], [], [], [], []]}, 0xa33)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0x0, &(0x7f0000000040), 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000b7c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b780)={&(0x7f000000ae40)={0x14}, 0x14}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x882f, &(0x7f0000000180)={0x20}, 0x8)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x0, 0x2, {0x0, 0x3, 0x100, 0x1, 0x6}})

11:49:49 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x5, 0x24440)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x200}, 0x8)
fremovexattr(r1, &(0x7f0000000280)=@known='security.ima\x00')
r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x101, 0x210000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x80}, @in6={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, [], 0x1f}, 0xff}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @rand_addr=0x7f}], 0x68)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4)

11:49:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  375.528100] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff9e}}, 0x14}}, 0x0)

11:49:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8000000000000000, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsh0\x00', 'ip6_vti0\x00', 'nr0\x00', 'veth1_to_bridge\x00', @dev, [], @broadcast, [], 0xb8, 0xb8, 0x108, [@limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x210)

11:49:49 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000200)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010003000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:49 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext^\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  375.832109] ebt_limit: overflow, try lower: 0/0
11:49:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010002f30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  375.891983] ebt_limit: overflow, try lower: 0/0
11:49:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x40030000000000}}, 0x14}}, 0x0)

[  376.197384] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  376.333822] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x20, {{0x2, 0x4e21, @loopback}}}, 0x88)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40286608, &(0x7f0000000200)={0x405})
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0xfffffffffffeffff})

11:49:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:50 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x3)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:50 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext7\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:50 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x24, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/154)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)

11:49:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:50 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:50 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x400300}}, 0x14}}, 0x0)

11:49:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  376.451446] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups)
11:49:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004309}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:50 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x92b9, 0x200000)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x4, 0x4, 0x1, 0x9, 0x7, 0x34e, 0x98, 0x4, 0x5, 0x3, 0x6, 0x31, 0x7fffffff}, {0x2, 0x8e, 0x6, 0x100, 0x4, 0x10000, 0x8, 0x43e, 0x1, 0x6, 0xfff, 0x2, 0x10000000000000}, {0x6, 0x100, 0x4, 0x7f, 0x3, 0x9, 0xffffffffffff0001, 0x9bb, 0x4, 0x80, 0x3, 0x7f, 0x759f}], 0x7c4})
timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100))
read(r1, &(0x7f0000a16000)=""/71, 0x47)

11:49:50 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf00}}, 0x14}}, 0x0)

11:49:50 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='extd\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:50 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2448c0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r2, r1, 0x0, 0x1}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  376.638207] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups)
11:49:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fff20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:50 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000040)=0xa6, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, &(0x7f00000002c0), 0x80008)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)

11:49:50 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x8080, 0x0)
fsync(r0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970")
r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x7fff)
fallocate(r2, 0x3, 0x9, 0x1000001)
fcntl$setlease(r1, 0x400, 0x3)
lseek(r2, 0x0, 0x4)

11:49:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010087000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:50 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x1000000}}, 0x14}}, 0x0)

11:49:50 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf010000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffd0e, &(0x7f0000000080)}, 0x10)
r2 = socket$inet(0x2, 0x5, 0x4000)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={r3, 0x3f}, &(0x7f00000005c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
iopl(0x20)

11:49:50 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578741600", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000009d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  377.325046] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  377.467372] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:51 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:51 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff7f}}, 0x14}}, 0x0)

11:49:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r1=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @empty, r1}, 0xc)

11:49:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010005000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:51 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r2=>0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0xcc, 0x2, 0x1, 0x2, 0x8, r2})
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
pkey_free(0xffffffffffffffff)

11:49:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext\n\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fef2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:51 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:51 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffffff0}}, 0x14}}, 0x0)

11:49:51 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400400, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000280)={0xd79, 0x1, 0x10000, 0x8001, 0x7, 0xa9a})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x4c6, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:51 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x8800000000000000)
setpgid(r4, r4)

11:49:51 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x20)
readahead(r0, 0x8, 0xfffffffffffffff9)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x4)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x9, 0x2)

11:49:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000004f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:51 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010047f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:51 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext-\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:51 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x200000000000000}}, 0x14}}, 0x0)

[  378.286395] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  378.582501] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000c}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f43e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:52 executing program 5:
r0 = socket$inet_sctp(0x2, 0x2800000000001, 0x84)
getpeername(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000000)=0x80)
getsockopt$inet_buf(r0, 0x0, 0x16, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24)

11:49:52 executing program 3:
prctl$getreaper(0x25, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = msgget(0x1, 0x400)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/154)
ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000067100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000100"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf00000000000000}}, 0x14}}, 0x0)

11:49:52 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="76feffff01000000f85901bbb9f40b6ab581daef978a2e80375d8ce41beb8b00b5d2403dd61629d0a7"], 0x0)
r1 = fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7ff000000000, 0x0, 0x845, 0x7ff, 0x0, 0x6, 0x10010, 0x3, 0x0, 0x0, 0x3, 0x401, 0xd32, 0x1, 0xbdc7, 0x9a8, 0x1, 0x6, 0x9, 0x17, 0x8, 0x100, 0x400, 0x401, 0xef, 0x2, 0xa799, 0x6c, 0xdb, 0x200, 0xb9, 0x93a, 0x7fff, 0x20000000000, 0x4, 0x4, 0x0, 0x8, 0x0, @perf_config_ext={0x9e, 0x4}, 0x0, 0x7, 0x8001, 0x4, 0x0, 0x5, 0x8}, r1, 0x3, 0xffffffffffffff9c, 0x1)

11:49:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010012000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:52 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x9effffff00000000}}, 0x14}}, 0x0)

11:49:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010043f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:52 executing program 3:
r0 = socket$inet6(0xa, 0xffffffffffff, 0xffffffffffffffff)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000240)={<r1=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0xa83c}, &(0x7f0000000300)=0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000006000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:52 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext%\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fcf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  379.277375] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  379.474086] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:53 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434f5", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xffffff7f00000000}}, 0x14}}, 0x0)

11:49:53 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext\a\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:53 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x900, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000280))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000002c0))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x280, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000200)=0x8, 0x4)
modify_ldt$write(0x1, &(0x7f0000000300)={0x8000, 0x1000, 0xffffffffffffffff, 0x9, 0x80000001, 0x3, 0x6, 0x89, 0x0, 0x8}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:53 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000009002}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010033f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x2000000}}, 0x14}}, 0x0)

11:49:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000700}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:53 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:53 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000025c0000000000000032d375e9974c94602931cdee877ca97e95514887e0563ade4685076fc65db5a6ecef5f7eddda6aa8a895aa91cb2048b42b19649078d16e8454320b3d2ecca3aaa11d2ae368f8e2e70ada7287b10b5b6a77af64a00bb6d8bd4f5f16ebe185ff39e9a1f638d5db"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$inet6_opts(r0, 0x29, 0x100000000000037, &(0x7f0000000180)=@hopopts={0xbb, 0x0, [], [@pad1]}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80, 0x80800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x0, @multicast2}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x79bb, 0x100}, &(0x7f00000002c0)=0x10)
r3 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:53 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:53 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x80000}}, 0x14}}, 0x0)

[  379.973091] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  379.989201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'.
11:49:54 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)

11:49:54 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:54 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = shmget(0x0, 0x1000, 0x15, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8)

11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffffffffffff000}}, 0x14}}, 0x0)

[  380.381009] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000015}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x200000c8)

11:49:54 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  380.461941] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:54 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffe)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)="288811ffb3faa487f7ddbcbc413783af54dcbca1517ef7e64588829f46a8e9681115f7da6de70c8f5bd846cd4631891eb16d181e88bcb57decd7842944c62da3d4a8eb562db7030670a3dfca784f996e8904dc196f8f698c6f8822f0e87e7c5be40d286b89cd651cea30ebf97c382603be3e0d7a41ffdef65278036e62875b59e63fb595ae86a67f8bd302c9f08e79")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x200000000000034c, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x1000000000}, 0x48)
r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8, 0x10800)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f30a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffffffffff}}, 0x14}}, 0x0)

11:49:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:54 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000039f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0}}, 0x14}}, 0x0)

11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f309}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:54 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  380.811985] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  380.832339] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000008f5}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x8000000000000}}, 0x14}}, 0x0)

11:49:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:54 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010030000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x400000, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc)
ioctl$FICLONE(r1, 0x40049409, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01006c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000040f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffff00000000}}, 0x14}}, 0x0)

[  381.163633] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:55 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:55 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434f5", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007f30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = accept4(r0, &(0x7f0000000200)=@un=@abs, &(0x7f0000000180)=0x80, 0x80800)
connect$vsock_dgram(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x9effffff}}, 0x14}}, 0x0)

11:49:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100ffffff7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:55 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743402", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  381.554783] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  381.574844] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f8f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
read$eventfd(r0, &(0x7f00000000c0), 0x200000c8)

11:49:55 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x30020000}}, 0x14}}, 0x0)

11:49:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x44000)
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:55 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000018}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:55 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  381.971935] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000074}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffffff}}, 0x14}}, 0x0)

11:49:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
sync_file_range(r0, 0x10000, 0xfffffffffffffffe, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffffffffffff8001, 0x45, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000000000000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:56 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01003ff40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  382.107474] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  382.126479] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000005c0)="5183525f85715070000000000000")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@loopback, r1}, 0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x82000)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000002c0)={0x1, 0xff})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000300)=0x9, 0x4)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000280)={0x5, 0x8001})

[  382.190070] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01007a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000016}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf000}}, 0x14}}, 0x0)

11:49:56 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  382.261059] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  382.523641] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  382.568226] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="6578743406", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000043f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf0ffff}}, 0x14}}, 0x0)

11:49:56 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206, 0x0, 0x0, [], r1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockname(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000200)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:56 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010002000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  382.650118] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  382.680542] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  382.740921] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:56 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000009f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x230}}, 0x14}}, 0x0)

11:49:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x200000000003)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:56 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  382.913320] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f0f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  383.010173] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:57 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434f6", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:57 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xec0}}, 0x14}}, 0x0)

11:49:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000023f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000001f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:57 executing program 3:
r0 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x42007f73, 0x9, 0x8b}, 0xe)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000010000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  383.294622] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x301)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x3002000000000000}}, 0x14}}, 0x0)

11:49:57 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:57 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000007a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2ef}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  383.387070] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x40, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000007c0)=0x6)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="7f000000082ec6487b77571da775993f70f2915206d8aedd4a8796397b984ca9d72e50cf8d37fbfe50c4027b58b1724616a2fd47dd1f8b07d3ebd82e0763439f3e987be381cb093e8c66ebf493ce544c12e21a85336e976e1379fe1d633adf9ec7be3045aff343c83aec871990f9ea5be2da8ec692b43a634b73259a670432822f91dc7e"], &(0x7f0000000300)=0x87)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r2, 0x1, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000780)={0x1, 0x0, {0x34, 0x2c, 0x15, 0x16, 0x9, 0x5, 0x3, 0x55, 0xffffffffffffffff}})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x20041, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e24, 0x4, @mcast2, 0x400}}, 0xfb4, 0x7fffffff, 0x8, "55e46ce174c4b7fab8b2a318a4ddf8179f772fd087dbddbf54fe0895de601dfc0a4c2339a353b3df55f32c9c9d8a29fff684363aae3b288b621a0bda2d8f76f81a5f259f3294d64725a977f302c0b73d"}, 0xd8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf010000000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0x50, &(0x7f0000000800)={0x0, <r5=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)=r5, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r6 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x840)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))

[  383.608808] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  383.689744] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:57 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:57 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000600000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xfffff000}}, 0x14}}, 0x0)

11:49:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010001000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = memfd_create(&(0x7f0000000180)='syzkaller\x00', 0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000280)={0xc61b, 0x4, 0x400, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00004000000000bf610000001300008510000002000000bf010000000000009500000000000000150100000077847399d9b3573b4d000000b7000000004c0000000000000000000000000000000029fd2dce553fd3e375ee09f418f9d41a6dfc9ec96501495b4abd0368c75e8318bee892148be39cfe718bf30da8db509d0be956f2d5a36a3ee75a8076a12b6eeaea784bf647ee5e68f55378649fa5990378f221904b3e815c650f1b5b8e92"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010004000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:57 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  383.868481] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:57 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8916, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x9}}, 0x18)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
lseek(r0, 0x0, 0x4)

11:49:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xf000000}}, 0x14}}, 0x0)

11:49:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010010000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  383.965175] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:58 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  384.213870] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  384.256611] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:58 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000067, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x200000000000, 0xce, &(0x7f0000000580)=""/206}, 0x48)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x3, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:58 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e0000}}, 0x14}}, 0x0)

11:49:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000019}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(0xffffffffffffffff)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:49:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000018}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
dup(r0)
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x200000c8)

11:49:58 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x820008912, &(0x7f0000000180)="0a5cc8170031c7597358fbdf0000a2e694c847765f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:58 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x100000000000000}}, 0x14}}, 0x0)

11:49:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01004df40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0xc00e0000}}, 0x14}}, 0x0)

[  384.657348] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  384.748609] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:58 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010030000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:58 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x8}}, 0x14}}, 0x0)

11:49:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000b00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe3f)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:58 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:58 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  384.867403] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  384.886326] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000006}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  384.972538] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f435}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}}, 0x0)

11:49:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
socketpair$inet(0x2, 0x7, 0xfffffffffffffff8, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x0, 0x80000001, 0x7, 0x540019e6, 0x4, {<r3=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x7f, 0x5, 0x4, 0x2}}, &(0x7f00000002c0)=0xb0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x1840}, &(0x7f0000000580)=0x8)

11:49:59 executing program 2:
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  385.075585] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  385.172537] 9pnet: Insufficient options for proto=fd
11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001600}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010004670200}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  385.210446] 9pnet: Insufficient options for proto=fd
11:49:59 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:59 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:49:59 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x230}}, 0x14}}, 0x0)

11:49:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x740, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000240)={0x200, 0xfffffffffffffff7, 0xfffffffffffffffa, {r3, r4+30000000}, 0xfffffffffffffffd, 0x8})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:59 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01003cf40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  385.401651] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  385.420441] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:59 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003e04}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  385.519514] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:59 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffffff0}}, 0x14}}, 0x0)

11:49:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={<r3=>0x0}, &(0x7f0000000200)=0xc)
r4 = getpid()
kcmp(r3, r4, 0x4, r0, r1)

[  385.584599] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:59 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  385.698258] 9pnet: Insufficient options for proto=fd
11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000002f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  385.798219] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  385.893489] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:49:59 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:49:59 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010012000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:49:59 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:49:59 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e}}, 0x14}}, 0x0)

11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f6}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:49:59 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  385.963601] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  385.984232] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fffffffd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x2000000}}, 0x14}}, 0x0)

[  386.064667] 9pnet: Insufficient options for proto=fd
[  386.074450] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000047f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getuid()
r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8000, 0x400000)
ioctl$KDSETMODE(r2, 0x4b3a, 0x100000000)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  386.155924] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf000000}}, 0x14}}, 0x0)

11:50:00 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000000a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:00 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e0000}}, 0x14}}, 0x0)

11:50:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
open_by_handle_at(r1, &(0x7f0000000200)={0xcd, 0xfff, "667cc49902aeb22df5c6e189b7b0eeaee8d6c1da3a96e3122665fd64399b4f4fc7dce246da0c5fc22ce13de8a76baad772d671d9eeff6287ea0a13e56772c31f1fb8ff48f6a925627999fec4ca701555c3081e3f3ade20816036be72d9cf3d69ec9e8b96e6cc3059a4a86110b45209776d67f04bdd49fd1df194a1c68a3ba3a261ab3bfb4952eff1f9fba8ef861381a4d1b1c99736ba3d2daec064a04ab979bc0c98e00b86c9439b660eb8097ab367c4c1682817df671147710a0a1956c74076ae5be656d9"}, 0x220000)

11:50:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fbf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  386.494854] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  386.514434] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x428, 0x108, 0x268, 0x268, 0x108, 0x0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "70b21a4f12131958c6eb9e27e0510e5629b861bca0af211f0ab0dca9e07c"}}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@quota={0x38, 'quota\x00', 0x0, {0x0, 0x0, 0xfffffffffffff001, 0x8000}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x7, 0xea51, 0xfffffffffffffc01, 0x7, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x8, 0x4, 0x7118}, {0x200, 0x4, 0x1}, 0x4, 0x2181}}}, {{@ipv6={@ipv4={[], [], @loopback}, @mcast2, [0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip_vti0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x4, 0x7, 0x2}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  386.595271] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000fff2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f448}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x3002}}, 0x14}}, 0x0)

11:50:00 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:00 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  386.712106] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:00 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4#', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f2f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:01 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf00}}, 0x14}}, 0x0)

11:50:01 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
prctl$seccomp(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f0000000140)=[{0x7f, 0x1, 0x2, 0x83f}, {0x1, 0x100000000, 0xd6f}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x20000000000000ed, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="0b687c1fc4b98fdc3607232897", @ANYRESOCT=0x0, @ANYRESDEC, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16], @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffffffffffe, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf16000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000000000000095000000020000000058689ec75905d3031fd17853b75f3b9de19f53ce277cdd35e37e19812701a5c64e757527e5d4269b3c52f3f6429553005e365208becb8b7786c2937ec4cdfc5649fcf5e4467214dc077642eb9b10619cb6b3ab924900"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = dup(r0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000600)=""/67)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x50, &(0x7f0000000200)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001f00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100fef20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  387.063078] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  387.081640] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  387.160586] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x19000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x9effffff00000000}}, 0x14}}, 0x0)

11:50:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x80000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000943}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  387.255260] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  387.325049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003df4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  387.467951] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  387.573172] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:01 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:01 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x3002000000000000}}, 0x14}}, 0x0)

11:50:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0x60000)
getsockname$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:01 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01001a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  387.644773] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  387.662222] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000f000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  387.734582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  387.758526] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:01 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x8000000000000}}, 0x14}}, 0x0)

11:50:01 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="dfcd0200ff010004d766f42ac43cf4973cd84716f5f82a73aaaeb758812d2d121dc3c75c1634aa98900ff14f"], &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r3, 0xff}, &(0x7f0000000280)=0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  387.852750] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:01 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434a0", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6000000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:02 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  388.103490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:02 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\t', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:02 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x1000000}}, 0x14}}, 0x0)

11:50:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000060}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = shmget$private(0x0, 0x2000, 0x435, &(0x7f0000ffb000/0x2000)=nil)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000680)={<r3=>0x0, 0x5e, "2765e9117b81bbc1dc10a1d5ab61d2b1c470cf71f2a2853e36f595b79de756cddbde2b3bea65cae8cc2cf548190d32976ab06ef987cb76c71917d6612490d121c08841603ffeadff6fc45e05aeb431e800c191610685268bd820e88dabf5"}, &(0x7f0000000300)=0x66)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000700)={r3, 0x2, "d5ce"}, &(0x7f0000000740)=0xa)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000200)=""/72)
fcntl$getown(r0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000006f9500000000000000150100000000000000950000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8002, 0x0)
clock_adjtime(0x2, &(0x7f0000000580)={0xffff, 0x1, 0x1, 0x1000, 0x8001, 0x10000, 0x700c, 0x7, 0x5, 0x20, 0x7, 0xd86, 0x100000001, 0x45, 0xe7, 0x2, 0x0, 0x8, 0x4fa, 0x8, 0x7, 0x4, 0xc279, 0xffffffff, 0x7, 0x1})
ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000280))

11:50:02 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:02 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xd00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  388.268141] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  388.292960] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000043e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  388.356115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  388.376141] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:02 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c16000000000000bfffff00000000008510000002000000bf0100000000000000000013fbde2e00000000b7000000000000009500000000000000999257c7af73c5db700c77ff7ee571bdc2490c6016b0b0e4638b6eba4b7c254e189320378d27a04a04195f32fd5ad2c0caa7220b1d34442ecc0000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:02 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffff}}, 0x14}}, 0x0)

11:50:02 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  388.451360] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9002000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4+', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100e4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  388.624105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  388.750408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:02 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="6578743404", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:02 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:02 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x0)

11:50:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000580)=""/161, 0xa1}], 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
alarm(0x9dfb)

11:50:02 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:02 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4h', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010036f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9effffff00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  388.968743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000006c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:03 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0)

11:50:03 executing program 5:
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:03 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8916, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mixer\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000b40)="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", 0xfc, 0x4048010, &(0x7f0000000d40)={0x11, 0x9, r2, 0x1, 0x7, 0x6, @remote}, 0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000851000fc040084335f7be9227574d87b54c79800003c00000000000500000000000000000085efffff01000000bf73d6a806e91301000000fcffe7ee0000c9000000001501000000000000b7000044d5aaacefac186fef3a327467596d"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743416", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  389.184784] 9pnet: Insufficient options for proto=fd
[  389.228932] 9pnet: Insufficient options for proto=fd
11:50:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f449}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  389.275488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\n', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:03 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x200000000000000}}, 0x14}}, 0x0)

11:50:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200)=0x7fff, 0x4)

11:50:03 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:03 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000014}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  389.575858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  389.581215] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:03 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf}}, 0x14}}, 0x0)

11:50:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010016000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:03 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:03 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x8040, 0x0)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000005c0)={0xf9, 0x1, {0xffffffffffffffff, 0x2, 0x5234, 0x1, 0x3}})
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xa00020, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, "2d76626f786e6574306d696d655f74797065c33a"}}, {@cache_loose='cache=loose'}]}})
write$P9_RLINK(r0, &(0x7f0000000580)={0x7, 0x47, 0x2}, 0x7)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
accept4(r0, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80, 0x80000)

11:50:03 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  389.722521] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000004cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:03 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  389.860580] 9pnet: Insufficient options for proto=fd
[  389.869876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  389.966622] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  390.035610] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffff00000000}}, 0x14}}, 0x0)

11:50:04 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x101, 0x0)
sendmmsg$nfc_llcp(r0, &(0x7f0000002a00)=[{&(0x7f0000000580)={0x27, 0x0, 0x2, 0x2, 0x4, 0x3f, "067e71357f6ab9adaacaf1177e07778b1c1f60902d76d091b59992c50874daf9f7801854e9790993c3bcbb50640424821d5d44613c977954adc9a64dba0d55", 0x3b}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000300)="760886a9ea081c175e9bfc3caf9e0996a01eeb21", 0x14}, {&(0x7f0000000600)="1a0622ae722d4aa40a57209a3e95ea6f54c589e7a65f7913f50b5c62c89ab3b51b969788a59eac0cf74cf7dbdc4b1c8be70bffabd4c48ba68f2f5cfce70dceeb2c35fe5fe95ad459a902f88b43d5878b14410e0b034c4f150698c1ff9aff", 0x5e}, {&(0x7f0000000680)="f07895487c74bc1ef9aec64c800a51a0831c0143f2ea38eda2401f40a7ebfd6932e3921d45d527e356665f0a89d82ed04d15a9bb7cbd9a345d7ced86f1b41203f73e4e14dcc05e99c6f88f3144875e0b51cf4eaa777bfad186d46835ed28b36737358f50cb5fea38ea223f9d85a0e0f35d54e76f123072e941a44fd126fedb63eaf96d39951c83d194dbb8946d3b17e095c552fb92344360b22b31eb9d9744042ae00be8cfaa4cbc3ee666cd7152dc48a8f108e2d7060fe40ee228fc348ac0367f13823b8fe26a2beb0bd20a21e1ef87fe70f861a5569133fc67efc46cec3dd2", 0xe0}, {&(0x7f0000000780)="089f14ae615d925b32a604ba131c591229fac009f0", 0x15}, {&(0x7f00000007c0)="633fde4ef18323828c398973", 0xc}, {&(0x7f0000000800)="ad22da4562b0c79060d1678a75b2c6c846751b7ba61f51f2c32534b03d6b35f138cefcc6cc4c1f78ecd2409cf31888", 0x2f}, {&(0x7f0000000840)="95e1172397f72abae41b67fc757d6dcd8b1ca31639c4544bbeca5981c64100b6bbd9c271c47524f674f73f40d7dbaaa0c1d5968bfe3949a67633a9314c8ac090034a68f10fdf29f2403a4d71aacba5cc6153bc8890625d0d48f06d1e69ab2d56a9524a97eb8f791d5f07fbd1654be1ee2ba343aff2152361248b71385ea03b0156d1ac6e414b", 0x86}, {&(0x7f0000000900)="c8c146f25ce19ad2a1c9328d01590ddd93c374bed2093718f492598c18775f961a35fc8e3b0e2e8447736f766d56f559e916b005dcc34d6af3337a1ec873182d237cc19b280badfa3e2dfe7d733961d8e90b74e0e9ec9b24b97f3c0efd637cabf669ef30135fd2bf936df657f13cdddace24e08502f6dc80672af9aeda1b0aa522d0a0864eece251898d6c5bf81f823ffbf2276a48c49373664c1b3e16bca545c35312d5f5825ffa648226427b1516a813763b322b10c84de0e1153d76fba37b8a0851ef07746e16f66255f1ca3eaf7608eaf5ca", 0xd4}, {&(0x7f0000000a00)="ff03494ed9ae3ca265544b97054adec844f34e38838f1f4a9acaedadb2724d601d68c394d931d8a67c5a96b3dc3c9848d82623966e310f223ea928b0305922cfcadb76f09b", 0x45}], 0x9, &(0x7f0000000b40)={0xd8, 0x11f, 0x7, "3058f55b6c318fc27e6fe0b0795e0d0eb25a203af4ff80af28808b515a00eb71a4bbc11e2c5f98a238efbcdc66293308336fe0eb6c4703c2541787308b8a5eefedeb7a1befca9586a592cf26833162432e0e95f0d7c4f43363546edc9ad1fd69ed3764b84ccb608f3ed2eeb4c86cbb4d7c4205cc357c9af27872b64eacafcb05a71c76ac4ec8c59bbec9d515df2846946ed83bddc4b4a6671c48974aa7ad625defe875bc27fc6977aefb04f80e85ece8f5f893926fe76a479c138a1fec65127290ee241fa519cb"}, 0xd8, 0x1}, {&(0x7f0000000c40)={0x27, 0x0, 0x0, 0x7, 0x7, 0x2, "db718c877e1038157fe37521db24c89b2b2e33782bbbe9ea06e8451f67b508ad841e3e441255414eb8fd563e97dba46c9b84f428502331137eacab2c5e20eb", 0x39}, 0x60, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="82651ebb793c0a91850ff32a8c161103a45f2b1a0dfa6c0c198917a2d64e8305b0187e05a4b529da4296fa9fb93988f7aca1dca1b881ce48a256b89971821a5ae079e7f46c3d38111bb346dff4ae542c11401565868e9c2b358abaac2f815313df9b7fdc256e7d5d420c3619827148a660be49b69d439cafc24356887d67940a465cad4a", 0x84}, {&(0x7f0000000d80)="ff8492656a7e0b6b34f486bada2f2fda0f79d73b2b7ccf17d6b277327a0f4debd9e381f354255d1aed5486fc5e199a1645e1c0539796d30e9cd7fbdf2eec9d356fcf3ec67d52bcc0af1d6ad83f502024cbe47908e1b5ce213d", 0x59}, {&(0x7f0000000e00)="ee8ffe2ffafcfcbda2cd645cf00b3c66afc98bf8f80c2f2f5d2500f7a08caa3288e7c5a6f9114d6dcb2fd8647567a134b3be408a4317818121697f074a0ee805a26a0670e7c661b94050dfd32e43de72e1a841831495da53a0a40851135ac2ebab218bc9390d1fa2a242293e2d4339863f128a2c5cf9157745e64f12648f3f995844d8b99e15cdb6bfe9a9991bfc6f03aa300581b73da4e0746f7a4890", 0x9d}, {&(0x7f0000000ec0)="7e24b27d1af2b2784a9341bf75b4cc4c5611bd3c892848b44dfe21b7fb4e7001290254cca8a2915d2686063023ec8d820140f715cd17c0efc2", 0x39}, {&(0x7f0000000f00)="e8933656ca183aa3c535e2ad8f886db5f485bc8359fef848a69b993967dec3b26647b553428d514387ec34afebd1df1b5346bc455cdbb6b91b", 0x39}], 0x5, &(0x7f0000001080)={0xe0, 0x109, 0x80, "6854391783f8d74a884e35902144921ae917b1ae1e7fd483d9f4493f1179f54b17558ee308266f46b5fa4d2468f250f72d25091f0e1e6be59ffe52a62021e64135b07983e5f0af19ce7cf1c83a6592066e18094276f3106a1d6be579e7b7b1c69ea4fb8bc637ed7f256b7073652468349fc47251d326ab2f57ce62bff81c21ac8781afd4baab92803bdb1428b4d088b3da5ac56bfee83a54cf022db341900fadc63e052979c139646894dd15664f7b81413f68db5b45cdc6e8e03236b276006d1e801c1d844a7403fbf9c3bc"}, 0xe0, 0x4000800}, {&(0x7f0000001180)={0x27, 0x0, 0x1, 0x3, 0x400, 0x400, "67817362fcad8626fc5bea6b1c6fbc8f55c50706b7907bbc618c47ed96f186c8c76dd32ec9da989e1fe4099ebe1c8efa18034fe48d4f124957470600c0975f", 0x6}, 0x60, &(0x7f0000001300)=[{&(0x7f0000001200)="1b46a628ede5bd2338190a1a29876d63ae972b5d4cf0ff3c717cf220de77f47ce968c60fc58e56deb03b88407d354c434aef4f59e5795de586cfdeb96fa08eea78be740c6ed609cae3399a88646fa8ae35ee3bfb938e30c233e85085e620dfe3663c0e93745ffce68fa50b08ddf7122c6ce084c996ecd8c8328573d7b1aa4ee3f07af58f14d98618227a71128485d28acc51aee504174e859ed4c1ef55786a740c4d62155bdb3bde0c33bb4adc0314", 0xaf}, {&(0x7f0000000fc0)}, {&(0x7f00000012c0)="671ddb73e8cbc748506bcaee003d0c417dd3dd51342915f359d40c2d2d7ed7f99e70fd866b921ec6", 0x28}], 0x3, 0x0, 0x0, 0x20000000}, {&(0x7f0000001340)={0x27, 0x0, 0x2, 0x7, 0xff, 0x401, "be8ebb530325b167de92e3b7bfdbc869eaf6d88b0303a49fd801e513d42890713f0c4b97f8c6a02916bf6a543da92cad849e2dfae1f9dc4005fc30100c1a72", 0x18}, 0x60, &(0x7f00000016c0)=[{&(0x7f00000013c0)="ac3f246e69eeb3536a0e6c3a93df29d901a57f2863c24ecf57d47c314408b4a8249769546212a71ecbcf14018d693f5d82b5752548dc8b1424924a683be8648f6973f2fc1c1ac24914e32a2fd84cd8eb4925a16a53e79282e9735b6d85c723404967422a308c9328ddd515f0b5a1a7ddf56d0f1ade31c8e0fbf7d52d5ce09c628d01adb8ffa804668d87c3be12452d8f6ee3b942b43f63dff5d866bcf019a3efdd93caa24de8b3a5fc5afae96cb3ad9574474b2c42fc876f858cebcdc6c9e2bf3906e9c27619ba8f0a642e008c32db408e913de6d8235455124748925969a6deb8768e918a1db82da33d1ec18d0d", 0xee}, {&(0x7f00000014c0)="8844ecdcc911b7225d4989db11df8fe98980235572b9858c155b44bec7e0b749c3b72872051909f9f992fc51f8b61743e41cce0695c670e6fbb5206d308079309a4476e1", 0x44}, {&(0x7f0000001540)="fb10e4da94a3576b197be6c333ab728c267a637d77c4c5216e336d22e2938a069280be21510039a22f1185d18a1012011d80bde407ea9d48fa0c90cf4d630914f2cf37704974ed9b304ce9fd4b062c0b9ea865c48dc106241222d564b35707e3987e5c1d9b9c452a67a80181683f153e0bb58edbdc7d0b76b778b1cce9420dc2f4000712b6d5244bbfe050bf244f41e1676f97ecaac640ae94a9088971b3b07657c7d187370b51c15cf133e8654a1305a22b4eb1b74619c4fcc5a55fcab387d53d36700447e02d1ab0b220e1a7f230dd7b7d4375640f1ed17e78077faefa", 0xde}, {&(0x7f0000001640)="4740e01880f625a5729b018292f0dcef0fe185fc96a0f0d0b7fd57b8455f77d5d3bb7df37bc1974740e385d8eea28fcc", 0x30}, {&(0x7f0000001680)="0ac5d470e35d684a8bf2dda62affe1ea5ffdeeb2cc060f1b7291914c813e5afc8f2a5ce4e0637b31b7", 0x29}], 0x5, &(0x7f0000001740)={0xb8, 0x119, 0x80, "fa23af75b132be9f4c72d6dd2df9b2025e2393e3b81fc23ab02cc9aa6ab47c96c860cf71c92dad62874c74e81d16b1cea2ebbb27a7c0f429ea4962442eb601e0f3f61acfa0ebd2d51d036b76cb28b44e60da028009c163666c1a06a6dd1022abb541705cb4dde44f94464a507f51cbd4ed2a1a8a77e59703b56ea75fbdb4d9596f01189b3a7a3a916bedb493dab025fa6c0eeaeeb84d000a2f432ad80090b77ef14124"}, 0xb8}, {&(0x7f0000001800)={0x27, 0x1, 0x2, 0x7, 0x6, 0x8, "cf7c300276f99cb409cf948cc92871b4b7b346efda7394a1e6507346f1caaf47505fb08bf645a4bbb5938450d2d29a0496668b37538f8b7c549bf8a65f4d85", 0x3b}, 0x60, &(0x7f0000001980)=[{&(0x7f0000001880)="6c828c6319dc6c8d71c2179933efca42f7a8df75360a952009328240b274f2ea199e219f785cebd6044aebcfb4888616182f9b8258b3febd44277ed930d5e6ab3f3a46d02d57002ec27022421f92f107a71811b19966070e1eb22727f42e202ab900e6875e0c4953f5333a02ea318b75b827524d3d2d4058962c7372e033791d173666a542b20eda903a824d474012ff52bb01e51ebb4fcb5627e5edb4f584d96daa9841efa4f19b6ad391d9dc196acf85f219e992897b70b55c94d3e014a8b4065c54cf3e98d1a4ba66737b", 0xcc}], 0x1, &(0x7f00000019c0)={0x1010, 0x117, 0x3, "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"}, 0x1010, 0x1}], 0x5, 0x44)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000200))
ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:04 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003ff4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9effffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x9effffff}}, 0x14}}, 0x0)

[  390.192677] 9pnet: Insufficient options for proto=fd
[  390.198727] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000008f5}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  390.269728] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfff2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x1, 0x80000000, 0x2, 0x5})

11:50:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xfffff000}}, 0x14}}, 0x0)

11:50:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4-', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000013}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf000}}, 0x14}}, 0x0)

11:50:04 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:04 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
io_setup(0x4, &(0x7f0000000840)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000900)='/dev/full\x00', 0x800, 0x0)
io_cancel(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000880)="9151d835ce2f4188a0e33ed154055c8171046e8d1aa5b83b752fc415e12f7e19d90647427689379016d7fad9a3596cb70260cd46a8bb0c68345596a48145de0c9d9adfa24b8786c2ae327bb46a48446b3805cc59b15ca28f65d521ffe89ed403d03099f14e94eae06ba469266c9ce13a", 0xfffffffffffffd7f, 0xffffffff, 0x0, 0x0, r3}, &(0x7f0000000980))
ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000080)}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x101000, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000800)={{0x1f8, 0x8, 0x4, 0x3, 0x2, 0x8000}, 0x8000})
r6 = fcntl$dupfd(r4, 0x406, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
fcntl$notify(r6, 0x402, 0x11)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x101000, 0x0)

11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  390.720852] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  390.741756] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x34000}}, 0x14}}, 0x0)

[  390.831481] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010007000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf4f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:04 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  390.896167] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffffffffffff}}, 0x14}}, 0x0)

11:50:05 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:05 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="6578743405", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010038f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:05 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x40030000000000}}, 0x14}}, 0x0)

11:50:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfaf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffef6, &(0x7f0000000580)}, 0xfffffffffffffec1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  391.328075] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  391.349678] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff7f00000000}}, 0x14}}, 0x0)

[  391.434576] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000046f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x89d}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  391.501138] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x100000001, @empty, 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x4}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x3ff}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0xaebe, @empty, 0x80000000}], 0xa0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:05 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000"], 0x15)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4z', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x30020000}}, 0x14}}, 0x0)

11:50:05 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434c0", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100000042f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = dup(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x4, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0}}, 0x14}}, 0x0)

11:50:05 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf9f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:05 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:06 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f"], 0x25)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x100000000000000}}, 0x14}}, 0x0)

11:50:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000017}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743404", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xc00e000000000000}}, 0x14}}, 0x0)

[  392.430112] nla_parse: 9 callbacks suppressed
[  392.430121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:06 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010006000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c"], 0x28)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x47f, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e21, 0x9, @loopback, 0x4}}, {{0xa, 0x4e24, 0x8000, @remote, 0x2}}}, 0x108)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0x885a0fa727d9a2be)

11:50:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf0ffff}}, 0x14}}, 0x0)

11:50:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434fd", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x80000}}, 0x14}}, 0x0)

[  392.633620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010011000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65"], 0x29)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16f7cb752edfcbf455808910d5ae003c00000000000000bf610010000002000000bf0100000000000000000000000000031501000000000000b7000000000000009500000000001000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000580)={r2, 0x9}, 0x8)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40001, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200), 0x4)
flock(r1, 0x4)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000280)='kF$m0', 0x5)
connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x4, {0x1000, 0x8, 0xeda, 0x1ff, 0x4, 0x6}, 0x0, 0x4}, 0xe)

11:50:06 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434f4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf303}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff9e}}, 0x14}}, 0x0)

[  392.957222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  393.092475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b700000000e200009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x2, 0x23fffb)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000200)=0x8)
fchmod(r2, 0x49)

11:50:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000003bf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434fb", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:07 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:07 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xec0}}, 0x14}}, 0x0)

11:50:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fc}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  393.185522] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  393.205085] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  393.268392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101000, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000200)={0x7fffffff, 0x3})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000240)={0x10003, 0x0, &(0x7f0000ffc000/0x1000)=nil})

11:50:07 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xf00000000000000}}, 0x14}}, 0x0)

11:50:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:07 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1200000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000851000000cec75bc7edc430000000000bf610000000000008510000002000000bf010000000e000095000000b7000000000000009500000000000000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='syzkaller\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0x400300}}, 0x14}}, 0x0)

[  393.526451] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  393.562547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  393.741809] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:07 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:07 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xd00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3, 0x0, 0xffffff7f}}, 0x14}}, 0x0)

11:50:07 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000000f440}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:07 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  393.907132] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  393.928554] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  393.996201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  394.015552] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b01000c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xec0}}, 0x0)

11:50:08 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x8, 0x200)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000200))

[  394.068637] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xf}}, 0x0)

11:50:08 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  394.236827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  394.287188] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b0100ffffff9e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:08 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xa}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
socketpair(0xe, 0x0, 0x401, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000200)={0x5, 0x100000001, 0x9c, 0x0, 0x0, [], [], [], 0x3, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000feffffffffffff0000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xfffffdef}}, 0x0)

[  394.514694] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  394.534609] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000"], 0x11)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  394.611479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  394.642609] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000087}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x20000194}}, 0x0)

11:50:08 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  394.739678] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={<r2=>0x0, @dev, @rand_addr}, &(0x7f0000000200)=0xc)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, @remote, @empty, 0x0, 0x6, 0x0, 0x100, 0x0, 0x100000, r2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000"], 0x14)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000001a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x33fe0}}, 0x0)

11:50:08 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  394.940147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x8000, 0x0)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000200)=""/25)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x3, 0x3, 0xfff, 0x0, 0x10001})

[  394.995413] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  395.106206] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:09 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:09 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffffff87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000"], 0x15)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x7ffff000}}, 0x0)

11:50:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48)
accept4$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x200, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newae={0x5c, 0x1e, 0x20, 0x70bd28, 0x25dfdbfd, {{@in, 0x4d3, 0x2}, @in=@multicast1, 0x5}, [@tfcpad={0x8, 0x16, 0x1ff}, @replay_thresh={0x8}, @policy_type={0xc, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="1075d71993107079938c7f0efa20c81f7fbd9a2a362ee1c8eae0d480cf30385437ca1e8de5ec02afcbb4b5ee0bc6f27ac18f03681f8c97746caa31e2e5ead3a3b3b7a3b6831ad056ec79429be5f832cee9b793be488c8c982f85241aee3046deee9d41ba9850ef", 0x67}], 0x1, 0x0)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000580))

11:50:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  395.236102] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  395.258046] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:09 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  395.349549] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  395.355336] 9pnet: Insufficient options for proto=fd
11:50:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0xc0}}, 0x0)

[  395.439497] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:09 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf4f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:09 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x0, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  395.651718] 9pnet: Insufficient options for proto=fd
[  395.685944] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  395.769712] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
pselect6(0x40, &(0x7f0000000180)={0x3e, 0x6, 0x9, 0x8, 0x6, 0x4, 0x61fdc969, 0xfea}, &(0x7f0000000200)={0x100000001, 0x1ff, 0x5, 0x6f, 0x80000000, 0x100, 0x10}, &(0x7f0000000240)={0x1ff, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffff, 0x0, 0x9, 0x7}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x24}, 0x8})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x2}, 0x0)

11:50:09 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:09 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x43f4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:09 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4L', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  395.924791] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  395.948699] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x4}, 0x0)

11:50:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
time(&(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
set_tid_address(&(0x7f0000000200))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
accept(r0, &(0x7f0000000240)=@in={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x80)

11:50:10 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x300}, 0x0)

11:50:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x400, 0x0)
bind$alg(r2, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:10 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:10 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4H', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x8}, 0x0)

11:50:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x68}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2000, 0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf6100000000000002000000bf4100000000000095000000000000001501000000000000b70000000000000095000000007878003ce12a30d9af0e1239ebb8000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000280)=0x6)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0))

11:50:10 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x3}, 0x0)

11:50:10 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:10 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4t', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x34f4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffff0}, 0x0)

11:50:10 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:10 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x9000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9002}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\n', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x467020000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:11 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff}, 0x0)

11:50:11 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
fallocate(r0, 0x2, 0x4, 0x6e4ba9c0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x80000}, 0x0)

11:50:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = dup2(r0, r0)
sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="93aaf2fc1f1ec88887f803cec7a295b291d3336fcf6ae722b7d7135f9298b6a37a8b57aaf5e9903b7efb1b12c673db24e859a0146968f47ec9b8108bf6b95705d8352b618aa44e72e2ad1c3154b7096f21eb23a997796f1542dad12f8d2370b901e9c6e7be41dec43a735233f71e841de07d31a3c694ddc3177fa952dd79d4e23f4e414c16a70bf2c35d9b18f66d33a89eee5bc41114e516d2db6bd92d4c3a9285da5e6cc43493cedf49d0b0d75ce244991a12b860b5a112f3", 0xb9}, {&(0x7f00000002c0)="71fb61039d84b09a50e7b37ce92e87fc6ecf1b331cd5a2ce80b9853aa7126046dae525a30e06cc941b47756bfa67dee5e88a86d6f76ceb3e4b5f5631b08b1a87d6182c22d5c702d33ff380bc1df50d38944e38f89cf35d5c", 0x58}, {&(0x7f0000000580)="a9eb07028c45aeb8d6d16be95c1bce18c934914f19ed24bf139942a3f4efbe6137aa43b3a95127f86e49c9df8df968a162591f80781de721b71b340f", 0x3c}, {&(0x7f00000005c0)="8ae1869fad462b50a4d8d601feb4f278d3f7694001c2324f398a39d0dc0c204786dc11b0ecc25141c57b0ffce889121932b7c1d6bfbf4696cd43cd03c36d19fdb878d1ec93f096059664458483c6335e93ee5bf83918cf96dda12c6559f47d04c4020a008cd44f4b5a04d68e95ea1c668d30827c6ce4832c088e78da7c9ec092c481c0638afb6773b54eca1a26772e63d1118f659a36b1a1d0622cf328a4dad00d8febe28a18fa2c08daf42566c6782ccfbc4ce1300579ed20dc7c1e89450cd0ed2a", 0xc2}, {&(0x7f00000006c0)="6ba369e56e486eea46dcabe5a85db261980e667167da7215389558f282f6a8b000ea4830b8242b5c8d4966fe568f3605016b997ed915c3fff35a4de93be7b2761aa170a0c5599d70aede021be2a9a90e26a649fa18476d8893d2e761473dde8cf8d9d592e2d240dc4b6864ca3d706d4d2fe7dd6308395633e5422926829aab409f77d0d28c869bd2dcf9987b875cc643ce410dc7594e6db5a56eeadcf60c5e713a14eaff230012e56742bb64c206e1ce3a002783427889f36f131bbf2c220e4593ec8dd50982635a19cadf0da9", 0xcd}, {&(0x7f00000007c0)="b326e8977f69228173b914d2f274e6f6a63876a28ace1d9cbf78020247954223b9c1d3e9ab0365bd38be80d8318d855d5fd43f5deae982df1aa23ae05db8a0a607fbf39fd8b48a7b8bbfe9aa2b9e2e975a73f95541568c7d801c052a7339f862a218decf30ba3efa23c97987b25dacc0e7901cf26f97063799c6f52e8cddbca4cf6b27d904eefe513a630c3b", 0x8c}], 0x7, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="ebf8b2ef18d872efeeb57a107170dc11c7fa52f66c83804057232c751ab000d839055b76831f13723b92c8e5f3cbc11795b7f443a2cfe2fabb235c0dfb748afa92b19f2f506c6998e7bdd3604d60346d6323895cd1eff2878a4241d4b6cd918c42ecfe5275727d812d4e76edf8cd05da835a18d68526c732c897857a581fa3bcee2ee4aea7053aec7365e1d0de30bf070d7f2cfa82f6b3f607c7499f42b08e111f43b0d9f35323dbe666620f01ca43576b6578", 0xb3}, {&(0x7f00000009c0)="5bb863cda4de79033103636654277fa4a202ee4c7c3c2e933290249a25a48380a624f7d6370325daecbb130bd80bae6360e941a6566eaa8df1ec090a134c1324c1ded3c61bb6fb8a1072d50c474c5de898160ff1e3f20aec2dbf7724", 0x5c}], 0x2, &(0x7f0000000a80)=[@iv={0x68, 0x117, 0x2, 0x51, "6ecae170ac23c1725a2442801e7d52facde63eadb2627a1c1c9a57131a1f76767a605c777a7a5c0e6c31b85b1092b450aee4159ecc051c221ad4f4aaf80db8e33f50fa2efab2ec453a09ff45f6ca391d57"}, @op={0x18}], 0x80, 0x800}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="4a2655855ab4a7a8b0e8222e9845d5ac10e1b3a9612060ae50f44cbd2760b184477c52644d7424c86a7140411944a90630803fe0ea386f5acacd2b6e7db1b59461bb3acd63663f9a1388705595b7d02d74e7dcbc7526977076106a2c2a1a9ae2cf77a9f35db7d4e0c06232d4cba832af68424042f8a9273e6c7927de9cc0a4be0e3dc9e722e1c27333dbcc09623049f3f3952b2ec7fcbe317ebb5d02860312aec1d1c8e8a881c03a90128964602614b97ade4fa42157983d1b690ec6d9512a55fdbe18a11b7454989c5973490a380f0aee1952b83d6ba8ed39331f49c8364635a75961cc185de9796d2961b62dd506", 0xef}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000c00)="59b8b6153a9045fdade0e3c6c6", 0xd}], 0x3, 0x0, 0x0, 0x20008000}, {0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000c80)="51ffbf4d4ff9cda435bfdf5ae1843a2b9229a325389a0d0613ce004fe91fee90b1ca9a58e304e4ef43f87228ae9ff8052de1fdd9886ad6b89c07af2bb81be03c940a39d0b649f68805298e2e3ad4cb308fdc5cc0646802ee99463a4f035701d545a141cc773e9e511e8c9dc321bd962d4f3d46ca7537a2ee154fe86e320b295321ddd8c8931d0e24c2bf5ee693b6647ddf37891f7201e409e781fdcb81ee69a9de36e3a4e182d8b160bfaf809d508b3fc4312279cafae4dd9dc44c58c34b52ac86ef243441ebcf3dad3502dab8c9c93c2706d274c620f02eef66398d6f11441c", 0xe0}, {&(0x7f0000000d80)="1ee3e9a40e5c8eecbd2dc873ec48193ad7d7e7b34524695af9bf23b3c124479cbe73f0f11f50d0ae93871e12d3462f20a8669b93bf034d33e92398b84d27b8e067ae7ed9c4cbd36e74f0ccba25e6e19d8902d8fceba389dddbf752a4a9dd941135f2bbc58227ffbb7c586e215f7d604b8022a4daab38b764b71eb1c4c21817803139aec6179a69bfa403d9b5bc9bc0d216c71a9e9d1b30bee8ee4cecfc5d7d2cf374c91d9ea4c6516857a4b8a9c6d9ce99ed43d76580ac5c2af3dcb749ab33b69587f6aa8e53aaf4e7f16baac53fc680671ec5581ddbad5d2129384c3621", 0xde}, {&(0x7f0000000e80)="d737bc9a7e0ecc760143abbce575ae77768431445f85fbf089a5f0676876794b7865b61b4000f77226192bb682c92eff2ef7e4d6bf6da0bb6678c41901eead27727a813d59392a3e7d820098173c75c603cf08b879e062bf4e134ff72735888528276267ce5e77404d2a9a729c2f", 0x6e}, {&(0x7f0000000f00)="fff68b5a254baaccd4095f6d944854b0af62a1d208a8b1e296910c8c35efda42f119b8812fd814c86972122b01b17c1f98cf1c717ee0f897be99a2ebf05541bba66ad4bbcd2b686a0e8e22c7456e655b2afaccff8de113a3e7968d45f2293f7a067bdfa0d63aac757d207385f43dd0139f503739606baa3b8b65c8a8e7d9878f77f9eff899279ae544eb496c7f0ae0074dde5d64a93b684a2143e6ce7a855f40384d6f5f89935db5e5344ed5100753863f09a14069224459d71c5b54e447ae026aea669b242782f53ea7089560610012a4107abd871f2c503c03c95059c51fd0a03c74651bf7fd779741cd53459d2c99fb45bbd7f526", 0xf6}, {&(0x7f0000002080)="9a07dc19334f3b5bf9ef475396bdc4b0cdbd3cdf8ecc0ee3dae99a9ab6b43767fa9c7d4cb5ad832b879616e6f77203aba2b945ceb17d8b98b5e10ad8d1ff87a84f8885e57130d124863462dc75cc14e1ba5751f013a835a96924439887a099dd5bdb4848ad", 0x65}], 0x5, &(0x7f0000002180)=[@op={0x18}, @iv={0x30, 0x117, 0x2, 0x17, "bfef9a393b3622863a746dc14161c8d5f528ceec42d202"}], 0x48}], 0x4, 0x4000)
ioctl(r0, 0x5, &(0x7f0000000040)="6fa0f6fef3b30503715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:11 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x30}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2000000}, 0x0)

11:50:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x800, 0x0)
mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000580)=r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="bf160000000000008510000005000000bf6100000000000085101f00020000001501000000000e00b700000000ff0700000000000000005334f7075dd7f274e76efeba43feb3c9f314a21e"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000006c0)={0x1, {0x2, 0x4e23, @rand_addr=0xe5d2}, {0x2, 0x4e20}, {0x2, 0x4e21, @remote}, 0x80, 0x8, 0xfffffffffffffb9b, 0x4, 0x0, &(0x7f0000000680)='ip6gre0\x00', 0x1, 0xffffffff, 0x5})

11:50:11 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  397.615777] nla_parse: 16 callbacks suppressed
[  397.615789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  397.638500] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf000000}, 0x0)

[  397.699812] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:11 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  397.740400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  397.922196] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  397.979654] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  397.982393] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:12 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:12 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf000}, 0x0)

11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x200000008080e, 0xffffffffffffffff)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000001b0000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:12 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3df4000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  398.064526] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf01000000000000950000000000000000b700000000000000950000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  398.133056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  398.142109] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003bffdf0000000000bf611200000000008510000002000000bf0100000000000095000000000000001501000000000000b700000000000000950000bc41726b51"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffff0}, 0x0)

11:50:12 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3002}, 0x0)

[  398.275476] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  398.300062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743410", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  398.360953] 9pnet: Insufficient options for proto=fd
11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
personality(0xf)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000040000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x400802, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x6000, 0x8c)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)={0x2})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  398.476655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  398.594722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:12 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2}, 0x0)

11:50:12 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000006b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x24, {{0xa, 0x4e22, 0x8, @empty, 0xdad}}, 0x1, 0x7, [{{0xa, 0x4e20, 0x0, @mcast2, 0x1}}, {{0xa, 0x4e20, 0x1000, @mcast1, 0x100}}, {{0xa, 0x4e23, 0x2, @mcast2, 0xfff}}, {{0xa, 0x4e20, 0xc6, @loopback, 0x7fff}}, {{0xa, 0x4e21, 0x9, @remote, 0x3693}}, {{0xa, 0x4e24, 0xb75, @remote, 0x2}}, {{0xa, 0x4e24, 0x2, @local, 0x3}}]}, 0x410)

11:50:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x600000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x48f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  398.711447] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  398.738526] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  398.795122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'.
[  398.799748] 9pnet: Insufficient options for proto=fd
[  398.812991] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

[  398.839258] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:12 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x7fff, 0x4, &(0x7f0000000640)=[{&(0x7f0000000240)="c237234a6faf84c0af6c98aade1f01b4f89109edd78cc82f09bd1099a3900cdf6c8a813865331b3afecc406a18e5a163fb0210ffdbb6ed157cf8812120f1aa816478523ad2090ce2d7d61c538bc1afc08a0fd9de6c5f3df282c26ea4e34ddc485f960a1660f41c90c01fea67d49408", 0x6f, 0xfffffffffffffffb}, {&(0x7f0000001080)="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", 0x1000, 0xffffffff}, {&(0x7f0000000580)="1dd37170a6d9567926d040aaeb5232cbe31b4b548514383dc0ab893e1c3e18066eedbb87906aadadf1414769952aa7321926dfa13befcaa852cef2efcaef32cae777acac2efb905583efd004b4d9bf00b040b1d10ad0fefad42600125cc4ac25db8cbd6d9b6228634219b92e2bc2d1e28d8b4f2c4c0b712f0c9cdbc3050c5b149830dbcc5d7c7a78e32fb032bf5d9298e5856315a99b9197dfc9e89347dd50041571c2f68145337e99e9f4a7b23b84", 0xaf, 0xe240}, {&(0x7f00000002c0)="a468cbee38ccec79dde76b2c27dec113b0ec114b1f6c9bbefb39329a62488bc63f33f2c4499a62c70434126601dda21cf43e299b9275408f472113111db0f134504a6d1335", 0x45, 0x1f}], 0x4880, &(0x7f00000006c0)={[{@ref_verify='ref_verify'}, {@space_cache='space_cache'}, {@acl='acl'}, {@check_int_data='check_int_data'}, {@nospace_cache='nospace_cache'}, {@clear_cache='clear_cache'}, {@ssd_spread='ssd_spread'}]})
socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000840)={'filter\x00', 0x52, "7cdc9b7fb3d570ec69f0d1fabe6acf1bf7d72b584a323696653fc1358f4cc9a8021439f6a581ec1ac6c0511f8c2f51ac9a682724d0fb29fdb3ae3a54d2420fe2179eb8ccfeabbf57751c7b9c4e408a43df26"}, &(0x7f00000008c0)=0x76)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
write$P9_RXATTRWALK(r3, &(0x7f0000000940)={0xf, 0x1f, 0x1, 0xdb3}, 0xf)
r4 = getpid()
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000980)={0x2, 0x101, [{0x401}, {0x81, 0x0, 0xfffffffffffffff9}]})
ptrace$setregset(0x4205, r4, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)="4a57079fd8c5be965eb2e17b4a2758c4d20527a7d90d67d3d33415515526505efed3b7d157551d4d446d6d91306018ea76a97ee0ea6fcd4306d0ab265fe41d0f11bb3ae068043b98397a446f7ba3c22efb6430", 0x53})

11:50:12 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  398.950477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0)

[  399.034837] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  399.056112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:13 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:13 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000"], 0x20)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  399.110717] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffff}, 0x0)

[  399.177357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:13 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8910, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000f00)={0x2, 0x0, @local}, &(0x7f0000000f40)=0x10)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001080)=""/181, &(0x7f0000000f80)=0xb5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x490, 0x140, 0x278, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000180), {[{{@arp={@rand_addr=0x100000000, @empty, 0xff, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}, 0xffffffffffffab8e, 0xc0000000000, 0xfffffffffffffff8, 0x4, 0x400, 0x8001, 'gretap0\x00', '\x00', {}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0xd}, @multicast2, 0xff, 0x0, @mac=@random="89c1d6ae4df4", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x6, 0xd953, 0x8, 0x8, 0x7ff, 0x800, 'veth1_to_bond\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0xc0}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', 0x9}}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "91a688da9906b899339e5e865806a348cc9a725fcc6bf1477c859e4e882f"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xffffffaa, &(0x7f0000000080)}, 0xfffffe6e)
r4 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r4, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070")
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x35e, &(0x7f0000000200)=[{&(0x7f0000000cc0)="1020f5f201000700090000000300050000000000000000000100000002000000000000c400300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000028c682ac2ccc39a1596d90ec837a832dcf840a81c21b0639666ce5e6c5931b5b4e04203bd999e77c904cdf7bd622bed29a923843dc06eae332a621c8d1c9a684848", 0xaa, 0xc6}], 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r3])
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, <r6=>0x0}, &(0x7f0000000b00)=0xc)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x3, 0x4e21, 0xb46, 0x2, 0x80, 0xa0, 0xc, r5, r6}, {0x7, 0x10001, 0x0, 0x9, 0x1f, 0x8, 0x8600, 0x7}, {0x3, 0x4, 0x7fff, 0x10001}, 0xfffffffffffffff7, 0x6e6bbe, 0x3, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0xa, @in6=@ipv4, 0x0, 0x3, 0x0, 0x80, 0x8, 0x8000, 0x100000001}}, 0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r7 = syz_open_dev$adsp(&(0x7f0000000dc0)='/dev/adsp#\x00', 0x28ddb1ff, 0x92937eb0c0c860b7)
write$P9_RSYMLINK(r7, &(0x7f0000000e00)={0x14, 0x11, 0x1, {0x40, 0x1, 0x3}}, 0x14)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vga_arbiter\x00', 0x2, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000c80)={0x10000, 0x10001})

11:50:13 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1c00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743414", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf00}, 0x0)

11:50:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfbf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:13 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  399.449345] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  399.485447] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:13 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000080)=0x80, 0x800)
sendto(r2, &(0x7f0000000680)="202612564c8c5d731b0e7dae8064bc2056066929e5f7341d21fdf65996eb13ceef700c243e8747ea09197cf06648381490967d12bf37b2da38a7cb9dd7cd178a21a2219711aaac", 0x47, 0x8004, &(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x34000}, 0x0)

[  399.605075] f2fs_msg: 36 callbacks suppressed
[  399.605091] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  399.616823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
11:50:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743403", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  399.746659] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  399.753778] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
11:50:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0ffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:13 executing program 2 (fault-call:14 fault-nth:0):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff}, 0x0)

[  399.860459] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  399.867607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
11:50:13 executing program 5 (fault-call:14 fault-nth:0):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:13 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  399.967626] FAULT_INJECTION: forcing a failure.
[  399.967626] name failslab, interval 1, probability 0, space 0, times 0
[  399.979110] CPU: 0 PID: 18626 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  399.986144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  399.995509] Call Trace:
[  399.998120]  dump_stack+0x1c9/0x2b4
[  400.001781]  ? dump_stack_print_info.cold.2+0x52/0x52
[  400.006994]  ? dput.part.26+0x276/0x7a0
[  400.010999]  should_fail.cold.4+0xa/0x11
[  400.015093]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  400.018488] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  400.020234]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  400.020257]  ? _parse_integer+0x13b/0x190
[  400.020282]  ? graph_lock+0x170/0x170
[  400.020313]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  400.027345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  400.032849]  ? _kstrtoull+0x188/0x250
[  400.032870]  ? find_held_lock+0x36/0x1c0
[  400.032916]  ? check_same_owner+0x340/0x340
[  400.065960]  ? rcu_note_context_switch+0x680/0x680
[  400.070929]  __should_failslab+0x124/0x180
[  400.075185]  should_failslab+0x9/0x14
[  400.079000]  kmem_cache_alloc+0x29c/0x710
[  400.083166]  ? lock_downgrade+0x8f0/0x8f0
[  400.087335]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  400.092890]  getname_flags+0xd0/0x5a0
[  400.096717]  ? trace_hardirqs_off+0xb8/0x2b0
[  400.101144]  do_renameat2+0x307/0x1120
[  400.105046]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  400.109993]  ? wait_for_completion+0x8d0/0x8d0
[  400.114586]  ? user_path_create+0x40/0x40
[  400.118745]  ? __lock_is_held+0xb5/0x140
[  400.122832]  ? __sb_end_write+0xac/0xe0
[  400.126824]  ? fput+0x130/0x1a0
[  400.130118]  ? do_syscall_64+0x9a/0x820
[  400.134106]  ? do_syscall_64+0x9a/0x820
[  400.138095]  ? lockdep_hardirqs_on+0x421/0x5c0
[  400.140143] FAULT_INJECTION: forcing a failure.
[  400.140143] name failslab, interval 1, probability 0, space 0, times 0
[  400.142690]  ? trace_hardirqs_on+0xbd/0x2c0
[  400.142707]  ? __ia32_sys_read+0xb0/0xb0
[  400.142727]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.142742]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  400.142776]  __x64_sys_rename+0x5e/0x80
[  400.176744]  do_syscall_64+0x1b9/0x820
[  400.180645]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  400.186028]  ? syscall_return_slowpath+0x5e0/0x5e0
[  400.190976]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  400.195837]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  400.200867]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  400.205914]  ? prepare_exit_to_usermode+0x291/0x3b0
[  400.210962]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  400.215834]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.221030] RIP: 0033:0x457089
[  400.224226] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  400.243137] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  400.250876] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  400.258159] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  400.265436] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  400.272708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  400.279978] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000000
[  400.287288] CPU: 1 PID: 18637 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  400.294313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  400.303671] Call Trace:
[  400.306270]  dump_stack+0x1c9/0x2b4
[  400.309924]  ? dump_stack_print_info.cold.2+0x52/0x52
[  400.315128]  ? dput.part.26+0x276/0x7a0
[  400.319122]  should_fail.cold.4+0xa/0x11
[  400.323201]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  400.328351]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  400.333916]  ? _parse_integer+0x13b/0x190
[  400.338084]  ? graph_lock+0x170/0x170
[  400.341911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  400.347462]  ? _kstrtoull+0x188/0x250
[  400.351274]  ? find_held_lock+0x36/0x1c0
[  400.355858]  ? check_same_owner+0x340/0x340
[  400.360191]  ? rcu_note_context_switch+0x680/0x680
[  400.365131]  __should_failslab+0x124/0x180
[  400.369398]  should_failslab+0x9/0x14
[  400.373205]  kmem_cache_alloc+0x29c/0x710
[  400.377356]  ? lock_downgrade+0x8f0/0x8f0
[  400.381515]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  400.387062]  getname_flags+0xd0/0x5a0
[  400.390863]  ? trace_hardirqs_off+0xb8/0x2b0
[  400.395282]  do_renameat2+0x307/0x1120
[  400.399182]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  400.404121]  ? wait_for_completion+0x8d0/0x8d0
[  400.408730]  ? user_path_create+0x40/0x40
[  400.412878]  ? __lock_is_held+0xb5/0x140
[  400.416966]  ? __sb_end_write+0xac/0xe0
[  400.420946]  ? fput+0x130/0x1a0
[  400.424235]  ? do_syscall_64+0x9a/0x820
[  400.428213]  ? do_syscall_64+0x9a/0x820
[  400.432193]  ? lockdep_hardirqs_on+0x421/0x5c0
[  400.436779]  ? trace_hardirqs_on+0xbd/0x2c0
[  400.441102]  ? __ia32_sys_read+0xb0/0xb0
[  400.445170]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.450535]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  400.455652]  __x64_sys_rename+0x5e/0x80
[  400.459633]  do_syscall_64+0x1b9/0x820
[  400.463527]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  400.468895]  ? syscall_return_slowpath+0x5e0/0x5e0
[  400.473836]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  400.478682]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  400.483729]  ? prepare_exit_to_usermode+0x291/0x3b0
[  400.488759]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  400.493631]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.498845] RIP: 0033:0x457089
[  400.502041] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  400.520940] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  400.528651] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  400.535923] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  400.543215] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  400.550482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  400.557749] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000000
[  400.606627] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  400.638452] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  400.720198] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:14 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x43e}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:14 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e0000}, 0x0)

11:50:14 executing program 2 (fault-call:14 fault-nth:1):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:14 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3f, 0x200)
getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000740)=""/22, 0x16)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c0000000000007d38610000000000008510000002000000bf0100000000000095000000000000001501000000000000ac050000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xffffffffffffffad, &(0x7f0000000080)}, 0xdc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/keycreate\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000300)=0xe8)
r6 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x400000000000009, 0x101001)
ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000640)="11f17cc6c38fb924201d01146e209ecce951349dd6ac7eb4")
fcntl$setpipe(r1, 0x407, 0x800)
getsockname(r4, &(0x7f0000000680)=@pppol2tpv3, &(0x7f0000000700)=0x80)
r7 = getpid()
syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/net\x00')
bind$xdp(r4, &(0x7f00000005c0)={0x2c, 0x1, r5, 0x6, r6}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:14 executing program 5 (fault-call:14 fault-nth:1):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  400.775446] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  400.875736] FAULT_INJECTION: forcing a failure.
[  400.875736] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  400.887596] CPU: 1 PID: 18677 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  400.887757] FAULT_INJECTION: forcing a failure.
[  400.887757] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  400.894632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  400.915777] Call Trace:
[  400.918380]  dump_stack+0x1c9/0x2b4
[  400.922017]  ? dump_stack_print_info.cold.2+0x52/0x52
[  400.927211]  ? __lock_acquire+0x7fc/0x5020
[  400.931462]  should_fail.cold.4+0xa/0x11
[  400.935534]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  400.940643]  ? __lock_acquire+0x7fc/0x5020
[  400.944887]  ? mark_held_locks+0x160/0x160
[  400.949141]  ? mark_held_locks+0x160/0x160
[  400.953383]  ? print_usage_bug+0xc0/0xc0
[  400.957451]  ? __lock_acquire+0x7fc/0x5020
[  400.961692]  ? dput.part.26+0x276/0x7a0
[  400.965675]  ? graph_lock+0x170/0x170
[  400.969482]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  400.975027]  ? should_fail+0x246/0xd86
[  400.978928]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  400.984043]  __alloc_pages_nodemask+0x365/0xd10
[  400.988720]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  400.994264]  ? _parse_integer+0x13b/0x190
[  400.998419]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  401.003448]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  401.008997]  ? _kstrtoull+0x188/0x250
[  401.012803]  ? find_held_lock+0x36/0x1c0
[  401.016888]  ? trace_hardirqs_off+0xb8/0x2b0
[  401.021311]  cache_grow_begin+0x91/0x710
[  401.025383]  kmem_cache_alloc+0x63a/0x710
[  401.029545]  getname_flags+0xd0/0x5a0
[  401.033351]  ? trace_hardirqs_off+0xb8/0x2b0
[  401.037764]  do_renameat2+0x307/0x1120
[  401.041664]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  401.046604]  ? wait_for_completion+0x8d0/0x8d0
[  401.051190]  ? user_path_create+0x40/0x40
[  401.055339]  ? __lock_is_held+0xb5/0x140
[  401.059427]  ? __sb_end_write+0xac/0xe0
[  401.063409]  ? fput+0x130/0x1a0
[  401.066701]  ? do_syscall_64+0x9a/0x820
[  401.070680]  ? do_syscall_64+0x9a/0x820
[  401.074657]  ? lockdep_hardirqs_on+0x421/0x5c0
[  401.079244]  ? trace_hardirqs_on+0xbd/0x2c0
[  401.083568]  ? __ia32_sys_read+0xb0/0xb0
[  401.087637]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.093004]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  401.098120]  __x64_sys_rename+0x5e/0x80
[  401.102107]  do_syscall_64+0x1b9/0x820
[  401.106006]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  401.111376]  ? syscall_return_slowpath+0x5e0/0x5e0
[  401.116307]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  401.121330]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  401.126350]  ? recalc_sigpending_tsk+0x180/0x180
[  401.131112]  ? kasan_check_write+0x14/0x20
[  401.135354]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  401.140211]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.145400] RIP: 0033:0x457089
[  401.148601] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  401.167512] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  401.175232] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  401.182502] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  401.189778] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  401.197052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  401.204336] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000001
[  401.211643] CPU: 0 PID: 18674 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  401.218664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  401.228492] Call Trace:
[  401.231098]  dump_stack+0x1c9/0x2b4
[  401.234739]  ? dump_stack_print_info.cold.2+0x52/0x52
[  401.239954]  ? __lock_acquire+0x7fc/0x5020
[  401.244212]  should_fail.cold.4+0xa/0x11
[  401.248285]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  401.253403]  ? __lock_acquire+0x7fc/0x5020
[  401.257657]  ? mark_held_locks+0x160/0x160
[  401.261917]  ? mark_held_locks+0x160/0x160
[  401.266178]  ? print_usage_bug+0xc0/0xc0
[  401.266850] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  401.270252]  ? __lock_acquire+0x7fc/0x5020
[  401.270271]  ? dput.part.26+0x276/0x7a0
[  401.270292]  ? graph_lock+0x170/0x170
[  401.270313]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  401.270331]  ? should_fail+0x246/0xd86
[  401.270357]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  401.305372]  __alloc_pages_nodemask+0x365/0xd10
[  401.310054]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  401.310073]  ? _parse_integer+0x13b/0x190
[  401.310092]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  401.310109]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  401.310125]  ? _kstrtoull+0x188/0x250
[  401.310144]  ? find_held_lock+0x36/0x1c0
[  401.310174]  ? trace_hardirqs_off+0xb8/0x2b0
[  401.342621]  cache_grow_begin+0x91/0x710
[  401.346704]  kmem_cache_alloc+0x63a/0x710
[  401.350880]  getname_flags+0xd0/0x5a0
[  401.354712]  ? trace_hardirqs_off+0xb8/0x2b0
[  401.359433]  do_renameat2+0x307/0x1120
[  401.363345]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  401.368292]  ? wait_for_completion+0x8d0/0x8d0
[  401.372882]  ? user_path_create+0x40/0x40
[  401.377054]  ? __lock_is_held+0xb5/0x140
[  401.381143]  ? __sb_end_write+0xac/0xe0
[  401.385132]  ? fput+0x130/0x1a0
[  401.388419]  ? do_syscall_64+0x9a/0x820
[  401.392402]  ? do_syscall_64+0x9a/0x820
[  401.396388]  ? lockdep_hardirqs_on+0x421/0x5c0
[  401.400980]  ? trace_hardirqs_on+0xbd/0x2c0
[  401.405311]  ? __ia32_sys_read+0xb0/0xb0
[  401.409382]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.414754]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  401.419876]  __x64_sys_rename+0x5e/0x80
[  401.423881]  do_syscall_64+0x1b9/0x820
[  401.427794]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  401.433168]  ? syscall_return_slowpath+0x5e0/0x5e0
[  401.438114]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  401.443316]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  401.448350]  ? recalc_sigpending_tsk+0x180/0x180
[  401.453123]  ? kasan_check_write+0x14/0x20
[  401.457377]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  401.462240]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.467440] RIP: 0033:0x457089
[  401.470648] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  401.489567] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  401.497298] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  401.504581] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  401.511860] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  401.519137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
11:50:15 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x400300}, 0x0)

11:50:15 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x30020000}, 0x0)

11:50:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:15 executing program 2 (fault-call:14 fault-nth:2):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  401.526417] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000001
11:50:15 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x8}, 0x0)

11:50:15 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  401.633160] FAULT_INJECTION: forcing a failure.
[  401.633160] name failslab, interval 1, probability 0, space 0, times 0
[  401.644506] CPU: 0 PID: 18708 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  401.651536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  401.660914] Call Trace:
[  401.663540]  dump_stack+0x1c9/0x2b4
[  401.667197]  ? dump_stack_print_info.cold.2+0x52/0x52
[  401.672402]  ? find_held_lock+0x36/0x1c0
[  401.676496]  should_fail.cold.4+0xa/0x11
11:50:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  401.680585]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  401.680613]  ? lock_downgrade+0x8f0/0x8f0
[  401.680640]  ? kasan_check_read+0x11/0x20
[  401.680662]  ? dput.part.26+0x276/0x7a0
[  401.698028]  ? find_held_lock+0x36/0x1c0
[  401.702119]  ? check_same_owner+0x340/0x340
[  401.706446]  ? filename_parentat.isra.58+0x424/0x570
[  401.711564]  ? rcu_note_context_switch+0x680/0x680
[  401.716504]  ? getname+0x20/0x20
[  401.719883]  __should_failslab+0x124/0x180
[  401.724150]  should_failslab+0x9/0x14
[  401.727962]  kmem_cache_alloc+0x29c/0x710
[  401.732127]  getname_flags+0xd0/0x5a0
[  401.735952]  ? trace_hardirqs_off+0xb8/0x2b0
[  401.740377]  do_renameat2+0x36e/0x1120
[  401.744289]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  401.749239]  ? wait_for_completion+0x8d0/0x8d0
[  401.753832]  ? user_path_create+0x40/0x40
[  401.757989]  ? __lock_is_held+0xb5/0x140
[  401.762081]  ? fput+0x130/0x1a0
[  401.762108]  ? do_syscall_64+0x9a/0x820
[  401.769352]  ? do_syscall_64+0x9a/0x820
[  401.773340]  ? trace_hardirqs_on+0xbd/0x2c0
[  401.777668]  ? __ia32_sys_read+0xb0/0xb0
[  401.781742]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.787118]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  401.792240]  __x64_sys_rename+0x5e/0x80
[  401.796234]  do_syscall_64+0x1b9/0x820
[  401.800141]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  401.805527]  ? syscall_return_slowpath+0x5e0/0x5e0
[  401.810468]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  401.815497]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  401.820524]  ? recalc_sigpending_tsk+0x180/0x180
[  401.825288]  ? kasan_check_write+0x14/0x20
[  401.829540]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  401.834396]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  401.839634] RIP: 0033:0x457089
[  401.842830] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  401.861739] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  401.869455] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  401.876725] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  401.883999] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  401.891275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  401.898565] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002
11:50:16 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf}, 0x0)

11:50:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3ff4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x10000)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000200)="812a11c15d6efa64f85df1b2648f6557a0589e6a49c0d2a8a3e8a6013f66ec565ce11faff76f30f9e28bd58e87bc65838bc670ae77bfda321dc06ed8005f05d107be1695ee1e2b5a39d86cde9e9c961a7dde8132d68667c01b61745f698eed8e8eb77a0bafe7d0bfd7c6147cdfda471f2a44d1d426655b88a3987d7f7041a0ac03a2f8", &(0x7f0000001080)=""/4096}, 0x18)

11:50:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4f3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:16 executing program 5 (fault-call:14 fault-nth:2):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:16 executing program 2 (fault-call:14 fault-nth:3):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:16 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  402.155869] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  402.218921] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  402.247706] FAULT_INJECTION: forcing a failure.
[  402.247706] name failslab, interval 1, probability 0, space 0, times 0
[  402.259323] CPU: 0 PID: 18749 Comm: syz-executor5 Not tainted 4.18.0+ #205
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0)

[  402.266348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  402.275709] Call Trace:
[  402.278317]  dump_stack+0x1c9/0x2b4
[  402.281978]  ? dump_stack_print_info.cold.2+0x52/0x52
[  402.287191]  ? mark_held_locks+0x160/0x160
[  402.291450]  ? print_usage_bug+0xc0/0xc0
[  402.295548]  should_fail.cold.4+0xa/0x11
[  402.299633]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  402.299669]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.310292]  ? walk_component+0x3fe/0x2630
[  402.314551]  ? graph_lock+0x170/0x170
[  402.318362]  ? mark_held_locks+0x160/0x160
[  402.322617]  ? find_held_lock+0x36/0x1c0
[  402.326693]  ? __lock_is_held+0xb5/0x140
[  402.330782]  ? check_same_owner+0x340/0x340
[  402.335119]  ? rcu_note_context_switch+0x680/0x680
[  402.340066]  __should_failslab+0x124/0x180
[  402.344316]  should_failslab+0x9/0x14
[  402.348126]  kmem_cache_alloc+0x29c/0x710
[  402.352287]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  402.356974]  __d_alloc+0xc8/0xd50
[  402.360440]  ? shrink_dcache_for_umount+0x2b0/0x2b0
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0)

[  402.365470]  ? d_alloc_parallel+0x1eb0/0x1eb0
[  402.369979]  ? d_lookup+0x269/0x340
[  402.373614]  ? d_lookup+0x269/0x340
[  402.377251]  ? lockdep_hardirqs_on+0x421/0x5c0
[  402.381850]  ? lock_rename+0x236/0x290
[  402.385752]  ? lookup_dcache+0x22/0x140
[  402.389739]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  402.394854]  ? lock_release+0x9f0/0x9f0
[  402.398843]  ? check_same_owner+0x340/0x340
[  402.403181]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  402.408208]  d_alloc+0x96/0x380
[  402.411493]  ? __d_lookup+0x9e0/0x9e0
[  402.415305]  ? __d_alloc+0xd50/0xd50
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e}, 0x0)

[  402.419030]  ? lock_rename+0x236/0x290
[  402.422947]  __lookup_hash+0xd9/0x190
[  402.426763]  do_renameat2+0x6ce/0x1120
[  402.430675]  ? user_path_create+0x40/0x40
[  402.434830]  ? __lock_is_held+0xb5/0x140
[  402.438945]  ? do_syscall_64+0x9a/0x820
[  402.442953]  ? do_syscall_64+0x9a/0x820
[  402.446956]  ? trace_hardirqs_on+0xbd/0x2c0
[  402.451287]  ? __ia32_sys_read+0xb0/0xb0
[  402.455365]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  402.460742]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  402.465850]  ? ksys_mount+0xa8/0x140
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0)

11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x200000000000000}, 0x0)

[  402.469582]  __x64_sys_rename+0x5e/0x80
[  402.473592]  do_syscall_64+0x1b9/0x820
[  402.477495]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  402.482879]  ? syscall_return_slowpath+0x5e0/0x5e0
[  402.487838]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  402.492871]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  402.497917]  ? recalc_sigpending_tsk+0x180/0x180
[  402.502691]  ? kasan_check_write+0x14/0x20
[  402.506956]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  402.511819]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  402.517023] RIP: 0033:0x457089
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffff000}, 0x0)

[  402.520232] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  402.539149] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  402.546881] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  402.554174] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  402.561463] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  402.568746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  402.576052] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002
[  402.608618] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  402.618086] FAULT_INJECTION: forcing a failure.
[  402.618086] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  402.629495] nla_parse: 13 callbacks suppressed
[  402.629506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  402.629930] CPU: 1 PID: 18748 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  402.649934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  402.659298] Call Trace:
[  402.659327]  dump_stack+0x1c9/0x2b4
[  402.659354]  ? dump_stack_print_info.cold.2+0x52/0x52
[  402.659385]  ? __follow_mount_rcu.isra.35.part.36+0x890/0x890
[  402.676649]  should_fail.cold.4+0xa/0x11
[  402.680721]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  402.685837]  ? map_id_up+0x19e/0x3e0
[  402.689563]  ? make_kprojid+0x30/0x30
[  402.693368]  ? find_held_lock+0x36/0x1c0
[  402.697455]  ? mark_held_locks+0x160/0x160
[  402.701700]  ? from_kgid+0x87/0xc0
[  402.705252]  ? graph_lock+0x170/0x170
[  402.709065]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.714605]  ? security_capable+0x99/0xc0
[  402.718767]  ? graph_lock+0x170/0x170
[  402.722573]  ? find_held_lock+0x36/0x1c0
[  402.726642]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.732202]  ? should_fail+0x246/0xd86
[  402.736097]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  402.741208]  __alloc_pages_nodemask+0x365/0xd10
[  402.745881]  ? lock_downgrade+0x8f0/0x8f0
[  402.750048]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  402.755065]  ? dput.part.26+0x276/0x7a0
[  402.759047]  ? find_held_lock+0x36/0x1c0
[  402.763128]  ? trace_hardirqs_off+0xb8/0x2b0
[  402.767545]  cache_grow_begin+0x91/0x710
[  402.771616]  kmem_cache_alloc+0x63a/0x710
[  402.775777]  getname_flags+0xd0/0x5a0
[  402.779577]  ? trace_hardirqs_off+0xb8/0x2b0
[  402.783993]  do_renameat2+0x36e/0x1120
[  402.787890]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  402.792835]  ? wait_for_completion+0x8d0/0x8d0
[  402.797421]  ? user_path_create+0x40/0x40
[  402.801598]  ? __lock_is_held+0xb5/0x140
[  402.805683]  ? fput+0x130/0x1a0
[  402.808966]  ? do_syscall_64+0x9a/0x820
[  402.812944]  ? do_syscall_64+0x9a/0x820
[  402.817011]  ? trace_hardirqs_on+0xbd/0x2c0
[  402.821333]  ? __ia32_sys_read+0xb0/0xb0
[  402.825400]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  402.830769]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  402.835881]  __x64_sys_rename+0x5e/0x80
[  402.839869]  do_syscall_64+0x1b9/0x820
[  402.843768]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  402.849136]  ? syscall_return_slowpath+0x5e0/0x5e0
[  402.854077]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  402.859110]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  402.864136]  ? recalc_sigpending_tsk+0x180/0x180
[  402.868912]  ? kasan_check_write+0x14/0x20
[  402.873160]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  402.878017]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  402.883208] RIP: 0033:0x457089
[  402.886404] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  402.905316] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  402.913032] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
11:50:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x230}, 0x0)

11:50:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  402.920300] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  402.927566] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  402.934856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  402.942127] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000003
[  403.034852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:17 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:17 executing program 5 (fault-call:14 fault-nth:3):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:17 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000d640)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f000000d740)=0xe8)
sendmmsg(r0, &(0x7f000000dd00)=[{{&(0x7f0000000200)=@ax25={0x3, {"2edec176f5be72"}, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="dfba97a3e59739334eaba191c3eb20ba60d4213ab2691173a0c3bbf3273cae0110bff639e8ed2aee5b23b6a9fe7052a244daa0862d8a0a81204a785cc7e35092757fbba2908a62bcc76fefcd74dad511bb7fb2bd0879d68be9fef8ad6c002f2d723b27a55f26f2a589e8325626215742f5bdb29d7dc5bad30b6efe8689836f9765eb12d314ad28d20f78815583c847b50ffc0dfe7ad3a84fbf2b30efc52b7fe649d3a616618c048d5db6431e0504e36983ffa0974394", 0xb6}, {&(0x7f0000000580)="b861ab354b85b40d385f88cb671adb170e5dbe58c00ce17a14d4a5cfbb935dbd54903946445d2c4255c350ed29eb42c7b89a8185afc04bd08b4902de211c92d72f96b8f05c0efa2710e5fa62de88820bdf8897209cbba30d73fde9a447cf4d5ef7108ded0e3c18d84796c4118a8479ef8d620b141fafebfd71c9e3e7d6670ac574fb188eb5c3169c827d6b0454a788d01a3506054ccdd4d785b5d4d70d0376f10da213bafd5f9e211a3f6ce22a4d65bf92149f9c45eb0ea7cb5fe5e90c201cdc77bcfe4017ebde79581f6660171c6c1ef9d9", 0xd2}], 0x2, &(0x7f0000000680)=[{0xf8, 0x1ff, 0xd5, "9927c7cd44d520d58467f0112add7ca81bd36c242a001197442665a40813e360a8a2862ef42be16e9afc3cf25a841df1108cebde537881205a730b0381184dc4aaae1cee00290b43d5c89e1f334cdb4d9fcad0239df1cd832b2046abb0a0b9fa8657b77f626579682e385bf4feb5cd324e0bd9ec7c59e76b6122f9e9f76b491685af2a731e1822e5b9641e9661dad6ebd50d3980eaac6efb20992e1cf66ffda3abc12351e3cbb21453faf9a2286d879ab7b6de28d74cb05c2c7a4965fbaae55457ee1484b4921c58ba6e4637c49dae33d6a51d1afff63c791e4b3bc006824e07c7d9f3"}, {0x20, 0xff, 0x9, "78002e65fdb06a8e2253f9a693eb"}], 0x118, 0x40080}, 0x1}, {{&(0x7f000000d780)=@can={0x1d, r1}, 0x80, &(0x7f000000da80)=[{&(0x7f000000d800)="cbd509d744b518", 0x7}, {&(0x7f000000d840)="8e4c769070a4b52dc2120dde34ca0f403aa71ed2bb71aeba9bcc5c08989e80ee74b77f09db0a4a5c2de6ebc78c7987b92f4ce3cf9f", 0x35}, {&(0x7f000000d880)="b6fbb2cb52718e69b2135fa6fc3d26de7f802a4519d450f28191ce933593bb3f6cf628c73fb3e70057d76ca331287c6bb68c968e8c77da0aec6e595795fdc990658c869ff07584d0b32e5f2027a835349df4c08e99c7b51b86b0391a973625be201c7f05c000a87b93a7a1cf90dbe632bfbb9a4b0d39244bc8a8bc11fd9da368d80a6a0a0ed073f9e99e53c1fceb7844a06e9c9d16c66596959f30b224a1c9291eab41f8c28084e3d211142f424fb643eb6a805c178f4c63ed4a10268e19e9fb25fff5b050ec36bb01cac61beaab29b9a5593e7b0c87ccde0b4ca0d14b73e157f1195837d636a8c7", 0xe8}, {&(0x7f000000d980)="ff2ffbafbaaf2ab5c4a2851db5a11985d9e036014623548a1e2c254e567350dee02963bbffc4f9b3c4356ecc058aedf652eafb3145c1bc917bc5e9614746c47f8e059df33c2c2d4b55a592537d31b7c448038716dfa23ebff37a658c02142ceed05e6841c06bbe13ece6a26e4944b7d70a42d3fa2434469549ea2f705a46c00ea2f60d3783e89a0b0e9323f033e2f769559f2bb5e6c228944c8bcf60a5303ea5d58aa1330d3039a9c99083059624fe235a9ad4369f759ae5f2dea307d9f7b88d51ad73c32b85cf4c80", 0xc9}], 0x4, &(0x7f000000dac0)=[{0x90, 0x116, 0x1c00000000000000, "6e38d40dbf3e0611534c335acefe4fcbf8a8730e6d6badfdc2116a8519e5e69dac5d1baef28f98b77ca118872c2e59c7fb3ba701169ceebae5dc92309903da1eac38c58c16f51ee04b7e7c24f2f918ce18d6740db276c1fee67222f968f9c3cb99028a08eb87c63a193a6ce25aa0e67284cf9f59f9b47187816b9d"}], 0x90, 0x40}, 0xffff}, {{&(0x7f000000db80)=@ax25={0x3, {"6f4451df92603c"}, 0x4}, 0x80, &(0x7f000000dc40)=[{&(0x7f000000dc00)="bc4378d2a0fe762a776770de3e5731d7fc5817", 0x13}], 0x1, &(0x7f000000dc80)=[{0x78, 0x0, 0x200, "dcd78ea2d78ac877efdec2d34e470af08bb9630d87c7a8209d4ebe22d803a96b919f97fc6a876bc372bcbf49b90607d649525e4482420a6b3d695b738ba6592260a7f1a8e8e399824ca14e52406c3c8027e97a0337ab6379b2360884e147e38aceb9"}], 0x78, 0x20000000}, 0x80}], 0x3, 0x800)
ioctl(r0, 0x8912, &(0x7f0000000880)="0a5cc80700315f85715070")
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000007c0)={0x7, [0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000840)={r2, 0x4, 0x20, 0x20, 0x800}, &(0x7f00000008c0)=0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:17 executing program 2 (fault-call:14 fault-nth:4):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:17 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:17 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf00000000000000}, 0x0)

11:50:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf43f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  403.207773] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  403.275235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  403.283918] FAULT_INJECTION: forcing a failure.
[  403.283918] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  403.295817] CPU: 0 PID: 18814 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  403.302853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  403.312222] Call Trace:
[  403.314832]  dump_stack+0x1c9/0x2b4
[  403.318492]  ? dump_stack_print_info.cold.2+0x52/0x52
[  403.323705]  ? __follow_mount_rcu.isra.35.part.36+0x890/0x890
[  403.329613]  should_fail.cold.4+0xa/0x11
[  403.333687]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  403.338796]  ? map_id_up+0x19e/0x3e0
[  403.342521]  ? make_kprojid+0x30/0x30
[  403.346325]  ? find_held_lock+0x36/0x1c0
[  403.350402]  ? mark_held_locks+0x160/0x160
[  403.355738]  ? from_kgid+0x87/0xc0
[  403.359293]  ? graph_lock+0x170/0x170
[  403.363111]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  403.368660]  ? security_capable+0x99/0xc0
[  403.372820]  ? graph_lock+0x170/0x170
[  403.376639]  ? find_held_lock+0x36/0x1c0
[  403.380720]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  403.386294]  ? should_fail+0x246/0xd86
[  403.390195]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  403.395312]  __alloc_pages_nodemask+0x365/0xd10
[  403.399988]  ? lock_downgrade+0x8f0/0x8f0
[  403.404147]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  403.409170]  ? dput.part.26+0x276/0x7a0
[  403.413153]  ? find_held_lock+0x36/0x1c0
[  403.417243]  ? trace_hardirqs_off+0xb8/0x2b0
[  403.421667]  cache_grow_begin+0x91/0x710
[  403.425740]  kmem_cache_alloc+0x63a/0x710
[  403.429910]  getname_flags+0xd0/0x5a0
[  403.433721]  ? trace_hardirqs_off+0xb8/0x2b0
[  403.438138]  do_renameat2+0x36e/0x1120
[  403.442041]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  403.446985]  ? wait_for_completion+0x8d0/0x8d0
[  403.451574]  ? user_path_create+0x40/0x40
[  403.455731]  ? __lock_is_held+0xb5/0x140
[  403.459816]  ? fput+0x130/0x1a0
[  403.463105]  ? do_syscall_64+0x9a/0x820
[  403.467086]  ? do_syscall_64+0x9a/0x820
[  403.471070]  ? trace_hardirqs_on+0xbd/0x2c0
[  403.475398]  ? __ia32_sys_read+0xb0/0xb0
[  403.479473]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  403.484841]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  403.489956]  __x64_sys_rename+0x5e/0x80
[  403.493950]  do_syscall_64+0x1b9/0x820
[  403.497844]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  403.503215]  ? syscall_return_slowpath+0x5e0/0x5e0
[  403.508147]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  403.513167]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  403.518187]  ? recalc_sigpending_tsk+0x180/0x180
[  403.522951]  ? kasan_check_write+0x14/0x20
[  403.527202]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  403.532058]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  403.537251] RIP: 0033:0x457089
[  403.540450] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  403.559356] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  403.567067] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  403.574335] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  403.581605] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  403.588879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  403.596163] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000003
[  403.624574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  403.637617] FAULT_INJECTION: forcing a failure.
[  403.637617] name failslab, interval 1, probability 0, space 0, times 0
[  403.648989] CPU: 0 PID: 18822 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  403.656024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  403.665387] Call Trace:
[  403.667998]  dump_stack+0x1c9/0x2b4
[  403.671645]  ? dump_stack_print_info.cold.2+0x52/0x52
[  403.676853]  ? mark_held_locks+0x160/0x160
[  403.681189]  ? print_usage_bug+0xc0/0xc0
[  403.685276]  should_fail.cold.4+0xa/0x11
[  403.685302]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  403.685325]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  403.685343]  ? walk_component+0x3fe/0x2630
[  403.685377]  ? graph_lock+0x170/0x170
[  403.708103]  ? mark_held_locks+0x160/0x160
[  403.712360]  ? find_held_lock+0x36/0x1c0
[  403.716437]  ? __lock_is_held+0xb5/0x140
[  403.720517]  ? check_same_owner+0x340/0x340
[  403.724851]  ? rcu_note_context_switch+0x680/0x680
[  403.729794]  __should_failslab+0x124/0x180
[  403.734042]  should_failslab+0x9/0x14
[  403.737852]  kmem_cache_alloc+0x29c/0x710
[  403.742011]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  403.746695]  __d_alloc+0xc8/0xd50
[  403.750163]  ? shrink_dcache_for_umount+0x2b0/0x2b0
[  403.755191]  ? d_alloc_parallel+0x1eb0/0x1eb0
[  403.759686]  ? d_lookup+0x269/0x340
[  403.763315]  ? d_lookup+0x269/0x340
[  403.766950]  ? lockdep_hardirqs_on+0x421/0x5c0
[  403.771537]  ? lock_rename+0x236/0x290
[  403.775423]  ? lookup_dcache+0x22/0x140
[  403.779401]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  403.784508]  ? lock_release+0x9f0/0x9f0
[  403.788485]  ? check_same_owner+0x340/0x340
[  403.792813]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  403.797839]  d_alloc+0x96/0x380
[  403.801123]  ? __d_lookup+0x9e0/0x9e0
[  403.804941]  ? __d_alloc+0xd50/0xd50
[  403.808655]  ? lock_rename+0x236/0x290
[  403.812551]  __lookup_hash+0xd9/0x190
[  403.816360]  do_renameat2+0x6ce/0x1120
[  403.820269]  ? user_path_create+0x40/0x40
[  403.824421]  ? __lock_is_held+0xb5/0x140
[  403.828508]  ? do_syscall_64+0x9a/0x820
[  403.832484]  ? do_syscall_64+0x9a/0x820
[  403.836464]  ? trace_hardirqs_on+0xbd/0x2c0
[  403.840790]  ? __ia32_sys_read+0xb0/0xb0
[  403.844859]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  403.850224]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  403.855335]  __x64_sys_rename+0x5e/0x80
[  403.859323]  do_syscall_64+0x1b9/0x820
[  403.863219]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  403.868588]  ? syscall_return_slowpath+0x5e0/0x5e0
[  403.873519]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  403.878546]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  403.883565]  ? recalc_sigpending_tsk+0x180/0x180
[  403.888327]  ? kasan_check_write+0x14/0x20
[  403.892571]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  403.897425]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  403.902616] RIP: 0033:0x457089
[  403.905814] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
11:50:17 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x1000000}, 0x0)

11:50:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9e080000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  403.924723] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  403.932447] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  403.939723] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  403.946993] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  403.954259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  403.961529] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000004
11:50:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf44b}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:18 executing program 5 (fault-call:14 fault-nth:4):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0}, 0x0)

[  404.023427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  404.126973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  404.161690] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xec0}, 0x0)

[  404.202596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  404.215621] 9pnet: Insufficient options for proto=fd
[  404.219945] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  404.277917] 9pnet: Insufficient options for proto=fd
[  404.294484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  404.341898] FAULT_INJECTION: forcing a failure.
[  404.341898] name failslab, interval 1, probability 0, space 0, times 0
[  404.353317] CPU: 1 PID: 18865 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  404.360351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  404.369714] Call Trace:
[  404.372326]  dump_stack+0x1c9/0x2b4
[  404.375977]  ? dump_stack_print_info.cold.2+0x52/0x52
[  404.381180]  ? mark_held_locks+0x160/0x160
[  404.385434]  ? print_usage_bug+0xc0/0xc0
[  404.389522]  should_fail.cold.4+0xa/0x11
[  404.393617]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  404.398740]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  404.404299]  ? walk_component+0x3fe/0x2630
[  404.408579]  ? graph_lock+0x170/0x170
[  404.412402]  ? mark_held_locks+0x160/0x160
[  404.416666]  ? find_held_lock+0x36/0x1c0
[  404.416731]  ? __lock_is_held+0xb5/0x140
[  404.416767]  ? check_same_owner+0x340/0x340
[  404.429180]  ? rcu_note_context_switch+0x680/0x680
[  404.434125]  __should_failslab+0x124/0x180
[  404.438374]  should_failslab+0x9/0x14
[  404.442186]  kmem_cache_alloc+0x29c/0x710
[  404.446345]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  404.451037]  __d_alloc+0xc8/0xd50
[  404.454506]  ? shrink_dcache_for_umount+0x2b0/0x2b0
[  404.459538]  ? d_alloc_parallel+0x1eb0/0x1eb0
[  404.464041]  ? d_lookup+0x269/0x340
[  404.467680]  ? d_lookup+0x269/0x340
[  404.471321]  ? lockdep_hardirqs_on+0x421/0x5c0
[  404.475921]  ? lock_rename+0x236/0x290
[  404.479825]  ? lookup_dcache+0x22/0x140
[  404.483808]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  404.488943]  ? lock_release+0x9f0/0x9f0
[  404.492936]  ? check_same_owner+0x340/0x340
[  404.497276]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  404.502312]  d_alloc+0x96/0x380
[  404.505602]  ? __d_lookup+0x9e0/0x9e0
[  404.509417]  ? __d_alloc+0xd50/0xd50
[  404.513160]  ? lock_rename+0x236/0x290
[  404.517071]  __lookup_hash+0xd9/0x190
[  404.520890]  do_renameat2+0x6ce/0x1120
[  404.524814]  ? user_path_create+0x40/0x40
[  404.528977]  ? __lock_is_held+0xb5/0x140
[  404.533073]  ? do_syscall_64+0x9a/0x820
[  404.537061]  ? do_syscall_64+0x9a/0x820
[  404.541052]  ? trace_hardirqs_on+0xbd/0x2c0
[  404.545385]  ? __ia32_sys_read+0xb0/0xb0
[  404.549469]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  404.554845]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  404.559966]  ? ksys_ioctl+0x81/0xd0
[  404.563616]  __x64_sys_rename+0x5e/0x80
[  404.567607]  do_syscall_64+0x1b9/0x820
[  404.571515]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  404.576891]  ? syscall_return_slowpath+0x5e0/0x5e0
[  404.581839]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  404.586887]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  404.591922]  ? recalc_sigpending_tsk+0x180/0x180
[  404.596682]  ? kasan_check_write+0x14/0x20
[  404.600935]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  404.605788]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  404.611001] RIP: 0033:0x457089
[  404.614221] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  404.633155] RSP: 002b:00007ff597060c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  404.640893] RAX: ffffffffffffffda RBX: 00007ff5970616d4 RCX: 0000000000457089
[  404.648194] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  404.655466] RBP: 0000000000930280 R08: 0000000000000000 R09: 0000000000000000
[  404.662761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  404.670030] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000004
[  404.753487] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:18 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:18 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:18 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x6, &(0x7f00000002c0)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESDEC=r0], &(0x7f0000000180)="73e26f797a84836c6c657200", 0x0, 0xce, &(0x7f0000000480)=""/206, 0x0, 0x0, [], 0x0, 0x100000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf1700000000000085100000050000003c00000000000000bf6100000000000085100000023bf8d88bdc077590a1000000bf010000000000009500000000aa000015010036de4e2400b700000000000000950000000000ac8b9c2d7bf2d2edf27f4f7a5226b50000649b24a2355bfd3a242b2ba64c0b5cbcc4f2aa017a38c4bb96353036c4c405c6275b659440cbc6f5a43a336765a2c53ca84f0267959da74a5f5c"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
fcntl$dupfd(r1, 0x406, r2)

11:50:18 executing program 2 (fault-call:14 fault-nth:5):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x100000000000000}, 0x0)

11:50:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:18 executing program 5 (fault-call:14 fault-nth:5):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  404.995618] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:19 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3002000000000000}, 0x0)

[  405.072676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  405.081507] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  405.109510] FAULT_INJECTION: forcing a failure.
[  405.109510] name failslab, interval 1, probability 0, space 0, times 0
[  405.112173] FAULT_INJECTION: forcing a failure.
[  405.112173] name failslab, interval 1, probability 0, space 0, times 0
[  405.120869] CPU: 0 PID: 18898 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  405.139012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  405.148363] Call Trace:
[  405.150966]  dump_stack+0x1c9/0x2b4
[  405.154602]  ? dump_stack_print_info.cold.2+0x52/0x52
[  405.159805]  ? kernel_text_address+0x79/0xf0
[  405.164216]  ? __kernel_text_address+0xd/0x40
[  405.168721]  should_fail.cold.4+0xa/0x11
[  405.172792]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  405.177919]  ? save_stack+0xa9/0xd0
[  405.181561]  ? save_stack+0x43/0xd0
[  405.185208]  ? kasan_kmalloc+0xc4/0xe0
[  405.189118]  ? kasan_slab_alloc+0x12/0x20
[  405.193274]  ? graph_lock+0x170/0x170
[  405.197083]  ? graph_lock+0x170/0x170
[  405.200890]  ? find_held_lock+0x36/0x1c0
[  405.204989]  ? __lock_is_held+0xb5/0x140
[  405.209066]  ? check_same_owner+0x340/0x340
[  405.213394]  ? lock_downgrade+0x8f0/0x8f0
[  405.217551]  ? rcu_note_context_switch+0x680/0x680
[  405.222501]  __should_failslab+0x124/0x180
[  405.227194]  should_failslab+0x9/0x14
[  405.231002]  kmem_cache_alloc_trace+0x2b5/0x730
[  405.235674]  ? do_raw_spin_lock+0xc1/0x200
[  405.239936]  p9_fid_create+0x49/0x280
[  405.243742]  p9_client_walk+0x124/0xaa0
[  405.247720]  ? find_held_lock+0x36/0x1c0
[  405.251788]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  405.257417]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  405.262439]  ? lock_downgrade+0x84c/0x8f0
[  405.266594]  ? v9fs_fid_add+0x200/0x200
[  405.270574]  ? kasan_check_read+0x11/0x20
[  405.274728]  ? do_raw_spin_unlock+0xa7/0x2f0
[  405.279139]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  405.283735]  v9fs_vfs_lookup+0x1f7/0x4a0
[  405.287801]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  405.292039]  ? d_alloc+0x290/0x380
[  405.295586]  ? v9fs_vfs_create+0x130/0x130
[  405.299825]  ? lock_rename+0x236/0x290
[  405.303729]  __lookup_hash+0x12e/0x190
[  405.307626]  do_renameat2+0x6ce/0x1120
[  405.311534]  ? user_path_create+0x40/0x40
[  405.315686]  ? __lock_is_held+0xb5/0x140
[  405.319776]  ? do_syscall_64+0x9a/0x820
[  405.323763]  ? do_syscall_64+0x9a/0x820
[  405.327744]  ? trace_hardirqs_on+0xbd/0x2c0
[  405.332074]  ? __ia32_sys_read+0xb0/0xb0
[  405.336143]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  405.341510]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  405.346626]  __x64_sys_rename+0x5e/0x80
[  405.350609]  do_syscall_64+0x1b9/0x820
[  405.354503]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  405.360096]  ? syscall_return_slowpath+0x5e0/0x5e0
[  405.365030]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  405.370057]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  405.375079]  ? recalc_sigpending_tsk+0x180/0x180
[  405.379841]  ? kasan_check_write+0x14/0x20
[  405.384088]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  405.388962]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  405.394157] RIP: 0033:0x457089
[  405.397359] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  405.416264] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  405.423985] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  405.431262] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  405.438536] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  405.445809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  405.453084] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000005
[  405.460459] CPU: 1 PID: 18899 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  405.467502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  405.476863] Call Trace:
[  405.479473]  dump_stack+0x1c9/0x2b4
[  405.483124]  ? dump_stack_print_info.cold.2+0x52/0x52
[  405.483142]  ? kernel_text_address+0x79/0xf0
[  405.483157]  ? __kernel_text_address+0xd/0x40
[  405.483181]  should_fail.cold.4+0xa/0x11
[  405.500127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  405.501309]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  405.501332]  ? save_stack+0xa9/0xd0
[  405.501348]  ? save_stack+0x43/0xd0
11:50:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x100000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  405.501362]  ? kasan_kmalloc+0xc4/0xe0
[  405.501376]  ? kasan_slab_alloc+0x12/0x20
[  405.501395]  ? graph_lock+0x170/0x170
[  405.501415]  ? graph_lock+0x170/0x170
[  405.537813]  ? find_held_lock+0x36/0x1c0
[  405.541893]  ? __lock_is_held+0xb5/0x140
[  405.545989]  ? check_same_owner+0x340/0x340
[  405.550326]  ? lock_downgrade+0x8f0/0x8f0
[  405.554492]  ? rcu_note_context_switch+0x680/0x680
[  405.559448]  __should_failslab+0x124/0x180
[  405.559468]  should_failslab+0x9/0x14
[  405.559483]  kmem_cache_alloc_trace+0x2b5/0x730
[  405.559500]  ? do_raw_spin_lock+0xc1/0x200
[  405.559522]  p9_fid_create+0x49/0x280
[  405.580236]  p9_client_walk+0x124/0xaa0
[  405.584231]  ? find_held_lock+0x36/0x1c0
[  405.588324]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  405.593959]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  405.599030]  ? lock_downgrade+0x84c/0x8f0
[  405.603189]  ? v9fs_fid_add+0x200/0x200
[  405.607175]  ? kasan_check_read+0x11/0x20
[  405.611333]  ? do_raw_spin_unlock+0xa7/0x2f0
[  405.615757]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  405.620363]  v9fs_vfs_lookup+0x1f7/0x4a0
11:50:19 executing program 3:
prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  405.624446]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  405.628694]  ? d_alloc+0x290/0x380
[  405.632247]  ? v9fs_vfs_create+0x130/0x130
[  405.636492]  ? lock_rename+0x236/0x290
[  405.640399]  __lookup_hash+0x12e/0x190
[  405.644311]  do_renameat2+0x6ce/0x1120
[  405.648225]  ? user_path_create+0x40/0x40
[  405.652386]  ? __lock_is_held+0xb5/0x140
[  405.656487]  ? do_syscall_64+0x9a/0x820
[  405.660474]  ? do_syscall_64+0x9a/0x820
[  405.664465]  ? trace_hardirqs_on+0xbd/0x2c0
[  405.668806]  ? __ia32_sys_read+0xb0/0xb0
[  405.672885]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  405.678278]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  405.683400]  __x64_sys_rename+0x5e/0x80
[  405.683420]  do_syscall_64+0x1b9/0x820
[  405.683447]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  405.683467]  ? syscall_return_slowpath+0x5e0/0x5e0
[  405.701606]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  405.706631]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  405.711652]  ? recalc_sigpending_tsk+0x180/0x180
[  405.716412]  ? kasan_check_write+0x14/0x20
[  405.720663]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  405.725515]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  405.730707] RIP: 0033:0x457089
[  405.733919] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  405.752822] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  405.760537] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  405.767808] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  405.775078] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  405.782353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  405.789633] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000005
11:50:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x87000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  405.828570] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:19 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0)

11:50:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:19 executing program 2 (fault-call:14 fault-nth:6):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  405.962475] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  406.028938] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  406.104166] FAULT_INJECTION: forcing a failure.
[  406.104166] name failslab, interval 1, probability 0, space 0, times 0
[  406.115747] CPU: 1 PID: 18943 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  406.122769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  406.122784] Call Trace:
[  406.122809]  dump_stack+0x1c9/0x2b4
[  406.122835]  ? dump_stack_print_info.cold.2+0x52/0x52
[  406.122872]  should_fail.cold.4+0xa/0x11
[  406.147721]  ? find_held_lock+0x36/0x1c0
[  406.151798]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  406.156928]  ? mark_held_locks+0x160/0x160
[  406.161175]  ? mark_held_locks+0x160/0x160
[  406.165421]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  406.170542]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  406.175664]  ? print_usage_bug+0xc0/0xc0
[  406.179736]  ? print_usage_bug+0xc0/0xc0
[  406.183830]  ? do_raw_spin_lock+0xc1/0x200
[  406.188095]  ? mark_held_locks+0x160/0x160
[  406.192344]  ? __lock_acquire+0x7fc/0x5020
[  406.196595]  ? graph_lock+0x170/0x170
[  406.200412]  ? graph_lock+0x170/0x170
[  406.204245]  __should_failslab+0x124/0x180
[  406.208491]  should_failslab+0x9/0x14
[  406.212308]  kmem_cache_alloc+0x47/0x710
[  406.216384]  ? find_held_lock+0x36/0x1c0
[  406.220479]  radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  406.226208]  radix_tree_extend+0x295/0x650
[  406.230472]  ? radix_tree_node_alloc.constprop.19+0x310/0x310
[  406.236374]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  406.241062]  ? mark_held_locks+0x160/0x160
[  406.245305]  ? is_bpf_text_address+0xd7/0x170
[  406.249816]  idr_get_free+0x9ad/0x10c0
[  406.253744]  ? radix_tree_clear_tags+0xc0/0xc0
[  406.258342]  ? save_stack+0xa9/0xd0
[  406.261985]  ? save_stack+0x43/0xd0
[  406.265620]  ? kmem_cache_alloc_trace+0x152/0x730
[  406.270470]  ? p9_fid_create+0x49/0x280
[  406.274462]  ? p9_client_walk+0x124/0xaa0
[  406.278622]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  406.282882]  ? do_renameat2+0x6ce/0x1120
[  406.286994]  ? __x64_sys_rename+0x5e/0x80
[  406.291162]  ? do_syscall_64+0x1b9/0x820
[  406.295261]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  406.300643]  ? graph_lock+0x170/0x170
[  406.304465]  ? find_held_lock+0x36/0x1c0
[  406.308546]  ? graph_lock+0x170/0x170
[  406.312357]  ? mark_held_locks+0xc9/0x160
[  406.316522]  ? kmem_cache_alloc_trace+0x275/0x730
[  406.318672] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  406.321379]  ? lock_acquire+0x1e4/0x4f0
[  406.321396]  ? p9_fid_create+0x1bc/0x280
[  406.321418]  idr_alloc_u32+0x201/0x3f0
[  406.321452]  ? __fprop_inc_percpu_max+0x2d0/0x2d0
[  406.346579]  ? trace_hardirqs_on+0x2c0/0x2c0
[  406.350998]  ? kasan_check_write+0x14/0x20
[  406.355222]  ? do_raw_spin_lock+0xc1/0x200
[  406.359453]  p9_fid_create+0x1d7/0x280
[  406.363330]  p9_client_walk+0x124/0xaa0
[  406.367300]  ? find_held_lock+0x36/0x1c0
[  406.371363]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  406.376989]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  406.382002]  ? lock_downgrade+0x84c/0x8f0
[  406.386135]  ? v9fs_fid_add+0x200/0x200
[  406.390098]  ? kasan_check_read+0x11/0x20
[  406.394243]  ? do_raw_spin_unlock+0xa7/0x2f0
[  406.398661]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  406.403254]  v9fs_vfs_lookup+0x1f7/0x4a0
[  406.407322]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  406.411542]  ? d_alloc+0x290/0x380
[  406.415070]  ? v9fs_vfs_create+0x130/0x130
[  406.419301]  ? lock_rename+0x236/0x290
[  406.423201]  __lookup_hash+0x12e/0x190
[  406.427109]  do_renameat2+0x6ce/0x1120
[  406.431015]  ? user_path_create+0x40/0x40
[  406.435169]  ? __lock_is_held+0xb5/0x140
[  406.439229]  ? do_syscall_64+0x9a/0x820
[  406.443200]  ? do_syscall_64+0x9a/0x820
[  406.447175]  ? trace_hardirqs_on+0xbd/0x2c0
[  406.451499]  ? __ia32_sys_read+0xb0/0xb0
[  406.455571]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  406.460936]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  406.466047]  __x64_sys_rename+0x5e/0x80
[  406.470008]  do_syscall_64+0x1b9/0x820
[  406.473883]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  406.479273]  ? syscall_return_slowpath+0x5e0/0x5e0
[  406.484204]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  406.489232]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  406.494243]  ? recalc_sigpending_tsk+0x180/0x180
[  406.498995]  ? kasan_check_write+0x14/0x20
[  406.503256]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  406.508110]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  406.513293] RIP: 0033:0x457089
[  406.516493] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  406.535421] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  406.543152] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  406.550404] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  406.557662] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  406.564967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  406.572227] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000006
11:50:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:20 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f}, 0x0)

11:50:20 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:20 executing program 5 (fault-call:14 fault-nth:6):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:20 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:20 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x12b)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', r2})

11:50:20 executing program 2 (fault-call:14 fault-nth:7):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  406.680230] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  406.761666] FAULT_INJECTION: forcing a failure.
[  406.761666] name failslab, interval 1, probability 0, space 0, times 0
[  406.771264] FAULT_INJECTION: forcing a failure.
[  406.771264] name failslab, interval 1, probability 0, space 0, times 0
[  406.772900] CPU: 0 PID: 18972 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  406.772938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  406.800692] Call Trace:
[  406.803288]  dump_stack+0x1c9/0x2b4
[  406.806938]  ? dump_stack_print_info.cold.2+0x52/0x52
[  406.812148]  should_fail.cold.4+0xa/0x11
[  406.816211]  ? find_held_lock+0x36/0x1c0
[  406.820279]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  406.825387]  ? mark_held_locks+0x160/0x160
[  406.829625]  ? mark_held_locks+0x160/0x160
[  406.833864]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  406.838969]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  406.844080]  ? print_usage_bug+0xc0/0xc0
[  406.848148]  ? print_usage_bug+0xc0/0xc0
[  406.852213]  ? do_raw_spin_lock+0xc1/0x200
[  406.856455]  ? mark_held_locks+0x160/0x160
[  406.860702]  ? __lock_acquire+0x7fc/0x5020
[  406.864952]  ? graph_lock+0x170/0x170
[  406.868760]  ? graph_lock+0x170/0x170
[  406.872571]  __should_failslab+0x124/0x180
[  406.876815]  should_failslab+0x9/0x14
[  406.880619]  kmem_cache_alloc+0x47/0x710
[  406.884683]  ? find_held_lock+0x36/0x1c0
[  406.888760]  radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  406.894477]  radix_tree_extend+0x295/0x650
[  406.898722]  ? radix_tree_node_alloc.constprop.19+0x310/0x310
[  406.904607]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  406.909284]  ? mark_held_locks+0x160/0x160
[  406.913521]  ? is_bpf_text_address+0xd7/0x170
[  406.918021]  idr_get_free+0x9ad/0x10c0
[  406.921941]  ? radix_tree_clear_tags+0xc0/0xc0
[  406.926527]  ? save_stack+0xa9/0xd0
[  406.930158]  ? save_stack+0x43/0xd0
[  406.933801]  ? kmem_cache_alloc_trace+0x152/0x730
[  406.938674]  ? p9_fid_create+0x49/0x280
[  406.942649]  ? p9_client_walk+0x124/0xaa0
[  406.946812]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  406.951048]  ? do_renameat2+0x6ce/0x1120
[  406.955112]  ? __x64_sys_rename+0x5e/0x80
[  406.959260]  ? do_syscall_64+0x1b9/0x820
[  406.963323]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  406.968691]  ? graph_lock+0x170/0x170
[  406.972500]  ? find_held_lock+0x36/0x1c0
[  406.976566]  ? graph_lock+0x170/0x170
[  406.980372]  ? mark_held_locks+0xc9/0x160
[  406.984527]  ? kmem_cache_alloc_trace+0x275/0x730
[  406.989372]  ? lock_acquire+0x1e4/0x4f0
[  406.993348]  ? p9_fid_create+0x1bc/0x280
[  406.997416]  idr_alloc_u32+0x201/0x3f0
[  407.001311]  ? __fprop_inc_percpu_max+0x2d0/0x2d0
[  407.006155]  ? trace_hardirqs_on+0x2c0/0x2c0
[  407.010567]  ? kasan_check_write+0x14/0x20
[  407.014803]  ? do_raw_spin_lock+0xc1/0x200
[  407.019042]  p9_fid_create+0x1d7/0x280
[  407.022948]  p9_client_walk+0x124/0xaa0
[  407.026949]  ? find_held_lock+0x36/0x1c0
[  407.031020]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  407.036645]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  407.041663]  ? lock_downgrade+0x84c/0x8f0
[  407.045817]  ? v9fs_fid_add+0x200/0x200
[  407.049793]  ? kasan_check_read+0x11/0x20
[  407.054005]  ? do_raw_spin_unlock+0xa7/0x2f0
[  407.058418]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  407.063012]  v9fs_vfs_lookup+0x1f7/0x4a0
[  407.067073]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  407.071307]  ? d_alloc+0x290/0x380
[  407.074854]  ? v9fs_vfs_create+0x130/0x130
[  407.079085]  ? lock_rename+0x236/0x290
[  407.082997]  __lookup_hash+0x12e/0x190
[  407.086892]  do_renameat2+0x6ce/0x1120
[  407.090841]  ? user_path_create+0x40/0x40
[  407.094991]  ? __lock_is_held+0xb5/0x140
[  407.099082]  ? do_syscall_64+0x9a/0x820
[  407.103062]  ? do_syscall_64+0x9a/0x820
[  407.107043]  ? trace_hardirqs_on+0xbd/0x2c0
[  407.111364]  ? __ia32_sys_read+0xb0/0xb0
[  407.115429]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  407.120796]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  407.125918]  __x64_sys_rename+0x5e/0x80
[  407.129916]  do_syscall_64+0x1b9/0x820
[  407.133821]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  407.139186]  ? syscall_return_slowpath+0x5e0/0x5e0
[  407.144119]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  407.149137]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  407.154156]  ? recalc_sigpending_tsk+0x180/0x180
[  407.158950]  ? kasan_check_write+0x14/0x20
[  407.163195]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  407.168059]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  407.173250] RIP: 0033:0x457089
[  407.176451] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  407.195358] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  407.203072] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  407.210337] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  407.217604] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  407.225358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  407.232625] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000006
[  407.239926] CPU: 1 PID: 18975 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  407.246951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  407.256302] Call Trace:
[  407.258899]  dump_stack+0x1c9/0x2b4
[  407.262543]  ? dump_stack_print_info.cold.2+0x52/0x52
[  407.267737]  ? print_usage_bug+0xc0/0xc0
[  407.271811]  should_fail.cold.4+0xa/0x11
[  407.275879]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  407.280992]  ? print_usage_bug+0xc0/0xc0
[  407.285058]  ? __lock_acquire+0x7fc/0x5020
[  407.289294]  ? print_usage_bug+0xc0/0xc0
[  407.293364]  ? graph_lock+0x170/0x170
[  407.297167]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  407.301850]  ? find_held_lock+0x36/0x1c0
[  407.305923]  ? graph_lock+0x170/0x170
[  407.309731]  ? kasan_check_write+0x14/0x20
[  407.313971]  ? prep_compound_page+0x231/0x380
[  407.318473]  ? find_held_lock+0x36/0x1c0
[  407.322545]  __should_failslab+0x124/0x180
[  407.326787]  should_failslab+0x9/0x14
[  407.330587]  kmem_cache_alloc+0x47/0x710
[  407.334647]  ? lock_downgrade+0x8f0/0x8f0
[  407.338809]  radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  407.344528]  radix_tree_extend+0x295/0x650
[  407.348770]  ? radix_tree_node_alloc.constprop.19+0x310/0x310
[  407.354663]  ? __lock_acquire+0x7fc/0x5020
[  407.359412]  idr_get_free+0x9ad/0x10c0
[  407.363318]  ? kasan_kmalloc+0xc4/0xe0
[  407.367211]  ? radix_tree_clear_tags+0xc0/0xc0
[  407.371795]  ? p9_client_walk+0x124/0xaa0
[  407.375948]  ? __lookup_hash+0x12e/0x190
[  407.380013]  ? do_renameat2+0x6ce/0x1120
[  407.384077]  ? __x64_sys_rename+0x5e/0x80
[  407.388230]  ? do_syscall_64+0x1b9/0x820
[  407.392297]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  407.397670]  ? print_usage_bug+0xc0/0xc0
[  407.401734]  ? do_raw_spin_lock+0xc1/0x200
[  407.405977]  ? graph_lock+0x170/0x170
[  407.409785]  ? mark_held_locks+0x160/0x160
[  407.414022]  ? print_usage_bug+0xc0/0xc0
[  407.418089]  ? __lock_acquire+0x7fc/0x5020
[  407.422330]  ? __lock_is_held+0xb5/0x140
[  407.426444]  idr_alloc_u32+0x201/0x3f0
[  407.430343]  ? __fprop_inc_percpu_max+0x2d0/0x2d0
[  407.435190]  ? p9_idpool_get+0x23/0x70
[  407.439094]  idr_alloc+0x111/0x1b0
[  407.442643]  ? idr_alloc_u32+0x3f0/0x3f0
[  407.446710]  ? do_raw_spin_lock+0xc1/0x200
[  407.450965]  p9_idpool_get+0x3d/0x70
[  407.454710]  p9_client_prepare_req.part.9+0xeb/0xba0
[  407.459824]  ? delete_node+0x311/0xce0
[  407.463724]  ? p9_free_req.isra.8+0x140/0x140
[  407.468220]  ? idr_destroy+0x1c0/0x1c0
[  407.472112]  ? radix_tree_clear_tags+0xc0/0xc0
[  407.476703]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  407.482244]  ? replace_slot+0x153/0x500
[  407.486234]  p9_client_rpc+0x1c2/0x1400
[  407.490225]  ? plist_requeue+0x650/0x650
[  407.494295]  ? graph_lock+0x170/0x170
[  407.498108]  ? p9_client_prepare_req.part.9+0xba0/0xba0
[  407.503484]  ? find_held_lock+0x36/0x1c0
[  407.507552]  ? mark_held_locks+0xc9/0x160
[  407.511728]  ? _raw_spin_unlock_irq+0x27/0x70
[  407.516228]  ? _raw_spin_unlock_irq+0x27/0x70
[  407.520731]  ? lockdep_hardirqs_on+0x421/0x5c0
[  407.525314]  ? trace_hardirqs_on+0xbd/0x2c0
[  407.529637]  ? kasan_check_read+0x11/0x20
[  407.533789]  ? p9_fid_create+0x1e2/0x280
[  407.537853]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  407.542959]  ? kasan_check_write+0x14/0x20
[  407.547200]  ? do_raw_spin_lock+0xc1/0x200
[  407.551452]  p9_client_walk+0x208/0xaa0
[  407.555439]  ? find_held_lock+0x36/0x1c0
[  407.559507]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  407.565134]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  407.570153]  ? lock_downgrade+0x84c/0x8f0
[  407.574307]  ? v9fs_fid_add+0x200/0x200
[  407.578286]  ? kasan_check_read+0x11/0x20
[  407.582446]  ? do_raw_spin_unlock+0xa7/0x2f0
[  407.586857]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  407.591455]  v9fs_vfs_lookup+0x1f7/0x4a0
[  407.595522]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  407.599880]  ? d_alloc+0x290/0x380
[  407.603442]  ? v9fs_vfs_create+0x130/0x130
[  407.607689]  ? lock_rename+0x236/0x290
[  407.611583]  __lookup_hash+0x12e/0x190
[  407.615479]  do_renameat2+0x6ce/0x1120
[  407.619383]  ? user_path_create+0x40/0x40
[  407.623534]  ? __lock_is_held+0xb5/0x140
[  407.627622]  ? do_syscall_64+0x9a/0x820
[  407.631601]  ? do_syscall_64+0x9a/0x820
[  407.635583]  ? trace_hardirqs_on+0xbd/0x2c0
[  407.639916]  ? __ia32_sys_read+0xb0/0xb0
[  407.643986]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  407.649350]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  407.654463]  __x64_sys_rename+0x5e/0x80
[  407.658450]  do_syscall_64+0x1b9/0x820
[  407.662341]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  407.667710]  ? syscall_return_slowpath+0x5e0/0x5e0
[  407.672641]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  407.677659]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  407.682696]  ? recalc_sigpending_tsk+0x180/0x180
[  407.687456]  ? kasan_check_write+0x14/0x20
[  407.691699]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  407.696550]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  407.701741] RIP: 0033:0x457089
[  407.704947] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  407.723848] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  407.731562] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  407.738827] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  407.746105] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  407.753371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
11:50:21 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  407.760638] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000007
11:50:21 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff9e}, 0x0)

11:50:21 executing program 5 (fault-call:14 fault-nth:7):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  407.817505] nla_parse: 6 callbacks suppressed
[  407.817515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fa}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:21 executing program 2 (fault-call:14 fault-nth:8):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  407.945797] FAULT_INJECTION: forcing a failure.
[  407.945797] name failslab, interval 1, probability 0, space 0, times 0
[  407.957040] CPU: 1 PID: 18997 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  407.957049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  407.957055] Call Trace:
[  407.957078]  dump_stack+0x1c9/0x2b4
[  407.957099]  ? dump_stack_print_info.cold.2+0x52/0x52
[  407.957120]  ? print_usage_bug+0xc0/0xc0
[  407.979524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  407.979673]  should_fail.cold.4+0xa/0x11
[  408.001353]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  408.001373]  ? print_usage_bug+0xc0/0xc0
[  408.001388]  ? __lock_acquire+0x7fc/0x5020
[  408.001402]  ? print_usage_bug+0xc0/0xc0
[  408.001422]  ? graph_lock+0x170/0x170
[  408.022638]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  408.027329]  ? find_held_lock+0x36/0x1c0
[  408.031409]  ? graph_lock+0x170/0x170
[  408.035232]  ? kasan_check_write+0x14/0x20
[  408.039479]  ? prep_compound_page+0x231/0x380
11:50:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffff97}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  408.043993]  ? find_held_lock+0x36/0x1c0
[  408.048067]  __should_failslab+0x124/0x180
[  408.052318]  should_failslab+0x9/0x14
[  408.056129]  kmem_cache_alloc+0x47/0x710
[  408.060202]  ? lock_downgrade+0x8f0/0x8f0
[  408.060406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  408.064370]  radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  408.064391]  radix_tree_extend+0x295/0x650
[  408.064412]  ? radix_tree_node_alloc.constprop.19+0x310/0x310
[  408.064441]  ? __lock_acquire+0x7fc/0x5020
[  408.064461]  idr_get_free+0x9ad/0x10c0
[  408.096790]  ? kasan_kmalloc+0xc4/0xe0
[  408.100698]  ? radix_tree_clear_tags+0xc0/0xc0
[  408.105296]  ? p9_client_walk+0x124/0xaa0
[  408.109464]  ? __lookup_hash+0x12e/0x190
[  408.113534]  ? do_renameat2+0x6ce/0x1120
[  408.117605]  ? __x64_sys_rename+0x5e/0x80
[  408.121758]  ? do_syscall_64+0x1b9/0x820
[  408.121777]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  408.121798]  ? print_usage_bug+0xc0/0xc0
[  408.121814]  ? do_raw_spin_lock+0xc1/0x200
[  408.121835]  ? graph_lock+0x170/0x170
[  408.121850]  ? mark_held_locks+0x160/0x160
[  408.121866]  ? print_usage_bug+0xc0/0xc0
[  408.151695]  ? __lock_acquire+0x7fc/0x5020
[  408.155956]  ? __lock_is_held+0xb5/0x140
[  408.160043]  idr_alloc_u32+0x201/0x3f0
[  408.163955]  ? __fprop_inc_percpu_max+0x2d0/0x2d0
[  408.168808]  ? p9_idpool_get+0x23/0x70
[  408.172710]  idr_alloc+0x111/0x1b0
[  408.176265]  ? idr_alloc_u32+0x3f0/0x3f0
[  408.180342]  ? do_raw_spin_lock+0xc1/0x200
[  408.184594]  p9_idpool_get+0x3d/0x70
[  408.188335]  p9_client_prepare_req.part.9+0xeb/0xba0
[  408.193455]  ? delete_node+0x311/0xce0
[  408.197365]  ? p9_free_req.isra.8+0x140/0x140
[  408.201889]  ? idr_destroy+0x1c0/0x1c0
[  408.205800]  ? radix_tree_clear_tags+0xc0/0xc0
[  408.210401]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  408.215956]  ? replace_slot+0x153/0x500
[  408.219960]  p9_client_rpc+0x1c2/0x1400
[  408.223950]  ? plist_requeue+0x650/0x650
[  408.228030]  ? graph_lock+0x170/0x170
[  408.231851]  ? p9_client_prepare_req.part.9+0xba0/0xba0
[  408.237233]  ? find_held_lock+0x36/0x1c0
[  408.241311]  ? mark_held_locks+0xc9/0x160
[  408.245483]  ? _raw_spin_unlock_irq+0x27/0x70
[  408.249994]  ? _raw_spin_unlock_irq+0x27/0x70
[  408.254497]  ? lockdep_hardirqs_on+0x421/0x5c0
[  408.259093]  ? trace_hardirqs_on+0xbd/0x2c0
[  408.263423]  ? kasan_check_read+0x11/0x20
[  408.267579]  ? p9_fid_create+0x1e2/0x280
[  408.271641]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  408.276750]  ? kasan_check_write+0x14/0x20
[  408.280986]  ? do_raw_spin_lock+0xc1/0x200
[  408.285232]  p9_client_walk+0x208/0xaa0
[  408.289207]  ? find_held_lock+0x36/0x1c0
[  408.293273]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  408.298902]  ? v9fs_fid_lookup_with_uid+0x11b/0xbe0
[  408.303941]  ? lock_downgrade+0x84c/0x8f0
[  408.308094]  ? v9fs_fid_add+0x200/0x200
[  408.312071]  ? kasan_check_read+0x11/0x20
[  408.316219]  ? do_raw_spin_unlock+0xa7/0x2f0
[  408.320630]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  408.325220]  v9fs_vfs_lookup+0x1f7/0x4a0
[  408.329314]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  408.333546]  ? d_alloc+0x290/0x380
[  408.337091]  ? v9fs_vfs_create+0x130/0x130
[  408.341326]  ? lock_rename+0x236/0x290
[  408.345238]  __lookup_hash+0x12e/0x190
[  408.349141]  do_renameat2+0x6ce/0x1120
[  408.353048]  ? user_path_create+0x40/0x40
[  408.357199]  ? __lock_is_held+0xb5/0x140
[  408.361319]  ? do_syscall_64+0x9a/0x820
[  408.365295]  ? do_syscall_64+0x9a/0x820
[  408.369272]  ? trace_hardirqs_on+0xbd/0x2c0
[  408.373602]  ? __ia32_sys_read+0xb0/0xb0
[  408.377670]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  408.383036]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  408.388152]  __x64_sys_rename+0x5e/0x80
[  408.392130]  do_syscall_64+0x1b9/0x820
[  408.396034]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  408.401401]  ? syscall_return_slowpath+0x5e0/0x5e0
[  408.406463]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  408.411483]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  408.416504]  ? recalc_sigpending_tsk+0x180/0x180
[  408.421264]  ? kasan_check_write+0x14/0x20
[  408.425511]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  408.430367]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  408.435557] RIP: 0033:0x457089
[  408.438753] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  408.457650] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  408.465364] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  408.472633] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  408.479902] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  408.487184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
11:50:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8f3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x34f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  408.494457] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000007
[  408.530397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  408.642196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  408.671837] FAULT_INJECTION: forcing a failure.
[  408.671837] name failslab, interval 1, probability 0, space 0, times 0
[  408.683172] CPU: 1 PID: 19029 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  408.690207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  408.699568] Call Trace:
[  408.702180]  dump_stack+0x1c9/0x2b4
[  408.705834]  ? dump_stack_print_info.cold.2+0x52/0x52
[  408.707358] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  408.711059]  should_fail.cold.4+0xa/0x11
[  408.711087]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  408.711111]  ? finish_task_switch+0x1d3/0x870
[  408.711130]  ? finish_task_switch+0x18a/0x870
[  408.711162]  ? __switch_to_asm+0x34/0x70
[  408.741742]  ? pdu_read+0x90/0xd0
[  408.745198]  ? graph_lock+0x170/0x170
[  408.749008]  ? p9pdu_readf+0xb78/0x2170
[  408.752994]  ? __switch_to_asm+0x34/0x70
[  408.757050]  ? __switch_to_asm+0x40/0x70
[  408.761108]  ? __switch_to_asm+0x40/0x70
[  408.765176]  ? p9pdu_writef+0xe0/0xe0
[  408.768990]  ? __lock_is_held+0xb5/0x140
[  408.773051]  ? check_same_owner+0x340/0x340
[  408.777387]  ? rcu_note_context_switch+0x680/0x680
[  408.782321]  __should_failslab+0x124/0x180
[  408.786545]  should_failslab+0x9/0x14
[  408.790354]  __kmalloc+0x2b2/0x720
[  408.793898]  ? p9pdu_readf+0x1936/0x2170
[  408.797961]  p9pdu_readf+0x1936/0x2170
[  408.801849]  ? p9pdu_writef+0xe0/0xe0
[  408.805664]  ? find_held_lock+0x36/0x1c0
[  408.809731]  ? mark_held_locks+0xc9/0x160
[  408.813879]  ? _raw_spin_unlock_irq+0x27/0x70
[  408.818394]  ? _raw_spin_unlock_irq+0x27/0x70
[  408.822915]  ? lockdep_hardirqs_on+0x421/0x5c0
[  408.827503]  ? trace_hardirqs_on+0xbd/0x2c0
[  408.831818]  ? p9_fid_create+0x1e2/0x280
[  408.835890]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  408.841008]  ? kasan_check_write+0x14/0x20
[  408.845231]  ? do_raw_spin_lock+0xc1/0x200
[  408.849462]  p9_client_walk+0x3ba/0xaa0
[  408.853425]  ? find_held_lock+0x36/0x1c0
[  408.857482]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  408.863108]  ? v9fs_dir_readdir+0x661/0xbc0
[  408.867453]  ? lock_downgrade+0x84c/0x8f0
[  408.871609]  ? v9fs_fid_add+0x200/0x200
[  408.875619]  ? kasan_check_read+0x11/0x20
[  408.879784]  ? do_raw_spin_unlock+0xa7/0x2f0
[  408.884178]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  408.888780]  v9fs_vfs_lookup+0x1f7/0x4a0
[  408.892830]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  408.897052]  ? d_alloc+0x290/0x380
[  408.900578]  ? v9fs_vfs_create+0x130/0x130
[  408.904803]  ? lock_rename+0x236/0x290
[  408.908688]  __lookup_hash+0x12e/0x190
[  408.912576]  do_renameat2+0x6ce/0x1120
[  408.916485]  ? user_path_create+0x40/0x40
[  408.920624]  ? __lock_is_held+0xb5/0x140
[  408.924683]  ? do_syscall_64+0x9a/0x820
[  408.928660]  ? do_syscall_64+0x9a/0x820
[  408.932628]  ? trace_hardirqs_on+0xbd/0x2c0
[  408.936954]  ? __ia32_sys_read+0xb0/0xb0
[  408.941019]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  408.946369]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  408.951477]  __x64_sys_rename+0x5e/0x80
[  408.955452]  do_syscall_64+0x1b9/0x820
[  408.959343]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  408.964711]  ? syscall_return_slowpath+0x5e0/0x5e0
[  408.969637]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  408.974680]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  408.979716]  ? recalc_sigpending_tsk+0x180/0x180
[  408.984477]  ? kasan_check_write+0x14/0x20
[  408.988810]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  408.993646]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  408.998821] RIP: 0033:0x457089
[  409.002012] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  409.020948] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  409.028670] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  409.035948] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  409.043262] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  409.043272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  409.043281] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000008
[  409.115051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:23 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:23 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x8000000000000}, 0x0)

11:50:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x214000, 0x0)
r2 = gettid()
ioctl$TIOCEXCL(r1, 0x540c)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{0x9, 0x2, 0xff, 0x0, 'syz0\x00', 0xfffffffffffffffb}, 0x4, 0x3, 0x8c, r2, 0x2, 0x7bd, 'syz0\x00', &(0x7f0000000200)=['*mime_type.\x00', 'syzkaller\x00'], 0x16, [], [0x7, 0x1000, 0x8]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6800}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:23 executing program 5 (fault-call:14 fault-nth:8):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:23 executing program 2 (fault-call:14 fault-nth:9):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4cf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  409.191454] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  409.254976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  409.259324] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  409.287038] FAULT_INJECTION: forcing a failure.
[  409.287038] name failslab, interval 1, probability 0, space 0, times 0
[  409.294477] FAULT_INJECTION: forcing a failure.
[  409.294477] name failslab, interval 1, probability 0, space 0, times 0
[  409.298331] CPU: 1 PID: 19047 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  409.298355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.325883] Call Trace:
[  409.328510]  dump_stack+0x1c9/0x2b4
[  409.332146]  ? dump_stack_print_info.cold.2+0x52/0x52
[  409.337362]  should_fail.cold.4+0xa/0x11
[  409.341443]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  409.346555]  ? kasan_check_write+0x14/0x20
[  409.350801]  ? finish_task_switch+0x2ca/0x870
[  409.355773]  ? pdu_read+0x90/0xd0
[  409.359261]  ? graph_lock+0x170/0x170
[  409.363079]  ? p9pdu_readf+0xb78/0x2170
[  409.367057]  ? __switch_to_asm+0x34/0x70
[  409.371124]  ? __switch_to_asm+0x40/0x70
[  409.375188]  ? __switch_to_asm+0x40/0x70
[  409.379260]  ? p9pdu_writef+0xe0/0xe0
[  409.383071]  ? __lock_is_held+0xb5/0x140
[  409.387153]  ? check_same_owner+0x340/0x340
[  409.391485]  ? rcu_note_context_switch+0x680/0x680
[  409.396436]  __should_failslab+0x124/0x180
[  409.400677]  should_failslab+0x9/0x14
[  409.404481]  __kmalloc+0x2b2/0x720
[  409.408038]  ? p9pdu_readf+0x1936/0x2170
[  409.412112]  p9pdu_readf+0x1936/0x2170
[  409.416016]  ? p9pdu_writef+0xe0/0xe0
[  409.419830]  ? find_held_lock+0x36/0x1c0
[  409.423902]  ? mark_held_locks+0xc9/0x160
[  409.428070]  ? _raw_spin_unlock_irq+0x27/0x70
[  409.432568]  ? _raw_spin_unlock_irq+0x27/0x70
[  409.437067]  ? lockdep_hardirqs_on+0x421/0x5c0
[  409.441656]  ? trace_hardirqs_on+0xbd/0x2c0
[  409.445986]  ? p9_fid_create+0x1e2/0x280
[  409.450050]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  409.455158]  ? kasan_check_write+0x14/0x20
[  409.459399]  ? do_raw_spin_lock+0xc1/0x200
[  409.463654]  p9_client_walk+0x3ba/0xaa0
[  409.467632]  ? find_held_lock+0x36/0x1c0
[  409.471707]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  409.477337]  ? v9fs_dir_readdir+0x661/0xbc0
[  409.481670]  ? lock_downgrade+0x84c/0x8f0
[  409.485828]  ? v9fs_fid_add+0x200/0x200
[  409.489820]  ? kasan_check_read+0x11/0x20
[  409.493994]  ? do_raw_spin_unlock+0xa7/0x2f0
[  409.498408]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  409.503008]  v9fs_vfs_lookup+0x1f7/0x4a0
[  409.507072]  ? v9fs_vfs_lookup+0x1f7/0x4a0
[  409.511307]  ? d_alloc+0x290/0x380
[  409.514853]  ? v9fs_vfs_create+0x130/0x130
[  409.519091]  ? lock_rename+0x236/0x290
[  409.522990]  __lookup_hash+0x12e/0x190
[  409.526891]  do_renameat2+0x6ce/0x1120
[  409.530810]  ? user_path_create+0x40/0x40
[  409.534967]  ? __lock_is_held+0xb5/0x140
[  409.539061]  ? do_syscall_64+0x9a/0x820
[  409.543038]  ? do_syscall_64+0x9a/0x820
[  409.547023]  ? trace_hardirqs_on+0xbd/0x2c0
[  409.551349]  ? __ia32_sys_read+0xb0/0xb0
[  409.555421]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  409.560796]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  409.565920]  __x64_sys_rename+0x5e/0x80
[  409.569903]  do_syscall_64+0x1b9/0x820
[  409.573806]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  409.579177]  ? syscall_return_slowpath+0x5e0/0x5e0
[  409.584111]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  409.589133]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  409.594151]  ? recalc_sigpending_tsk+0x180/0x180
[  409.598941]  ? kasan_check_write+0x14/0x20
[  409.603196]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  409.608051]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  409.613242] RIP: 0033:0x457089
[  409.616446] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  409.635348] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  409.643060] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  409.650330] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  409.657598] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  409.664865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  409.672134] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000008
[  409.679432] CPU: 0 PID: 19049 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  409.686453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.695800] Call Trace:
[  409.698393]  dump_stack+0x1c9/0x2b4
[  409.702025]  ? dump_stack_print_info.cold.2+0x52/0x52
[  409.707222]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  409.711900]  should_fail.cold.4+0xa/0x11
[  409.715982]  ? is_bpf_text_address+0xd7/0x170
[  409.720481]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  409.725585]  ? __kernel_text_address+0xd/0x40
[  409.730083]  ? unwind_get_return_address+0x61/0xa0
[  409.735041]  ? graph_lock+0x170/0x170
[  409.738849]  ? find_held_lock+0x36/0x1c0
[  409.742923]  ? __lock_is_held+0xb5/0x140
[  409.747006]  ? check_same_owner+0x340/0x340
[  409.751331]  ? rcu_note_context_switch+0x680/0x680
[  409.756289]  ? _raw_spin_unlock_irqrestore+0x63/0xc0
[  409.761403]  __should_failslab+0x124/0x180
[  409.765643]  should_failslab+0x9/0x14
[  409.769443]  kmem_cache_alloc_trace+0x2b5/0x730
[  409.774117]  ? p9_client_walk+0x57e/0xaa0
[  409.778281]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  409.783395]  p9_client_stat+0xc1/0x680
[  409.787292]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  409.791971]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  409.797600]  ? v9fs_dir_readdir+0x661/0xbc0
[  409.801941]  ? lock_downgrade+0x84c/0x8f0
[  409.806097]  v9fs_inode_from_fid+0x77/0x320
[  409.810417]  ? do_raw_spin_unlock+0xa7/0x2f0
[  409.814829]  ? v9fs_vfs_getattr+0x270/0x270
[  409.819159]  v9fs_vfs_lookup+0x3f5/0x4a0
[  409.823231]  ? d_alloc+0x290/0x380
[  409.826777]  ? v9fs_vfs_create+0x130/0x130
[  409.831015]  ? lock_rename+0x236/0x290
[  409.834918]  __lookup_hash+0x12e/0x190
[  409.838835]  do_renameat2+0x6ce/0x1120
[  409.842739]  ? user_path_create+0x40/0x40
[  409.846915]  ? schedule+0xfb/0x450
[  409.850471]  ? __schedule+0x1df0/0x1df0
[  409.854450]  ? exit_to_usermode_loop+0x8c/0x380
[  409.859126]  ? trace_hardirqs_off+0xb8/0x2b0
[  409.863539]  ? do_syscall_64+0x6be/0x820
[  409.867602]  ? trace_hardirqs_on+0x2c0/0x2c0
[  409.872015]  ? do_syscall_64+0x9a/0x820
[  409.876014]  ? do_syscall_64+0x9a/0x820
[  409.880017]  ? trace_hardirqs_on+0xbd/0x2c0
[  409.884343]  ? exit_to_usermode_loop+0x1f4/0x380
[  409.889103]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  409.894481]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  409.899592]  __x64_sys_rename+0x5e/0x80
[  409.903569]  do_syscall_64+0x1b9/0x820
[  409.907460]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  409.912826]  ? syscall_return_slowpath+0x5e0/0x5e0
[  409.917758]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  409.922777]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  409.927795]  ? recalc_sigpending_tsk+0x180/0x180
[  409.932552]  ? kasan_check_write+0x14/0x20
[  409.936797]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  409.941651]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  409.946852] RIP: 0033:0x457089
[  409.950050] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  409.968953] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  409.976663] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  409.983940] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  409.991215] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  409.998480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
11:50:24 executing program 2 (fault-call:14 fault-nth:10):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e000000000000}, 0x0)

[  410.005746] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000009
[  410.027046] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434fc", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  410.121565] FAULT_INJECTION: forcing a failure.
[  410.121565] name failslab, interval 1, probability 0, space 0, times 0
[  410.132807] CPU: 1 PID: 19069 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  410.139823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  410.149180] Call Trace:
[  410.151783]  dump_stack+0x1c9/0x2b4
[  410.155444]  ? dump_stack_print_info.cold.2+0x52/0x52
[  410.160657]  ? update_load_avg+0x389/0x27d0
[  410.165004]  ? __update_load_avg_blocked_se+0x730/0x730
11:50:24 executing program 5 (fault-call:14 fault-nth:9):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0)

[  410.170402]  should_fail.cold.4+0xa/0x11
[  410.174503]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  410.179633]  ? print_usage_bug+0xc0/0xc0
[  410.183717]  ? mark_held_locks+0x160/0x160
[  410.187978]  ? pdu_read+0xd0/0xd0
[  410.191462]  ? kasan_slab_alloc+0x12/0x20
[  410.195631]  ? kmem_cache_alloc+0x12e/0x710
[  410.199972]  ? radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  410.205859]  ? radix_tree_extend+0x295/0x650
[  410.210296]  ? idr_get_free+0x9ad/0x10c0
[  410.214382]  ? idr_alloc_u32+0x201/0x3f0
11:50:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0)

[  410.218469]  ? print_usage_bug+0xc0/0xc0
[  410.222551]  ? print_usage_bug+0xc0/0xc0
[  410.226635]  ? __lock_acquire+0x7fc/0x5020
[  410.230899]  ? graph_lock+0x170/0x170
[  410.234740]  ? graph_lock+0x170/0x170
[  410.238583]  ? __lock_acquire+0x7fc/0x5020
[  410.242841]  ? graph_lock+0x170/0x170
[  410.246662]  ? graph_lock+0x170/0x170
[  410.250484]  __should_failslab+0x124/0x180
[  410.254746]  should_failslab+0x9/0x14
[  410.258569]  kmem_cache_alloc+0x47/0x710
[  410.262652]  ? mark_held_locks+0x160/0x160
[  410.266902]  ? find_held_lock+0x36/0x1c0
11:50:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  410.271001]  radix_tree_node_alloc.constprop.19+0x1e6/0x310
[  410.276730]  radix_tree_extend+0x295/0x650
[  410.280988]  ? radix_tree_node_alloc.constprop.19+0x310/0x310
[  410.286892]  ? do_raw_spin_unlock+0xa7/0x2f0
[  410.291333]  ? print_usage_bug+0xc0/0xc0
[  410.295417]  ? __lock_acquire+0x7fc/0x5020
[  410.299679]  idr_get_free+0x9ad/0x10c0
[  410.303599]  ? radix_tree_clear_tags+0xc0/0xc0
[  410.308200]  ? find_held_lock+0x36/0x1c0
[  410.312289]  ? mark_held_locks+0x160/0x160
[  410.316539]  ? lock_downgrade+0x8f0/0x8f0
[  410.320702]  ? trace_hardirqs_off+0xb8/0x2b0
[  410.325125]  ? kasan_check_read+0x11/0x20
[  410.329285]  ? do_raw_spin_unlock+0xa7/0x2f0
[  410.333710]  ? print_usage_bug+0xc0/0xc0
[  410.337785]  ? do_raw_spin_lock+0xc1/0x200
[  410.342042]  ? graph_lock+0x170/0x170
[  410.345858]  ? _raw_spin_unlock_irqrestore+0x63/0xc0
[  410.350978]  ? trace_hardirqs_off+0xb8/0x2b0
[  410.351413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  410.355405]  idr_alloc_u32+0x201/0x3f0
[  410.355427]  ? __fprop_inc_percpu_max+0x2d0/0x2d0
[  410.355453]  ? p9_idpool_get+0x23/0x70
[  410.355478]  idr_alloc+0x111/0x1b0
[  410.355498]  ? idr_alloc_u32+0x3f0/0x3f0
[  410.355521]  ? do_raw_spin_lock+0xc1/0x200
[  410.384104]  p9_idpool_get+0x3d/0x70
[  410.384124]  p9_client_prepare_req.part.9+0xeb/0xba0
[  410.384141]  ? __kernel_text_address+0xd/0x40
[  410.384158]  ? unwind_get_return_address+0x61/0xa0
[  410.384178]  ? p9_free_req.isra.8+0x140/0x140
[  410.384201]  ? save_stack+0xa9/0xd0
[  410.414713]  p9_client_rpc+0x1c2/0x1400
[  410.418689]  ? __lookup_hash+0x12e/0x190
[  410.422760]  ? p9_client_prepare_req.part.9+0xba0/0xba0
[  410.428125]  ? find_held_lock+0x36/0x1c0
[  410.432198]  ? graph_lock+0x170/0x170
[  410.436006]  ? mark_held_locks+0xc9/0x160
[  410.440161]  ? kmem_cache_alloc_trace+0x275/0x730
[  410.445013]  ? __lock_is_held+0xb5/0x140
[  410.449091]  ? p9_client_stat+0xc1/0x680
[  410.453155]  ? kmem_cache_alloc_trace+0x324/0x730
[  410.458006]  ? p9_client_walk+0x57e/0xaa0
[  410.462179]  p9_client_stat+0x12e/0x680
[  410.466164]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  410.470843]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  410.476479]  ? v9fs_dir_readdir+0x661/0xbc0
[  410.480826]  ? lock_downgrade+0x84c/0x8f0
[  410.484985]  v9fs_inode_from_fid+0x77/0x320
[  410.489310]  ? do_raw_spin_unlock+0xa7/0x2f0
[  410.493722]  ? v9fs_vfs_getattr+0x270/0x270
[  410.498052]  v9fs_vfs_lookup+0x3f5/0x4a0
[  410.502114]  ? d_alloc+0x290/0x380
[  410.505654]  ? v9fs_vfs_create+0x130/0x130
[  410.509890]  ? lock_rename+0x236/0x290
[  410.513797]  __lookup_hash+0x12e/0x190
[  410.517692]  do_renameat2+0x6ce/0x1120
[  410.521595]  ? user_path_create+0x40/0x40
[  410.525742]  ? __lock_is_held+0xb5/0x140
[  410.529829]  ? do_syscall_64+0x9a/0x820
[  410.533807]  ? do_syscall_64+0x9a/0x820
[  410.537786]  ? trace_hardirqs_on+0xbd/0x2c0
[  410.542111]  ? __ia32_sys_read+0xb0/0xb0
[  410.546176]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  410.551539]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  410.556643]  ? ksys_mount+0xa8/0x140
[  410.560366]  __x64_sys_rename+0x5e/0x80
[  410.564351]  do_syscall_64+0x1b9/0x820
[  410.568247]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  410.573616]  ? syscall_return_slowpath+0x5e0/0x5e0
[  410.578548]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  410.583566]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  410.588584]  ? recalc_sigpending_tsk+0x180/0x180
[  410.593343]  ? kasan_check_write+0x14/0x20
[  410.597583]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  410.602445]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  410.607635] RIP: 0033:0x457089
[  410.610835] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  410.629737] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  410.637456] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  410.644751] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  410.652018] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  410.659285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  410.666557] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000a
11:50:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0)

[  410.715732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  410.799928] FAULT_INJECTION: forcing a failure.
[  410.799928] name failslab, interval 1, probability 0, space 0, times 0
[  410.811399] CPU: 0 PID: 19095 Comm: syz-executor5 Not tainted 4.18.0+ #205
[  410.818424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  410.827785] Call Trace:
[  410.830401]  dump_stack+0x1c9/0x2b4
[  410.834055]  ? dump_stack_print_info.cold.2+0x52/0x52
[  410.839268]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  410.843975]  should_fail.cold.4+0xa/0x11
[  410.848055]  ? is_bpf_text_address+0xd7/0x170
[  410.852569]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  410.857691]  ? __kernel_text_address+0xd/0x40
[  410.862205]  ? unwind_get_return_address+0x61/0xa0
[  410.867171]  ? graph_lock+0x170/0x170
[  410.871006]  ? find_held_lock+0x36/0x1c0
[  410.875096]  ? __lock_is_held+0xb5/0x140
[  410.879193]  ? check_same_owner+0x340/0x340
[  410.883536]  ? rcu_note_context_switch+0x680/0x680
[  410.888484]  ? _raw_spin_unlock_irqrestore+0x63/0xc0
[  410.893616]  __should_failslab+0x124/0x180
[  410.897877]  should_failslab+0x9/0x14
[  410.901725]  kmem_cache_alloc_trace+0x2b5/0x730
[  410.906414]  ? p9_client_walk+0x57e/0xaa0
[  410.910587]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  410.915720]  p9_client_stat+0xc1/0x680
[  410.919635]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  410.924334]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  410.929989]  ? v9fs_dir_readdir+0x661/0xbc0
[  410.934339]  ? lock_downgrade+0x84c/0x8f0
[  410.938517]  v9fs_inode_from_fid+0x77/0x320
[  410.942859]  ? do_raw_spin_unlock+0xa7/0x2f0
[  410.947293]  ? v9fs_vfs_getattr+0x270/0x270
[  410.951649]  v9fs_vfs_lookup+0x3f5/0x4a0
[  410.955732]  ? d_alloc+0x290/0x380
[  410.959301]  ? v9fs_vfs_create+0x130/0x130
[  410.963556]  ? lock_rename+0x236/0x290
[  410.967470]  __lookup_hash+0x12e/0x190
[  410.971382]  do_renameat2+0x6ce/0x1120
[  410.975310]  ? user_path_create+0x40/0x40
[  410.979483]  ? __lock_is_held+0xb5/0x140
[  410.983596]  ? do_syscall_64+0x9a/0x820
[  410.987593]  ? do_syscall_64+0x9a/0x820
[  410.991590]  ? trace_hardirqs_on+0xbd/0x2c0
[  410.995944]  ? __ia32_sys_read+0xb0/0xb0
[  411.000110]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  411.005489]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  411.010614]  __x64_sys_rename+0x5e/0x80
[  411.014638]  do_syscall_64+0x1b9/0x820
[  411.018540]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  411.023939]  ? syscall_return_slowpath+0x5e0/0x5e0
[  411.028886]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  411.033929]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  411.038962]  ? recalc_sigpending_tsk+0x180/0x180
[  411.043722]  ? kasan_check_write+0x14/0x20
[  411.047971]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  411.052845]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  411.058040] RIP: 0033:0x457089
[  411.061237] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  411.080142] RSP: 002b:00007ff5970c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  411.087853] RAX: ffffffffffffffda RBX: 00007ff5970c46d4 RCX: 0000000000457089
[  411.095125] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  411.102391] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  411.109659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  411.116939] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000009
[  411.124874] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:25 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:25 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = accept4(r0, 0x0, &(0x7f0000000180), 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="05001980", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000000300)=0x18)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x4}, &(0x7f00000002c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf435}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743406", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:25 executing program 2 (fault-call:14 fault-nth:11):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:25 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x400300}, 0x0)

11:50:25 executing program 5 (fault-call:14 fault-nth:10):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  411.222031] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  411.279637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  411.315225] FAULT_INJECTION: forcing a failure.
[  411.315225] name failslab, interval 1, probability 0, space 0, times 0
[  411.326611] CPU: 0 PID: 19133 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  411.333633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  411.342993] Call Trace:
[  411.345607]  dump_stack+0x1c9/0x2b4
[  411.349262]  ? dump_stack_print_info.cold.2+0x52/0x52
[  411.354475]  ? __lock_is_held+0xb5/0x140
[  411.358830]  should_fail.cold.4+0xa/0x11
[  411.362964]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  411.368099]  ? pdu_read+0x90/0xd0
[  411.371580]  ? graph_lock+0x170/0x170
[  411.375404]  ? p9pdu_readf+0xb78/0x2170
[  411.379400]  ? graph_lock+0x170/0x170
[  411.383228]  ? p9pdu_writef+0xe0/0xe0
[  411.387045]  ? cpuacct_stats_show+0x51/0x4f0
[  411.391467]  ? __lock_is_held+0xb5/0x140
[  411.395570]  ? check_same_owner+0x340/0x340
[  411.399901]  ? rcu_note_context_switch+0x680/0x680
[  411.404854]  ? p9pdu_readf+0xb78/0x2170
[  411.408842]  __should_failslab+0x124/0x180
[  411.413088]  should_failslab+0x9/0x14
[  411.416892]  __kmalloc+0x2b2/0x720
[  411.420457]  ? memcpy+0x45/0x50
[  411.423759]  ? p9pdu_readf+0x526/0x2170
[  411.427746]  p9pdu_readf+0x526/0x2170
[  411.431555]  ? preempt_notifier_register+0x200/0x200
[  411.436671]  ? p9pdu_writef+0xe0/0xe0
[  411.440482]  ? __switch_to_asm+0x34/0x70
[  411.444548]  ? __kprobes_text_end+0xb8058/0xb8058
[  411.449396]  ? __switch_to_asm+0x34/0x70
[  411.453466]  ? __switch_to_asm+0x40/0x70
[  411.457531]  ? __switch_to_asm+0x34/0x70
[  411.461605]  ? __switch_to_asm+0x40/0x70
[  411.465677]  ? graph_lock+0x170/0x170
[  411.469486]  ? __schedule+0x884/0x1df0
[  411.473390]  ? __lock_is_held+0xb5/0x140
[  411.477462]  ? graph_lock+0x170/0x170
[  411.481298]  p9pdu_readf+0xd5c/0x2170
[  411.485126]  ? p9pdu_writef+0xe0/0xe0
[  411.488943]  ? find_held_lock+0x36/0x1c0
[  411.493021]  ? graph_lock+0x170/0x170
[  411.496829]  ? mark_held_locks+0xc9/0x160
[  411.500988]  ? kmem_cache_alloc_trace+0x275/0x730
[  411.505838]  ? __lock_is_held+0xb5/0x140
[  411.509921]  ? p9_client_stat+0xc1/0x680
[  411.513995]  ? kmem_cache_alloc_trace+0x324/0x730
[  411.518852]  ? p9_client_walk+0x57e/0xaa0
[  411.523011]  p9_client_stat+0x264/0x680
[  411.526998]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  411.531681]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  411.537305]  ? v9fs_dir_readdir+0x661/0xbc0
[  411.541631]  ? lock_downgrade+0x84c/0x8f0
[  411.545787]  v9fs_inode_from_fid+0x77/0x320
[  411.550113]  ? do_raw_spin_unlock+0xa7/0x2f0
[  411.554523]  ? v9fs_vfs_getattr+0x270/0x270
[  411.558852]  v9fs_vfs_lookup+0x3f5/0x4a0
[  411.562919]  ? d_alloc+0x290/0x380
[  411.566466]  ? v9fs_vfs_create+0x130/0x130
[  411.570701]  ? lock_rename+0x236/0x290
[  411.574610]  __lookup_hash+0x12e/0x190
[  411.578500]  do_renameat2+0x6ce/0x1120
[  411.582404]  ? user_path_create+0x40/0x40
[  411.586555]  ? __lock_is_held+0xb5/0x140
[  411.590639]  ? do_syscall_64+0x9a/0x820
[  411.594613]  ? do_syscall_64+0x9a/0x820
[  411.598593]  ? trace_hardirqs_on+0xbd/0x2c0
[  411.602943]  ? __ia32_sys_read+0xb0/0xb0
[  411.607011]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  411.612378]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  411.617480]  ? ksys_mount+0xa8/0x140
[  411.621204]  __x64_sys_rename+0x5e/0x80
[  411.625186]  do_syscall_64+0x1b9/0x820
[  411.629078]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  411.634444]  ? syscall_return_slowpath+0x5e0/0x5e0
[  411.639380]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  411.644401]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  411.649420]  ? recalc_sigpending_tsk+0x180/0x180
[  411.654178]  ? kasan_check_write+0x14/0x20
[  411.658422]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  411.663280]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  411.668473] RIP: 0033:0x457089
[  411.671671] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  411.690571] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  411.698284] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  411.705556] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  411.712824] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  411.720090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
11:50:25 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e0000}, 0x0)

11:50:25 executing program 3:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x20000, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100700050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xcace, 0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  411.727358] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000b
11:50:25 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:25 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0)

11:50:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:25 executing program 2 (fault-call:14 fault-nth:12):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:25 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=""/29)

[  411.988591] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  412.058149] FAULT_INJECTION: forcing a failure.
[  412.058149] name failslab, interval 1, probability 0, space 0, times 0
[  412.069524] CPU: 0 PID: 19170 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  412.076557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  412.085928] Call Trace:
[  412.088549]  dump_stack+0x1c9/0x2b4
[  412.092205]  ? dump_stack_print_info.cold.2+0x52/0x52
[  412.097417]  ? __kernel_text_address+0xd/0x40
[  412.101955]  ? unwind_get_return_address+0x61/0xa0
[  412.106925]  should_fail.cold.4+0xa/0x11
[  412.111035]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  412.116177]  ? pdu_read+0x90/0xd0
[  412.119652]  ? graph_lock+0x170/0x170
[  412.123472]  ? p9pdu_readf+0xb78/0x2170
[  412.127470]  ? do_syscall_64+0x1b9/0x820
[  412.131584]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  412.136990]  ? p9pdu_writef+0xe0/0xe0
[  412.140814]  ? cpuacct_stats_show+0x55/0x4f0
[  412.145251]  ? __lock_is_held+0xb5/0x140
[  412.149341]  ? __kmalloc+0x272/0x720
[  412.153085]  ? check_same_owner+0x340/0x340
[  412.157440]  ? rcu_note_context_switch+0x680/0x680
[  412.162399]  __should_failslab+0x124/0x180
[  412.166654]  should_failslab+0x9/0x14
[  412.170477]  __kmalloc+0x2b2/0x720
[  412.174032]  ? memcpy+0x45/0x50
[  412.177326]  ? p9pdu_readf+0x526/0x2170
[  412.181323]  p9pdu_readf+0x526/0x2170
[  412.185142]  ? preempt_notifier_register+0x200/0x200
[  412.190271]  ? p9pdu_writef+0xe0/0xe0
[  412.194098]  ? __switch_to_asm+0x34/0x70
[  412.198179]  ? __kprobes_text_end+0xb8058/0xb8058
[  412.203038]  ? __switch_to_asm+0x34/0x70
[  412.207143]  ? __switch_to_asm+0x40/0x70
[  412.211234]  ? __switch_to_asm+0x34/0x70
[  412.215318]  ? __switch_to_asm+0x40/0x70
[  412.219264] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  412.219412]  ? graph_lock+0x170/0x170
[  412.231592]  ? __schedule+0x884/0x1df0
[  412.235505]  ? __lock_is_held+0xb5/0x140
[  412.239586]  ? graph_lock+0x170/0x170
[  412.243423]  p9pdu_readf+0xd5c/0x2170
[  412.247257]  ? p9pdu_writef+0xe0/0xe0
[  412.251060]  ? find_held_lock+0x36/0x1c0
[  412.255111]  ? graph_lock+0x170/0x170
[  412.258921]  ? mark_held_locks+0xc9/0x160
[  412.263080]  ? kmem_cache_alloc_trace+0x275/0x730
[  412.267938]  ? __lock_is_held+0xb5/0x140
[  412.272008]  ? p9_client_stat+0xc1/0x680
[  412.276072]  ? kmem_cache_alloc_trace+0x324/0x730
[  412.280904]  ? p9_client_walk+0x57e/0xaa0
[  412.285058]  p9_client_stat+0x264/0x680
[  412.289036]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  412.293710]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  412.299334]  ? v9fs_dir_readdir+0x661/0xbc0
[  412.303659]  ? lock_downgrade+0x84c/0x8f0
[  412.307799]  v9fs_inode_from_fid+0x77/0x320
[  412.312105]  ? do_raw_spin_unlock+0xa7/0x2f0
[  412.316498]  ? v9fs_vfs_getattr+0x270/0x270
[  412.320824]  v9fs_vfs_lookup+0x3f5/0x4a0
[  412.324884]  ? d_alloc+0x290/0x380
[  412.328418]  ? v9fs_vfs_create+0x130/0x130
[  412.332637]  ? lock_rename+0x236/0x290
[  412.336512]  __lookup_hash+0x12e/0x190
[  412.340387]  do_renameat2+0x6ce/0x1120
[  412.344282]  ? user_path_create+0x40/0x40
[  412.348438]  ? __lock_is_held+0xb5/0x140
[  412.352535]  ? do_syscall_64+0x9a/0x820
[  412.356499]  ? do_syscall_64+0x9a/0x820
[  412.360467]  ? trace_hardirqs_on+0xbd/0x2c0
[  412.364783]  ? __ia32_sys_read+0xb0/0xb0
[  412.368839]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  412.374193]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  412.379311]  __x64_sys_rename+0x5e/0x80
[  412.383290]  do_syscall_64+0x1b9/0x820
[  412.387176]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  412.392540]  ? syscall_return_slowpath+0x5e0/0x5e0
[  412.397462]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  412.402474]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  412.407490]  ? recalc_sigpending_tsk+0x180/0x180
[  412.412245]  ? kasan_check_write+0x14/0x20
[  412.416486]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  412.421324]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  412.426500] RIP: 0033:0x457089
[  412.429679] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  412.448574] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  412.456278] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  412.463551] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  412.470813] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  412.478078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  412.485347] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000c
11:50:26 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0ffffffffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf00}, 0x0)

11:50:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3f020000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:26 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x80)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f00000009c0)=""/118, 0x76}], 0x3, 0x0)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
r2 = geteuid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8)
r4 = getuid()
setresuid(r2, r3, r4)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x4, 0x100000001, 0x4, 0x1, 0x7fffffff})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x47, 0x0, 0x4}}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:26 executing program 2 (fault-call:14 fault-nth:13):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:26 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0)
getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @rand_addr}, &(0x7f0000000280)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x37f, 0x0, 0x0, 0x0, [], r1, 0x5}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xb4821cb05ea7acee, &(0x7f00000002c0)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:26 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xec0}, 0x0)

[  412.572441] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  412.590952] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  412.662105] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  412.705444] FAULT_INJECTION: forcing a failure.
[  412.705444] name failslab, interval 1, probability 0, space 0, times 0
[  412.716780] CPU: 0 PID: 19199 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  412.723801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  412.733160] Call Trace:
[  412.735766]  dump_stack+0x1c9/0x2b4
[  412.739431]  ? dump_stack_print_info.cold.2+0x52/0x52
[  412.744661]  ? __kernel_text_address+0xd/0x40
[  412.744684]  ? unwind_get_return_address+0x61/0xa0
11:50:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0)

11:50:26 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  412.744713]  should_fail.cold.4+0xa/0x11
[  412.744741]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  412.744774]  ? pdu_read+0x90/0xd0
[  412.766811]  ? graph_lock+0x170/0x170
[  412.770622]  ? p9pdu_readf+0xb78/0x2170
[  412.774611]  ? do_syscall_64+0x1b9/0x820
[  412.778685]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  412.784071]  ? p9pdu_writef+0xe0/0xe0
[  412.787888]  ? cpuacct_stats_show+0x55/0x4f0
[  412.792325]  ? __lock_is_held+0xb5/0x140
[  412.796439]  ? __kmalloc+0x272/0x720
[  412.800176]  ? check_same_owner+0x340/0x340
11:50:26 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xfff, 0x8000)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x480, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

[  412.804510]  ? rcu_note_context_switch+0x680/0x680
[  412.809450]  __should_failslab+0x124/0x180
[  412.813700]  should_failslab+0x9/0x14
[  412.817509]  __kmalloc+0x2b2/0x720
[  412.821062]  ? memcpy+0x45/0x50
[  412.824356]  ? p9pdu_readf+0x526/0x2170
[  412.828351]  p9pdu_readf+0x526/0x2170
[  412.832165]  ? preempt_notifier_register+0x200/0x200
[  412.832352] nla_parse: 3 callbacks suppressed
[  412.832364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  412.837280]  ? p9pdu_writef+0xe0/0xe0
[  412.837298]  ? __switch_to_asm+0x34/0x70
[  412.837315]  ? __kprobes_text_end+0xb8058/0xb8058
[  412.837330]  ? __switch_to_asm+0x34/0x70
[  412.837345]  ? __switch_to_asm+0x40/0x70
[  412.837360]  ? __switch_to_asm+0x34/0x70
[  412.837375]  ? __switch_to_asm+0x40/0x70
[  412.837392]  ? graph_lock+0x170/0x170
[  412.837411]  ? __schedule+0x884/0x1df0
[  412.862995]  ? __lock_is_held+0xb5/0x140
[  412.863010]  ? __bch_submit_bbio+0x298/0x410
[  412.863028]  ? graph_lock+0x170/0x170
[  412.863067]  p9pdu_readf+0xd5c/0x2170
[  412.863096]  ? p9pdu_writef+0xe0/0xe0
[  412.906817]  ? find_held_lock+0x36/0x1c0
[  412.910883]  ? graph_lock+0x170/0x170
[  412.914690]  ? mark_held_locks+0xc9/0x160
[  412.918840]  ? kmem_cache_alloc_trace+0x275/0x730
[  412.923687]  ? __lock_is_held+0xb5/0x140
[  412.927754]  ? p9_client_stat+0xc1/0x680
[  412.931813]  ? kmem_cache_alloc_trace+0x324/0x730
[  412.936646]  ? p9_client_walk+0x57e/0xaa0
[  412.940805]  p9_client_stat+0x264/0x680
[  412.944780]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  412.949455]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  412.955093]  ? v9fs_dir_readdir+0x661/0xbc0
[  412.959410]  ? lock_downgrade+0x84c/0x8f0
[  412.963551]  v9fs_inode_from_fid+0x77/0x320
[  412.967870]  ? do_raw_spin_unlock+0xa7/0x2f0
[  412.972297]  ? v9fs_vfs_getattr+0x270/0x270
[  412.976622]  v9fs_vfs_lookup+0x3f5/0x4a0
[  412.980667]  ? d_alloc+0x290/0x380
[  412.984199]  ? v9fs_vfs_create+0x130/0x130
[  412.988435]  ? lock_rename+0x236/0x290
[  412.992326]  __lookup_hash+0x12e/0x190
[  412.996209]  do_renameat2+0x6ce/0x1120
[  413.000125]  ? user_path_create+0x40/0x40
[  413.004266]  ? __lock_is_held+0xb5/0x140
[  413.008342]  ? do_syscall_64+0x9a/0x820
[  413.012313]  ? do_syscall_64+0x9a/0x820
[  413.016299]  ? trace_hardirqs_on+0xbd/0x2c0
[  413.020651]  ? __ia32_sys_read+0xb0/0xb0
[  413.024714]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  413.030063]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  413.035168]  __x64_sys_rename+0x5e/0x80
[  413.039145]  do_syscall_64+0x1b9/0x820
[  413.043025]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  413.048379]  ? syscall_return_slowpath+0x5e0/0x5e0
[  413.053304]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  413.058323]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  413.063345]  ? recalc_sigpending_tsk+0x180/0x180
[  413.068101]  ? kasan_check_write+0x14/0x20
[  413.072349]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  413.077204]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  413.082394] RIP: 0033:0x457089
[  413.085574] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  413.104467] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  413.112188] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  413.119457] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  413.126713] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  413.133967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  413.141221] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000d
[  413.176633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  413.198811] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x13000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:27 executing program 2 (fault-call:14 fault-nth:14):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:27 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:27 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0)

[  413.341772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  413.388525] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  413.464531] FAULT_INJECTION: forcing a failure.
[  413.464531] name failslab, interval 1, probability 0, space 0, times 0
[  413.475883] CPU: 0 PID: 19245 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  413.482135] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  413.482940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  413.482949] Call Trace:
[  413.482977]  dump_stack+0x1c9/0x2b4
[  413.483009]  ? dump_stack_print_info.cold.2+0x52/0x52
[  413.512177]  ? __kernel_text_address+0xd/0x40
[  413.516691]  ? unwind_get_return_address+0x61/0xa0
[  413.521636]  should_fail.cold.4+0xa/0x11
[  413.525706]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  413.530820]  ? pdu_read+0x90/0xd0
[  413.534282]  ? graph_lock+0x170/0x170
[  413.538089]  ? p9pdu_readf+0xb78/0x2170
[  413.542066]  ? do_syscall_64+0x1b9/0x820
[  413.546133]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  413.551510]  ? p9pdu_writef+0xe0/0xe0
[  413.555313]  ? cpuacct_stats_show+0x61/0x4f0
[  413.559730]  ? __lock_is_held+0xb5/0x140
[  413.563797]  ? __kmalloc+0x272/0x720
[  413.567518]  ? check_same_owner+0x340/0x340
[  413.571844]  ? rcu_note_context_switch+0x680/0x680
[  413.576781]  __should_failslab+0x124/0x180
[  413.581020]  should_failslab+0x9/0x14
[  413.584822]  __kmalloc+0x2b2/0x720
[  413.588371]  ? memcpy+0x45/0x50
[  413.591675]  ? p9pdu_readf+0x526/0x2170
[  413.595657]  p9pdu_readf+0x526/0x2170
[  413.599462]  ? preempt_notifier_register+0x200/0x200
[  413.604595]  ? p9pdu_writef+0xe0/0xe0
[  413.608402]  ? __switch_to_asm+0x34/0x70
[  413.612465]  ? __kprobes_text_end+0xb8058/0xb8058
[  413.617311]  ? __switch_to_asm+0x34/0x70
[  413.621373]  ? __switch_to_asm+0x40/0x70
[  413.625435]  ? __switch_to_asm+0x34/0x70
[  413.629498]  ? __switch_to_asm+0x40/0x70
[  413.633562]  ? graph_lock+0x170/0x170
[  413.637366]  ? __schedule+0x884/0x1df0
[  413.641268]  ? __lock_is_held+0xb5/0x140
[  413.645337]  ? graph_lock+0x170/0x170
[  413.649161]  p9pdu_readf+0xd5c/0x2170
[  413.652987]  ? p9pdu_writef+0xe0/0xe0
[  413.656785]  ? find_held_lock+0x36/0x1c0
[  413.660853]  ? graph_lock+0x170/0x170
[  413.664657]  ? mark_held_locks+0xc9/0x160
[  413.668810]  ? kmem_cache_alloc_trace+0x275/0x730
[  413.673659]  ? __lock_is_held+0xb5/0x140
[  413.677729]  ? p9_client_stat+0xc1/0x680
[  413.681793]  ? kmem_cache_alloc_trace+0x324/0x730
[  413.686652]  ? p9_client_walk+0x57e/0xaa0
[  413.690809]  p9_client_stat+0x264/0x680
[  413.694800]  ? p9_client_mknod_dotl+0x5b0/0x5b0
[  413.699478]  ? p9_client_zc_rpc.constprop.11+0x1450/0x1450
[  413.705113]  ? v9fs_dir_readdir+0x661/0xbc0
[  413.709439]  ? lock_downgrade+0x84c/0x8f0
[  413.713598]  v9fs_inode_from_fid+0x77/0x320
[  413.717929]  ? do_raw_spin_unlock+0xa7/0x2f0
[  413.722349]  ? v9fs_vfs_getattr+0x270/0x270
[  413.726691]  v9fs_vfs_lookup+0x3f5/0x4a0
[  413.730769]  ? d_alloc+0x290/0x380
[  413.734313]  ? v9fs_vfs_create+0x130/0x130
[  413.738550]  ? lock_rename+0x236/0x290
[  413.742447]  __lookup_hash+0x12e/0x190
[  413.746339]  do_renameat2+0x6ce/0x1120
[  413.750241]  ? user_path_create+0x40/0x40
[  413.754389]  ? __lock_is_held+0xb5/0x140
[  413.758494]  ? do_syscall_64+0x9a/0x820
[  413.762470]  ? do_syscall_64+0x9a/0x820
[  413.766448]  ? trace_hardirqs_on+0xbd/0x2c0
[  413.770776]  ? __ia32_sys_read+0xb0/0xb0
[  413.774843]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  413.780210]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  413.785325]  __x64_sys_rename+0x5e/0x80
[  413.789310]  do_syscall_64+0x1b9/0x820
[  413.793204]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  413.798571]  ? syscall_return_slowpath+0x5e0/0x5e0
[  413.803506]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  413.808527]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  413.813546]  ? recalc_sigpending_tsk+0x180/0x180
[  413.818306]  ? kasan_check_write+0x14/0x20
[  413.822551]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  413.827403]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  413.832595] RIP: 0033:0x457089
[  413.835796] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  413.854702] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  413.862417] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  413.869686] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  413.876972] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  413.884283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  413.891561] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000e
11:50:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x45f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:28 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x20000)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x3, 0x4)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da00d10ae8bb366613594ba7df598235ccfbb7ac314ac656bd6baf05b6bc5d0549c563093ff2cdf8f1ba3bf857497c15ddbe0c2ef14221a10c4723df1d6a09e24ccb72b4f31f6ddf0acec3bfba59e884b8aaba22d6b69e829bbf0029efb36d99f803aa2de2228a62c6a913bf9e6b4001c11f45e5a3f0d530cd043b88e7d9765e9fb6ef199a65c2a374e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:28 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf6100000000000085100000aa9d0000bf0100000000000095000006000000000000000000000000b70000000000000095000000000000005e26b2896cf216fbeb6999b1f35ad8c43f4ea61a9de3cdec40225873"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8)

11:50:28 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x30020000}, 0x0)

11:50:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:28 executing program 2 (fault-call:14 fault-nth:15):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  414.005013] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  414.040456] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  414.082539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  414.104126] 9pnet: Insufficient options for proto=fd
[  414.109455] FAULT_INJECTION: forcing a failure.
[  414.109455] name failslab, interval 1, probability 0, space 0, times 0
[  414.120811] CPU: 1 PID: 19271 Comm: syz-executor2 Not tainted 4.18.0+ #205
[  414.127841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  414.137208] Call Trace:
[  414.139829]  dump_stack+0x1c9/0x2b4
[  414.143486]  ? dump_stack_print_info.cold.2+0x52/0x52
[  414.148716]  should_fail.cold.4+0xa/0x11
[  414.152810]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  414.157948]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  414.163509]  ? node_tag_set+0xc4/0x160
[  414.167425]  ? find_held_lock+0x36/0x1c0
[  414.168514] 9pnet: Insufficient options for proto=fd
[  414.171514]  ? graph_lock+0x170/0x170
[  414.171541]  ? find_held_lock+0x36/0x1c0
[  414.171573]  ? __lock_is_held+0xb5/0x140
[  414.188615]  ? check_same_owner+0x340/0x340
[  414.192966]  ? rcu_note_context_switch+0x680/0x680
[  414.197929]  __should_failslab+0x124/0x180
[  414.202179]  should_failslab+0x9/0x14
[  414.205994]  kmem_cache_alloc+0x29c/0x710
[  414.210154]  ? find_inode.isra.20+0xc3/0x210
[  414.214571]  ? do_raw_spin_lock+0xc1/0x200
[  414.218813]  ? v9fs_blank_wstat+0x3a0/0x3a0
[  414.223149]  v9fs_alloc_inode+0x3d/0x150
[  414.227217]  alloc_inode+0x63/0x190
[  414.230860]  iget5_locked+0x12e/0x1d0
[  414.234673]  ? v9fs_vfs_setattr+0xbc0/0xbc0
[  414.239006]  ? unixmode2p9mode+0x240/0x240
[  414.243258]  ? unixmode2p9mode+0x240/0x240
[  414.247510]  v9fs_inode_from_fid+0x164/0x320
[  414.251943]  ? v9fs_vfs_getattr+0x270/0x270
[  414.256288]  v9fs_vfs_lookup+0x3f5/0x4a0
[  414.260364]  ? d_alloc+0x290/0x380
[  414.263932]  ? v9fs_vfs_create+0x130/0x130
[  414.268180]  ? lock_rename+0x236/0x290
[  414.272090]  __lookup_hash+0x12e/0x190
[  414.275999]  do_renameat2+0x6ce/0x1120
[  414.279216] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  414.279906]  ? user_path_create+0x40/0x40
[  414.279933]  ? __lock_is_held+0xb5/0x140
[  414.279975]  ? do_syscall_64+0x9a/0x820
[  414.300547]  ? do_syscall_64+0x9a/0x820
[  414.300567]  ? trace_hardirqs_on+0xbd/0x2c0
[  414.300583]  ? __ia32_sys_read+0xb0/0xb0
[  414.300607]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  414.316404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  414.318340]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  414.318365]  __x64_sys_rename+0x5e/0x80
[  414.318384]  do_syscall_64+0x1b9/0x820
[  414.318403]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  414.318425]  ? syscall_return_slowpath+0x5e0/0x5e0
[  414.350086]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  414.355119]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  414.355136]  ? recalc_sigpending_tsk+0x180/0x180
[  414.355153]  ? kasan_check_write+0x14/0x20
[  414.355174]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  414.355198]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  414.379195] RIP: 0033:0x457089
[  414.382400] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  414.401323] RSP: 002b:00007fcd46f3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  414.409056] RAX: ffffffffffffffda RBX: 00007fcd46f3c6d4 RCX: 0000000000457089
[  414.416361] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  414.423646] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
11:50:28 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:28 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0)

11:50:28 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x100, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000bc0)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'ip6gretap0\x00', <r3=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000d80)={'vcan0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x120, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xa7}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r6, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r7, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffffffff000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  414.430939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  414.438224] R13: 00000000004d3890 R14: 00000000004c851a R15: 000000000000000f
[  414.468041] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743405", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:28 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2a00000029010000000000000000800000000000150000000000000000f5ffffff06002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:28 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0)

[  414.570454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  414.732732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  414.831266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:28 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000e50000000002000000bf010000000000009500b8faeeaf014001b3ff5ec29d56070000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x80800, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x6, 0x900, 0x3fd, 0x7, 0x7, 0x0, 0x849, 0xe37, 0xffe, 0x8001, 0xfffffffffffffffd, 0x8})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0x1fe)

11:50:28 executing program 2 (fault-call:14 fault-nth:16):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:28 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x230}, 0x0)

11:50:28 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40)
sendto$llc(r2, &(0x7f0000000600)="2f3faff0e5d59fc55caa95c68fde40882d4070650fb31fd14017c3ce3cafd2753ee36306a72c9d36bcc18174b27aca6ca24979e8ebe1903405fb8569a338d7153fd798ae15fa0dbf68fd34dd4405b5699ef2e5b2ad99923e55df5185db2d272bcc02499b3b6f73ac2d4978d66b", 0x6d, 0x40000, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0x80, 0x8)

11:50:28 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x500000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x24490}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf}, 0x0)

[  414.995164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  415.027823] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:29 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={<r1=>0x0, 0x10000}, &(0x7f00000006c0)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000700)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x11da00, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={<r4=>0x0, 0x4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={<r5=>0x0, 0x7, 0x9, 0x7f}, &(0x7f0000000300)=0x10)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000580)={r4, 0x3, 0xe36b, 0x9, 0x78, 0x6, 0x7, 0xb00f, {r5, @in6={{0xa, 0x4e24, 0x1, @remote, 0x5}}, 0x2, 0x7fa4, 0x8, 0xef8, 0x3}}, &(0x7f0000000640)=0xb0)
write$cgroup_type(r3, &(0x7f0000000780)='threaded\x00', 0x9)

[  415.081828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3002000000000000}, 0x0)

11:50:29 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RMKDIR(r1, &(0x7f0000000600)={0x14, 0x49, 0x1, {0x1, 0x1000000002, 0x5}}, 0x14)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x900)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000300)={0x3, r3})
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c002ea3aca688f35a23b861ecd33351e715433c2cb8ed5b65111c91b1a78c14c87b6491c1b6b727ed1e6951557f7c9623e9abf3078a8c04008acbe1073e04eae0442496f79bf4be38864e4bf5718fc2eb0e1095f00573a9eabd981849c26c80f4ccf164427909873ec2fb9878464300fac8ea7fc2dfed1d685bb87fa6390e1dd8bf8f48773154969c4f7a9f5c12da8d7dd458b1b6b1e95252174d580d9de4203b41025744a7a7a845d5c9b3ba372b16f516e43674149d8d91696263d0f345b7fbdcec3306011217"])
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  415.140161] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0)

11:50:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  415.310237] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  415.402332] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:29 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:29 executing program 3:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x10080, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='GPL\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x80000, 0x2)
ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4000000000, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000200)=""/206}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:29 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = dup3(r1, r0, 0x80000)
getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000000)=""/33, &(0x7f0000000080)=0x21)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0/file1\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0)

11:50:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:29 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xbf30000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x34000}, 0x0)

[  415.719727] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:29 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',=\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
r2 = dup2(r1, r0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000009c0)={'nat\x00', 0x0, 0x3, 0x74, [], 0x6, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000680)=""/116}, &(0x7f0000000000)=0x78)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:29 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x0, 0x5})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  415.772023] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:29 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0)

[  415.939841] 9pnet: Insufficient options for proto=fd
11:50:29 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf61000000000000851000000200ce9fbf0100000000000095008000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)
alarm(0x5)

11:50:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  415.972348] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf5080000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  416.041662] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:30 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c8566646e6f3dd102ca9800c730f9aff36e55e2000000000000", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:30 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0)

11:50:30 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000009c0)=""/200)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
flistxattr(r0, &(0x7f0000000600)=""/109, 0x6d)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r3=>0x0)
prctl$setptracer(0x59616d61, r3)
socket$nl_xfrm(0x10, 0x3, 0x6)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:30 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000480)=""/206}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000085100000000000008510000002000000bf0100000000000095000000000000001501000000000000b70000000000000095000000000012000002b4d8ef184bd808f4a0e759e452fe48a28d8e6f08cada29c4952df9b39bb8856296ab4eaa0774583ccf757e038ab9b2bc312709c2841890"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000080)}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8)

11:50:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x6c00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x97ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  416.407619] 9pnet: Insufficient options for proto=fd
[  416.436182] 9pnet: Insufficient options for proto=fd
11:50:30 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0}, 0x0)

11:50:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:30 executing program 3:

11:50:30 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x2}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:30 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4df40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:30 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
ioctl$KDDELIO(r0, 0x4b35, 0x1)
mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x103100)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000340)=0x8, 0x4)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000140)="75e44d623ab5987db30996174b181aedc51df860b43a56a3a38fbe12a2a457e8f1c8e86ad8484d46ef5a")
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874656ee42c005b9d87f76f91b30f6f41565f5d73bae47572bce786cd98554cd99f094ba28036fea3387edb1986cc"])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
sendto$llc(r2, &(0x7f00000004c0)="453ec59bfb283aaae0800caedffc0ad91e44942c9e43151df4a2d224e5486020ebb003cb4afb851db9ebd79adb7ee9204fb2d5c8f670dc74e8a9eb25afb5f732d986e86b6b438ea0251dd4a30feed2326ed176d44cf88c25a63246409d2cd8335d1640e7c307a50c91d0ffba859472f24615993c7e82a79ff1ed6258406556", 0x7f, 0x14, &(0x7f0000000680)={0x1a, 0x31b, 0x80, 0x7fff, 0xfffffffffffffffb, 0x0, @dev={[], 0x1a}}, 0x10)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:30 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e}, 0x0)

[  416.713833] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  416.821897] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:31 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
sync_file_range(r0, 0x1, 0x81, 0x2)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
getrusage(0xffffffffffffffff, &(0x7f0000000600))
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:31 executing program 3:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

11:50:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xb000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:31 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
timerfd_gettime(r2, &(0x7f0000000080))
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e730466642c7266646e7f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

11:50:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:31 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="657874340f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

[  417.012492] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  417.030410] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3002}, 0x0)

[  417.103313] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:31 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3ddbfedd14c0f4880715aacc5c85d66a9d50b0c80f745be2bd6721241d536d9f8983d016a4ef2dffce79e0150b15c31df5ffb7d0ee786c99bdc27dd6f2e3517713c21086b08a2e866997108d20804513321d06966f08acb872cd5a421f806680d166b3cb5a7f2804a55c7f7d5517c4236bd393e52dd264a031", @ANYRESHEX=r1, @ANYBLOB=',uname=cpusetwlan0,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  417.191531] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:31 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e813d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = request_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000640)='(', 0xfffffffffffffffb)
request_key(&(0x7f0000000a00)='dns_resolver\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000a80)='9p\x00', 0xfffffffffffffff9)
keyctl$search(0xa, r2, &(0x7f0000000b40)='pkcs7_test\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x1}, r2)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000780)={0x7, 0x5f8, 0x2})
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x20000, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000006c0)={0x946, 0x81, 0x380, 0x1, 0xffffffff}, 0x14)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000009c0)={0x40, 0x3, 0x2f91, 0x5, <r4=>0x0}, &(0x7f0000000ac0)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000b80)={r4, 0x6, 0xfff, 0x10000}, &(0x7f0000000bc0)=0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000080)=""/40)

11:50:31 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10)
connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x20000000008215)

11:50:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x19000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x12000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  417.289700] 9pnet: Insufficient options for proto=fd
11:50:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

[  417.377304] 9pnet: Insufficient options for proto=fd
[  417.408377] 9pnet: Insufficient options for proto=fd
[  417.467101] 9pnet: Insufficient options for proto=fd
11:50:31 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:31 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x29, {0x2, 0x0, @broadcast}, "6c6f00f1ffff04deffffffffffff0d00"})

11:50:31 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x10a00)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, <r3=>0x0}, &(0x7f0000000340)=0xc)
lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x94, {0x20, 0x1, 0x6}, 0x80, r3, r4, 0x2, 0x800, 0x6fa7, 0x3, 0x2, 0x100000001, 0x9, 0x7c, 0x9, 0xcfd, 0x3249c709, 0x3, 0x741b, 0x7fff, 0xfffffffffffffeff}}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x8000000000000}, 0x0)

11:50:31 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x6, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffed8)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100000000000000004800080000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = geteuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@rand_addr=0x80000001, @in=@remote, 0x4e21, 0x4, 0x4e24, 0xffffffffffffff9a, 0xa, 0x0, 0x80, 0x6, 0x0, r2}, {0x1ff, 0x1, 0x401, 0x4, 0x0, 0x1ff, 0x4, 0x4}, {0x3, 0xffc0000000000000, 0x8991, 0x9}, 0x800, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x3b}, 0x2, @in6=@remote, 0x3505, 0x3, 0x3, 0x5, 0x5, 0x8, 0x6}}, 0xe8)
syz_mount_image$nfs4(&(0x7f00000009c0)='nfs4\x00', &(0x7f0000000a00)='./file0\x00', 0x3, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="8bf63e725a3d57bca82d905f364c2aca0f49c0224a02df3327e1dfbee207aea984be3ffce53c9d9a37f81aa216213f4ae645198831efa9dc1f181513f66ce66327beb96c49efcb3332b86ad6427ed4a64006e2c2bd263ba6ac1f55", 0x5b, 0x4}], 0x80000, &(0x7f0000000b00)='\x00')
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00'])
rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @local, <r4=>0x0}, &(0x7f0000000340)=0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', r4})

11:50:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x33f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfdf20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"})
dup2(r0, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x6}}], 0x0, 0x0, &(0x7f0000000500)})

11:50:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[  417.911475] nla_parse: 18 callbacks suppressed
[  417.911489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:31 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0xfffffffffffffffe}}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x444a40, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:31 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  417.970508] binder: 19714:19715 transaction failed 29189/-22, size 0-0 line 2855
11:50:32 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0)

11:50:32 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r2}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)=0x1)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  418.027350] binder: 19714:19717 transaction failed 29189/-22, size 0-0 line 2855
[  418.062018] binder: undelivered TRANSACTION_ERROR: 29189
11:50:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1500}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  418.116992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  418.127967] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  418.183998] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  418.196311] binder: undelivered TRANSACTION_ERROR: 29189
[  418.229156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:32 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434fb", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:32 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000800))

11:50:32 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)

11:50:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2f0}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:32 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0xfffffffffffffffe, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000029010000000000800000090000002e796969653000000000060000000000000000000000"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0xb)
write$P9_RSTAT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000401002805007266646e6f05007266646e6f110076626f786e6574317472c575737465646c25682e5c52219d42b068bf8471fb865705"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x8002, 0x0)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1f, 0x101000)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:32 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x29}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf446}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  418.443546] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  418.465100] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:32 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x80000}, 0x0)

[  418.518850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  418.540579] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:32 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x7}, {0x0, @remote}, 0x29, {0x2, 0x0, @broadcast}, "0037810000d80100"})

11:50:32 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='noextend')
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:32 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
chroot(&(0x7f0000000000)='./file0/file0\x00')
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x177400, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001b40)={<r3=>0x0, 0xeb, "9f0c4084aeecff73f611cb417fe19f9a7d104975fae99e8ec18e6b57d2677ae63518176a4131e29d1e550aac2fa0f68a27ccc1efa57d73f0e29816fe3e01f8bf575b203631589d3ee982eac1335344e10403be25fc622a1f1e1a95360cace5dfeff61c78fff86f000f8187f19f97ac47be1abae08c9e59605a0ab91908e8b01d513f1f73d001447fb5e89e5a3cce588eda206c206f2ed23b48f4a028a665cf3e446b23d8c7a2a90ba39b4b6a8ca6283cddace12acdad7e1c6e9b80991d8082fa25b4a25e7a7879f73580918f88749bd1cab5ea91eda77427718e38da737efd72a33fa4199feb9d81096491"}, &(0x7f0000001c40)=0xf3)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001c80)={r3, 0x43e, 0xaa, "5bc150d626647e27cf96b29cb1eaab9bc8ab19ca985550942113de28d74d734130cf84c3f2a39cd00b6d2254e00efe5bd9522ea6fe4ec64b44729da24211fd8b4f11b8b716c4829709e7ab14080c686d285d63d5a7a9434d0583b1933b8188648eaabedc2b335281b8c43f685c08a80cba35401edc2f39331def1aa5e2248c4a16663adc35478fd79d9ef9c3547d17d315002010a57c6093a03b66e109f322f94ac75b95e336c5bab370"}, 0xb2)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  418.626990] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  418.662711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xc00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:32 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x8}, 0x0)

11:50:32 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="657874348c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:32 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
getrusage(0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
tkill(r0, 0x1000000000016)

[  418.815985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  419.012124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:33 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="6578743402", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:33 executing program 2:
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x8482, 0x4, &(0x7f0000001ac0)=[{&(0x7f0000000340)="9547080f84cd", 0x6, 0x6}, {&(0x7f0000000600)="7cdce88f2e0dce90c448a25bc1bb08fa29e892d604ad74eb2c6133dc922dcdc5ef79d595dbcde3a7b87a7acba810cd2e0d70fe49a1b1bfd9049e2e90f3d351718d076297e201f9567ba6ad819e6c29b3c7c3e800127eb0f010344b2fb357247bbfc4d72818dad30f46bb1bc1975cf369fa5072b3d9f0ea5a4d2b8b8a6b142bbb3ac32901ada0e371ab4f", 0x8a, 0xbb53}, {&(0x7f00000009c0)="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", 0xfb, 0xd6}, {&(0x7f0000000ac0)="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", 0x1000, 0x5}], 0x200800, &(0x7f00000006c0)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@bsdgroups='bsdgroups'}, {@pquota='pquota'}, {@wsync='wsync'}]})
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
r2 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x580, 0x80)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001b40))
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='noextend')
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2}, 0x0)

11:50:33 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = syz_open_pts(0xffffffffffffff9c, 0x100)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x43d}}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='./file1\x00')

11:50:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffd}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

[  419.213173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  419.231640] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:33 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x1, 0x6, 0x3, 0x5}})
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x102)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000600)={0x56, 0x0, 0x0, "6a3b884e5ca7d823b9d81e3157983ebbe7b05ece1aa80e00dca6fec0d41ff3b3d6c3004c78efdea079dbe9211cca3db50c53aa2de082733b4d973b102baf8ce57454ea619c754dc8165077d7bef123bed3bf30756401"})
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  419.299544] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  419.366188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x6, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffed8)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100000000000000004800080000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = geteuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@rand_addr=0x80000001, @in=@remote, 0x4e21, 0x4, 0x4e24, 0xffffffffffffff9a, 0xa, 0x0, 0x80, 0x6, 0x0, r2}, {0x1ff, 0x1, 0x401, 0x4, 0x0, 0x1ff, 0x4, 0x4}, {0x3, 0xffc0000000000000, 0x8991, 0x9}, 0x800, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x3b}, 0x2, @in6=@remote, 0x3505, 0x3, 0x3, 0x5, 0x5, 0x8, 0x6}}, 0xe8)
syz_mount_image$nfs4(&(0x7f00000009c0)='nfs4\x00', &(0x7f0000000a00)='./file0\x00', 0x3, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="8bf63e725a3d57bca82d905f364c2aca0f49c0224a02df3327e1dfbee207aea984be3ffce53c9d9a37f81aa216213f4ae645198831efa9dc1f181513f66ce66327beb96c49efcb3332b86ad6427ed4a64006e2c2bd263ba6ac1f55", 0x5b, 0x4}], 0x80000, &(0x7f0000000b00)='\x00')
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00'])
rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @local, <r4=>0x0}, &(0x7f0000000340)=0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', r4})

11:50:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

11:50:33 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf308}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  419.539673] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:33 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xffffffffffffff18)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  419.672529] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  419.697938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:33 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0)

11:50:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40)
sendto$llc(r2, &(0x7f0000000600)="2f3faff0e5d59fc55caa95c68fde40882d4070650fb31fd14017c3ce3cafd2753ee36306a72c9d36bcc18174b27aca6ca24979e8ebe1903405fb8569a338d7153fd798ae15fa0dbf68fd34dd4405b5699ef2e5b2ad99923e55df5185db2d272bcc02499b3b6f73ac2d4978d66b", 0x6d, 0x40000, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0x80, 0x8)

11:50:33 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x6, &(0x7f0000001c00)=[{&(0x7f0000000340)="41f1113a481b2876a97c28029870243a47d5b8632fdb3ffb4120", 0x1a, 0xf73}, {&(0x7f0000000600)="883f742d9eac6ee8e0edd50c7c84965b22a0f13439b41d1d165d8479eacc9de531524e9e185a0f9845a24a801a6020cf48840642701dee702c0123e3f80df73e6f77e32ca336be18b4cf9e78b2f998530fdce7db7ee62c70527b4acd9e5f4d2d23b7887411a3bb15cca565a06b8e0b6009e07851ab0ba86b8196a55044c21db1d5e9713d3de56cfd900553890f9636831a117cb98cf7ba8117cd7539b0e093e6ee641b6f8639377a8fe047c18b26a268cfc33421169626d3fad81a1fb4289a36ccc1b68a4afec8cad3626319f4c3f7e088e85259354a6d05d6007d36dfe4fc4f8cabdfc9aa8c3cb2197d011b64b6d8368d47f7cb17b09215fe", 0xf9, 0x2}, {&(0x7f00000009c0)="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", 0xfd, 0x7}, {&(0x7f0000000ac0)="fda1bbb49b844df9163ab779ab2bbc8f0980bf82c5b228af15e96c3975374a280665af55684108cb56bff25738c610035fb5155f746db4077880f926438e11ce01eeed6fe7a23fe2a9b0bf94f7cc8257e84ab933e0bb6f94f7b881d8c56d032959432e9528c6a0b63f0287f271991a2b27fcd800a7adf153cc1a6dde3f52b6d0f05e993cc510775a9a86", 0x8a, 0x5}, {&(0x7f0000000b80)="733d11822ce5d3a1d351b10ed8fc449eccfaa23727c39ff0a903879f521703c2fc77fe9c642938a6f4e710907b8a5b113b8722f0c207bc3fe8f162a96c75e1cd8c075bf710c7f5d39e4d5517c59d89de7743a52db1b35c4e769e986e0fed680676234ddab7d6e3118b71a4780ca090394af9d0c5907891bc77d4f7dfb2320e", 0x7f, 0x100000001}, {&(0x7f0000000c00)="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", 0x1000, 0x8}], 0x800, &(0x7f0000000780)={[{@decompose='decompose'}]})
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RWSTAT(r1, &(0x7f0000001e80)={0x7, 0x7f, 0x2}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = accept4(0xffffffffffffffff, &(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000001f40)=0x80, 0x800)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r3 = creat(&(0x7f0000001cc0)='./file0/file1\x00', 0x80)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001d40)={@ipv4={[], [], @remote}, <r4=>0x0}, &(0x7f0000002100)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x30000008}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, r4, {0x0, 0x5}, {0xfff7, 0xf}, {0x8, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000801)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf7f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:33 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:33 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
socketpair(0x13, 0x7, 0x4, &(0x7f0000000000))
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66a3c6696c"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = geteuid()
r3 = getgid()
write$P9_RGETATTR(r0, &(0x7f0000000600)={0xa0, 0x19, 0x2, {0x2006, {0x0, 0x0, 0x3}, 0xa, r2, r3, 0x9, 0x8, 0x5, 0x9, 0x0, 0x4, 0x8, 0xffffffff, 0x5, 0x8, 0x40, 0x10001, 0x200, 0x1, 0xffff}}, 0xa0)

11:50:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf000}, 0x0)

[  419.971775] hfsplus: unable to find HFS+ superblock
[  419.979268] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  420.026234] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9d08}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0)

[  420.135367] hfsplus: unable to find HFS+ superblock
11:50:34 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0\x00')

11:50:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:34 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf838}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

[  420.317375] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:34 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3f02}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:34 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = accept(0xffffffffffffffff, &(0x7f0000000640)=@nfc, &(0x7f00000006c0)=0x80)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000780)=0x20000, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={<r4=>0x0, 0x500000}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000600)={r4, 0x9c0}, 0xc)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:34 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x4000)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x3, 0x7, 0xfffffffffffffffa})
write$P9_RSTAT(r1, &(0x7f0000000600)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x100000000000, 0x0, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x2, 'rfdno', 0x5, 'rfdno', 0x11, "76626f786e65dcfdad86000010000000003348e97668829b2d719b9e9e476fe2612ca77aeb049631e364430b6274a53aae5a1f"}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700))
lstat(&(0x7f0000000740)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x1, {0x0, 0xfffffffffffffffc}, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffddd)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00')

11:50:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x230}, 0x0)

11:50:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  420.615090] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  420.632313] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

[  420.724605] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:34 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x80000000, 0x40000)
sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0)
r3 = gettid()
r4 = getuid()
r5 = getegid()
r6 = gettid()
r7 = getuid()
r8 = getegid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a80)={<r9=>0x0}, &(0x7f0000000ac0)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8)
getresgid(&(0x7f0000000c40), &(0x7f0000000c80)=<r11=>0x0, &(0x7f0000000cc0))
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001080)=<r12=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000010c0)={0x0, <r13=>0x0}, &(0x7f0000001100)=0xc)
fstat(r1, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000011c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f00000012c0)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, <r17=>0x0}, &(0x7f0000001340)=0xc)
sendmmsg$unix(r2, &(0x7f00000013c0)=[{&(0x7f0000000680)=@file={0x1, './file0/file1\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000009c0)="3c32285701ab6a161b0953e9a13a710512dd95f77ee560fca4ccc3796ad006719b105101b3bbeee8b8394320b8339079a530a45db022bd4e4dbf3f73f1dbda41afb209fcc78f73ff08b5c6260e4ac30648761f8fafa3072e1943d2ce78a8d4a16669c5901f38042875f90fa0d00456a70d9947135c0f44ebeb0656e84639de92b38110fd19dc83a7babf46deabac6e6218156b224d0a6f03", 0x98}], 0x1, &(0x7f0000000d00)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r1, r1, r2]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r2]}], 0xe8, 0x4000000}, {&(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e80)="06acbfc201b0527487f74fb9f5d6ea92dcc083f29a21837ce32dd012705b03ff259158c0742b4bcd04070f90d444f1795a9a538881a88c1e42ef5fcfe413f234c7ecc8271ab4b1102cd4da10baf85b64abf5397dd7bf85d515e64ac08fdd96e1e04bb02aa078f075df40a48037cd102523ef7ed3914057133c26ea7969df2a63b058991a189a7563650584258a8acd132dfe14c3cb6227734bc50212fc89add0322b3c467164d38d42443f45772ace8f997e095a37e470723ab5485f076b397cbc136ea90b", 0xc5}, {&(0x7f0000000f80)="07c4275ed7a35bb0b8ac720fd2b9330ff0120b1426ec26096244cff6c80cd8660464c4f3aafdc7e2db1928f95e13f4ff39b0909c794fbed640884f4aaca97ef72e0e414825f63984ff327a875e5ecaf6f66ce05832bd9d80eaf480b11dd3c251b8335d853e5fcb41ddf8e3cdf1fda654a2ceb07125acde97db1b950c599b5f3e849c284f5b74b0d76c9e97f339c22b05b2c3e7c3c2c9f43b7c1cde85b3230864e38637a4990e4f1d09d3bc26", 0xac}], 0x2, &(0x7f0000001380)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x40, 0x4004080}], 0x2, 0x80)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000640)={0x2c, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x14, 0x6, 0x61}, 0x2c)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000340)=0x7)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r18 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0)
ioctl$VT_RESIZEX(r18, 0x560a, &(0x7f0000000080)={0x6, 0x0, 0x931, 0x7, 0x3, 0xfffffffffffffffd})
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdlo=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  420.783374] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:34 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="657874340f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x39f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xa000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  420.952837] 9pnet: Insufficient options for proto=fd
11:50:34 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x20}}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
mount(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000780)='nfsd\x00', 0x40442, &(0x7f00000009c0))
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x800, 0x20000)
sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x3c, 0x35, 0x20, 0x70bd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x5b, @fd=r1}, @typed={0x8, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @generic="1c237e2f39af0cd36b43c82be9ce8ee10c726e37d9e094"]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  421.008162] 9pnet: Insufficient options for proto=fd
11:50:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

11:50:35 executing program 3 (fault-call:4 fault-nth:0):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  421.159835] FAULT_INJECTION: forcing a failure.
[  421.159835] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  421.171890] CPU: 0 PID: 20075 Comm: syz-executor3 Not tainted 4.18.0+ #205
[  421.178951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  421.188315] Call Trace:
[  421.190951]  dump_stack+0x1c9/0x2b4
[  421.194606]  ? dump_stack_print_info.cold.2+0x52/0x52
[  421.199839]  should_fail.cold.4+0xa/0x11
[  421.203931]  ? lock_downgrade+0x8f0/0x8f0
[  421.208124]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  421.213262]  ? kasan_check_read+0x11/0x20
[  421.217429]  ? rcu_is_watching+0x8c/0x150
[  421.221593]  ? radix_tree_lookup_slot+0xa1/0xf0
[  421.226780]  ? print_usage_bug+0xc0/0xc0
[  421.230870]  ? find_get_entry+0x2e4/0xc90
[  421.235104]  ? mark_held_locks+0x160/0x160
[  421.239359]  ? filemap_map_pages+0x1960/0x1960
[  421.243968]  ? __lock_acquire+0x7fc/0x5020
[  421.248216]  ? print_usage_bug+0xc0/0xc0
[  421.252290]  ? print_usage_bug+0xc0/0xc0
[  421.256363]  ? graph_lock+0x170/0x170
[  421.260182]  ? print_usage_bug+0xc0/0xc0
[  421.264255]  __alloc_pages_nodemask+0x365/0xd10
[  421.268955]  ? find_held_lock+0x36/0x1c0
[  421.273037]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  421.278067]  ? print_usage_bug+0xc0/0xc0
[  421.282135]  ? print_usage_bug+0xc0/0xc0
[  421.286203]  ? __lock_acquire+0x7fc/0x5020
[  421.290446]  ? print_usage_bug+0xc0/0xc0
[  421.294531]  ? __lock_acquire+0x7fc/0x5020
[  421.298778]  ? find_lock_entry+0x2e3/0x8c0
[  421.303025]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  421.308580]  alloc_pages_vma+0x3a0/0x540
[  421.312665]  do_huge_pmd_anonymous_page+0x555/0x1bd0
[  421.317778]  ? mark_held_locks+0x160/0x160
[  421.322032]  ? __thp_get_unmapped_area+0x180/0x180
[  421.326973]  ? print_usage_bug+0xc0/0xc0
[  421.331041]  ? kmem_cache_alloc+0x12e/0x710
[  421.335379]  ? __d_alloc+0xc8/0xd50
[  421.339011]  ? d_alloc+0x96/0x380
[  421.342470]  ? d_alloc_parallel+0x15a/0x1eb0
[  421.346870]  ? graph_lock+0x170/0x170
[  421.350657]  ? pud_val+0x88/0x100
[  421.354106]  ? pmd_val+0x100/0x100
[  421.357801]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  421.363342]  ? shmem_getpage_gfp+0x16e7/0x41e0
[  421.367949]  __handle_mm_fault+0x2caf/0x4350
[  421.372364]  ? vmf_insert_mixed_mkwrite+0xa0/0xa0
[  421.377194]  ? graph_lock+0x170/0x170
[  421.380993]  ? lock_downgrade+0x8f0/0x8f0
[  421.385129]  ? handle_mm_fault+0x8c4/0xc80
[  421.389362]  ? handle_mm_fault+0x8c4/0xc80
[  421.393596]  ? kasan_check_read+0x11/0x20
[  421.397731]  ? rcu_is_watching+0x8c/0x150
[  421.401863]  ? __do_page_fault+0x620/0xe50
[  421.406094]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  421.410769]  handle_mm_fault+0x53e/0xc80
[  421.414818]  ? __handle_mm_fault+0x4350/0x4350
[  421.419414]  ? find_vma+0x34/0x190
[  421.422964]  __do_page_fault+0x620/0xe50
[  421.427018]  ? mm_fault_error+0x380/0x380
[  421.431157]  do_page_fault+0xf6/0x7a4
[  421.434953]  ? vmalloc_sync_all+0x30/0x30
[  421.439089]  ? error_entry+0x76/0xd0
[  421.442792]  ? trace_hardirqs_off_caller+0xbb/0x2b0
[  421.447798]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  421.452626]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  421.457638]  ? find_held_lock+0x36/0x1c0
[  421.461703]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  421.466547]  page_fault+0x1e/0x30
[  421.470004] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  421.475877] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83
[  421.494791] RSP: 0018:ffff880193b4f4f0 EFLAGS: 00010206
[  421.500149] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000
[  421.507402] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0
[  421.514659] RBP: ffff880193b4f528 R08: 0000000000000000 R09: 0000000000000040
[  421.521912] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0
[  421.529180] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000
[  421.536470]  ? copyout+0xe4/0x100
[  421.539932]  copy_page_to_iter+0x3e7/0xf50
[  421.544164]  ? _copy_to_iter+0x1540/0x1540
[  421.548389]  ? mark_held_locks+0x160/0x160
[  421.552612]  ? print_usage_bug+0xc0/0xc0
[  421.556661]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  421.561340]  shmem_file_read_iter+0x570/0x1090
[  421.565954]  ? shmem_fallocate+0x12e0/0x12e0
[  421.570352]  ? graph_lock+0x170/0x170
[  421.574138]  ? kasan_check_write+0x14/0x20
[  421.578362]  ? __mutex_lock+0x6d0/0x1700
[  421.582410]  ? graph_lock+0x170/0x170
[  421.586196]  ? ashmem_read_iter+0x6e/0x250
[  421.590420]  ? find_held_lock+0x36/0x1c0
[  421.594492]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  421.600031]  ? fsnotify+0xbac/0x14e0
[  421.603742]  ? fsnotify_first_mark+0x350/0x350
[  421.608323]  ? __fsnotify_parent+0xcc/0x420
[  421.612645]  do_iter_readv_writev+0x77c/0xa80
[  421.617132]  ? vfs_dedupe_file_range+0x670/0x670
[  421.621883]  ? rw_verify_area+0x118/0x360
[  421.626038]  do_iter_read+0x26e/0x650
[  421.629837]  ? lock_downgrade+0x8f0/0x8f0
[  421.633979]  vfs_iter_read+0x77/0xb0
[  421.637683]  ashmem_read_iter+0x12d/0x250
[  421.641819]  __vfs_read+0x6ac/0x9b0
[  421.645437]  ? vfs_copy_file_range+0xba0/0xba0
[  421.650018]  ? fsnotify+0x14e0/0x14e0
[  421.653822]  ? rw_verify_area+0x118/0x360
[  421.657974]  vfs_read+0x17f/0x3c0
[  421.661418]  ksys_read+0x101/0x260
[  421.664972]  ? kernel_write+0x120/0x120
[  421.668954]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  421.674493]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  421.679601]  __x64_sys_read+0x73/0xb0
[  421.683404]  do_syscall_64+0x1b9/0x820
[  421.687306]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  421.692667]  ? syscall_return_slowpath+0x5e0/0x5e0
[  421.697582]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  421.702597]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  421.707604]  ? recalc_sigpending_tsk+0x180/0x180
[  421.712361]  ? kasan_check_write+0x14/0x20
[  421.716611]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  421.721448]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  421.726653] RIP: 0033:0x457089
[  421.729858] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  421.748782] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  421.756500] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089
[  421.763775] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004
[  421.771045] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  421.778321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  421.785585] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000000
11:50:35 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:35 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x0, 0x0)
write$FUSE_POLL(r2, &(0x7f0000000600)={0x18, 0x0, 0x2, {0x33}}, 0x18)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2000)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:35 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x8f3}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:35 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',uyextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0)

11:50:35 executing program 3 (fault-call:4 fault-nth:1):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  421.895952] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  421.921931] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  421.975995] FAULT_INJECTION: forcing a failure.
[  421.975995] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  421.987893] CPU: 0 PID: 20103 Comm: syz-executor3 Not tainted 4.18.0+ #205
[  421.994951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  422.004312] Call Trace:
[  422.006952]  dump_stack+0x1c9/0x2b4
[  422.010611]  ? dump_stack_print_info.cold.2+0x52/0x52
[  422.015843]  should_fail.cold.4+0xa/0x11
[  422.019954]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  422.025092]  ? graph_lock+0x170/0x170
[  422.028911]  ? kasan_check_read+0x11/0x20
[  422.033099]  ? try_charge+0x8fd/0x1680
[  422.037018]  ? graph_lock+0x170/0x170
[  422.040849]  ? find_held_lock+0x36/0x1c0
[  422.044957]  ? __lock_is_held+0xb5/0x140
[  422.049052]  ? check_same_owner+0x340/0x340
[  422.053390]  ? rcu_note_context_switch+0x680/0x680
[  422.053423]  __alloc_pages_nodemask+0x365/0xd10
[  422.053450]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  422.053473]  ? kasan_check_read+0x11/0x20
[  422.053491]  ? rcu_is_watching+0x8c/0x150
[  422.053514]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  422.081044]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  422.086596]  ? mem_cgroup_throttle_swaprate+0x2ef/0x888
[  422.091984]  ? swap_duplicate+0x80/0x80
[  422.095977]  ? __lock_acquire+0x7fc/0x5020
[  422.100262]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  422.105817]  alloc_pages_current+0x10c/0x210
[  422.110243]  pte_alloc_one+0x1b/0x1a0
[  422.114059]  do_huge_pmd_anonymous_page+0x7f7/0x1bd0
[  422.119174]  ? mark_held_locks+0x160/0x160
[  422.123429]  ? __thp_get_unmapped_area+0x180/0x180
[  422.128372]  ? print_usage_bug+0xc0/0xc0
[  422.132444]  ? kmem_cache_alloc+0x12e/0x710
[  422.136776]  ? __d_alloc+0xc8/0xd50
[  422.140415]  ? d_alloc+0x96/0x380
[  422.143876]  ? d_alloc_parallel+0x15a/0x1eb0
[  422.148303]  ? graph_lock+0x170/0x170
[  422.152116]  ? pud_val+0x88/0x100
[  422.155583]  ? pmd_val+0x100/0x100
[  422.159142]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  422.164690]  ? shmem_getpage_gfp+0x16e7/0x41e0
[  422.169291]  __handle_mm_fault+0x2caf/0x4350
11:50:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x36f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:36 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
socket$netlink(0x10, 0x3, 0x15)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x0, 0x505, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x800000000, 0x9f}}, 0xa0)
r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000009c0)={{{@in, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:36 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000003e0000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  422.173719]  ? vmf_insert_mixed_mkwrite+0xa0/0xa0
[  422.178574]  ? graph_lock+0x170/0x170
[  422.182405]  ? lock_downgrade+0x8f0/0x8f0
[  422.186564]  ? handle_mm_fault+0x8c4/0xc80
[  422.190811]  ? handle_mm_fault+0x8c4/0xc80
[  422.195062]  ? kasan_check_read+0x11/0x20
[  422.199225]  ? rcu_is_watching+0x8c/0x150
[  422.203383]  ? __do_page_fault+0x620/0xe50
[  422.207632]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  422.212324]  handle_mm_fault+0x53e/0xc80
[  422.216399]  ? __handle_mm_fault+0x4350/0x4350
[  422.220994]  ? find_vma+0x34/0x190
11:50:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0)

11:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  422.225039]  __do_page_fault+0x620/0xe50
[  422.229123]  ? mm_fault_error+0x380/0x380
[  422.233290]  do_page_fault+0xf6/0x7a4
[  422.237101]  ? vmalloc_sync_all+0x30/0x30
[  422.241256]  ? error_entry+0x76/0xd0
[  422.244988]  ? trace_hardirqs_off_caller+0xbb/0x2b0
[  422.250023]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  422.254879]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  422.259911]  ? find_held_lock+0x36/0x1c0
[  422.264014]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  422.268871]  page_fault+0x1e/0x30
[  422.272341] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  422.273016] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  422.278230] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83
[  422.278240] RSP: 0018:ffff88016288f4f0 EFLAGS: 00010206
[  422.278254] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000
[  422.278264] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0
[  422.278273] RBP: ffff88016288f528 R08: 0000000000000000 R09: 0000000000000040
[  422.278284] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0
[  422.278294] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000
[  422.278324]  ? copyout+0xe4/0x100
[  422.278348]  copy_page_to_iter+0x3e7/0xf50
[  422.347324]  ? _copy_to_iter+0x1540/0x1540
[  422.347344]  ? mark_held_locks+0x160/0x160
[  422.347360]  ? print_usage_bug+0xc0/0xc0
[  422.347377]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  422.347403]  shmem_file_read_iter+0x570/0x1090
11:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfffffffffffff000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  422.347430]  ? shmem_fallocate+0x12e0/0x12e0
[  422.381246]  ? graph_lock+0x170/0x170
[  422.385058]  ? kasan_check_write+0x14/0x20
[  422.389312]  ? __mutex_lock+0x6d0/0x1700
[  422.393389]  ? graph_lock+0x170/0x170
[  422.397204]  ? ashmem_read_iter+0x6e/0x250
[  422.401457]  ? find_held_lock+0x36/0x1c0
[  422.405545]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  422.411099]  ? fsnotify+0xbac/0x14e0
[  422.414836]  ? fsnotify_first_mark+0x350/0x350
[  422.419434]  ? __fsnotify_parent+0xcc/0x420
[  422.423775]  do_iter_readv_writev+0x77c/0xa80
[  422.428289]  ? vfs_dedupe_file_range+0x670/0x670
[  422.433069]  ? rw_verify_area+0x118/0x360
[  422.437269]  do_iter_read+0x26e/0x650
[  422.441089]  ? lock_downgrade+0x8f0/0x8f0
[  422.445257]  vfs_iter_read+0x77/0xb0
[  422.448993]  ashmem_read_iter+0x12d/0x250
[  422.453155]  __vfs_read+0x6ac/0x9b0
[  422.456798]  ? vfs_copy_file_range+0xba0/0xba0
[  422.461394]  ? fsnotify+0x14e0/0x14e0
[  422.465223]  ? rw_verify_area+0x118/0x360
[  422.465245]  vfs_read+0x17f/0x3c0
[  422.465267]  ksys_read+0x101/0x260
[  422.465286]  ? kernel_write+0x120/0x120
[  422.465303]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  422.465332]  __x64_sys_read+0x73/0xb0
[  422.489315]  do_syscall_64+0x1b9/0x820
[  422.493221]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  422.498601]  ? syscall_return_slowpath+0x5e0/0x5e0
[  422.503545]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  422.508604]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  422.513633]  ? recalc_sigpending_tsk+0x180/0x180
[  422.518403]  ? kasan_check_write+0x14/0x20
[  422.522666]  ? trace_hardirqs_off_thunk+0x1a/0x1c
11:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  422.527530]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  422.532729] RIP: 0033:0x457089
[  422.535957] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  422.554868] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  422.562591] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089
[  422.569867] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004
11:50:36 executing program 3 (fault-call:4 fault-nth:2):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  422.577141] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  422.584420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  422.591696] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000001
[  422.669439] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  422.705027] FAULT_INJECTION: forcing a failure.
[  422.705027] name failslab, interval 1, probability 0, space 0, times 0
[  422.716364] CPU: 0 PID: 20153 Comm: syz-executor3 Not tainted 4.18.0+ #205
[  422.723388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  422.732742] Call Trace:
[  422.735343]  dump_stack+0x1c9/0x2b4
[  422.738990]  ? dump_stack_print_info.cold.2+0x52/0x52
[  422.744199]  should_fail.cold.4+0xa/0x11
[  422.748275]  ? graph_lock+0x170/0x170
[  422.752094]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  422.757221]  ? graph_lock+0x170/0x170
[  422.761032]  ? find_held_lock+0x36/0x1c0
[  422.765106]  ? __lock_is_held+0xb5/0x140
[  422.769187]  ? check_same_owner+0x340/0x340
[  422.773522]  ? rcu_note_context_switch+0x680/0x680
[  422.778469]  __should_failslab+0x124/0x180
[  422.782713]  should_failslab+0x9/0x14
[  422.786519]  kmem_cache_alloc+0x29c/0x710
[  422.790680]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  422.796249]  ptlock_alloc+0x20/0x80
[  422.799887]  pte_alloc_one+0x6b/0x1a0
[  422.803710]  do_huge_pmd_anonymous_page+0x7f7/0x1bd0
[  422.808816]  ? mark_held_locks+0x160/0x160
[  422.813070]  ? __thp_get_unmapped_area+0x180/0x180
[  422.818006]  ? print_usage_bug+0xc0/0xc0
[  422.822074]  ? set_next_entity+0x2f0/0xa80
[  422.826310]  ? mark_held_locks+0x160/0x160
[  422.830553]  ? print_usage_bug+0xc0/0xc0
[  422.834626]  ? graph_lock+0x170/0x170
[  422.838432]  ? pud_val+0x88/0x100
[  422.841888]  ? pmd_val+0x100/0x100
[  422.845447]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  422.850993]  ? shmem_getpage_gfp+0x16e7/0x41e0
[  422.855590]  __handle_mm_fault+0x2caf/0x4350
[  422.860012]  ? vmf_insert_mixed_mkwrite+0xa0/0xa0
[  422.864860]  ? graph_lock+0x170/0x170
[  422.868682]  ? lock_downgrade+0x8f0/0x8f0
[  422.872853]  ? handle_mm_fault+0x8c4/0xc80
[  422.877096]  ? handle_mm_fault+0x8c4/0xc80
[  422.881341]  ? kasan_check_read+0x11/0x20
[  422.885496]  ? rcu_is_watching+0x8c/0x150
[  422.889649]  ? __do_page_fault+0x620/0xe50
[  422.893896]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  422.898586]  handle_mm_fault+0x53e/0xc80
[  422.902654]  ? __handle_mm_fault+0x4350/0x4350
[  422.907246]  ? find_vma+0x34/0x190
[  422.910793]  __do_page_fault+0x620/0xe50
[  422.914865]  ? mm_fault_error+0x380/0x380
[  422.919026]  do_page_fault+0xf6/0x7a4
[  422.922832]  ? vmalloc_sync_all+0x30/0x30
[  422.926983]  ? error_entry+0x76/0xd0
[  422.930698]  ? trace_hardirqs_off_caller+0xbb/0x2b0
[  422.935717]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  422.940564]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  422.945584]  ? find_held_lock+0x36/0x1c0
[  422.949654]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  422.954504]  page_fault+0x1e/0x30
[  422.957970] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  422.963862] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83
[  422.982760] RSP: 0018:ffff880162b7f4f0 EFLAGS: 00010206
[  422.988125] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000001000
[  422.995395] RDX: 0000000000001000 RSI: ffff880008cfe000 RDI: 00000000200000c0
[  423.002664] RBP: ffff880162b7f528 R08: 0000000000000000 R09: 0000000000000040
[  423.009938] R10: ffffed000119fdff R11: ffff880008cfefff R12: 00000000200010c0
[  423.017215] R13: 00000000200000c0 R14: ffff880008cfe000 R15: 00007ffffffff000
[  423.024504]  ? copyout+0xe4/0x100
[  423.027969]  copy_page_to_iter+0x3e7/0xf50
[  423.032210]  ? _copy_to_iter+0x1540/0x1540
[  423.036453]  ? mark_held_locks+0x160/0x160
[  423.040708]  ? print_usage_bug+0xc0/0xc0
[  423.044788]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  423.049469]  shmem_file_read_iter+0x570/0x1090
[  423.054066]  ? shmem_fallocate+0x12e0/0x12e0
[  423.058481]  ? graph_lock+0x170/0x170
[  423.062282]  ? kasan_check_write+0x14/0x20
[  423.066523]  ? __mutex_lock+0x6d0/0x1700
[  423.070587]  ? graph_lock+0x170/0x170
[  423.074391]  ? ashmem_read_iter+0x6e/0x250
[  423.078637]  ? find_held_lock+0x36/0x1c0
[  423.082733]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  423.088273]  ? fsnotify+0xbac/0x14e0
[  423.092003]  ? fsnotify_first_mark+0x350/0x350
[  423.096587]  ? __fsnotify_parent+0xcc/0x420
[  423.100952]  do_iter_readv_writev+0x77c/0xa80
[  423.105467]  ? vfs_dedupe_file_range+0x670/0x670
[  423.110231]  ? rw_verify_area+0x118/0x360
[  423.114420]  do_iter_read+0x26e/0x650
[  423.118224]  ? lock_downgrade+0x8f0/0x8f0
[  423.122382]  vfs_iter_read+0x77/0xb0
[  423.126104]  ashmem_read_iter+0x12d/0x250
[  423.130261]  __vfs_read+0x6ac/0x9b0
[  423.133901]  ? vfs_copy_file_range+0xba0/0xba0
[  423.138496]  ? fsnotify+0x14e0/0x14e0
[  423.142315]  ? rw_verify_area+0x118/0x360
[  423.146478]  vfs_read+0x17f/0x3c0
[  423.149969]  ksys_read+0x101/0x260
[  423.153517]  ? kernel_write+0x120/0x120
[  423.157496]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  423.163035]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  423.168150]  __x64_sys_read+0x73/0xb0
[  423.171969]  do_syscall_64+0x1b9/0x820
[  423.175859]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  423.181224]  ? syscall_return_slowpath+0x5e0/0x5e0
[  423.186154]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  423.191174]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  423.196191]  ? recalc_sigpending_tsk+0x180/0x180
[  423.200965]  ? kasan_check_write+0x14/0x20
[  423.205208]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  423.210060]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  423.215253] RIP: 0033:0x457089
[  423.218452] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  423.237816] RSP: 002b:00007faeb9089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  423.245530] RAX: ffffffffffffffda RBX: 00007faeb908a6d4 RCX: 0000000000457089
[  423.252799] RDX: 00000000200000c8 RSI: 00000000200000c0 RDI: 0000000000000004
[  423.260069] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  423.267336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  423.274602] R13: 00000000004d36c8 R14: 00000000004c8446 R15: 0000000000000002
11:50:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="6578743403", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf432}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:37 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0)

11:50:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffff7f00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:37 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000600)=0x401, &(0x7f0000000640)=0x2)
r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x2000)
write$eventfd(r3, &(0x7f0000000080)=0x53, 0x8)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:37 executing program 3 (fault-call:4 fault-nth:3):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:50:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:37 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000020000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x5a}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="fb4f40c25a57b4c5c159be596df263154b90460c8c366f51a0e224da37def2c9ab7c94f0f606f675c239584bb7f5260b357ce2ec451fba4fe96edf639cae73a1ea8282f462da0e2375ee62a1b5408043b1448e1ebaed1cce704a6b2b08b2bd14a73576cd81cb773ac1ce5d2933daf16f27cd1744e03f6e1d395018d0e6422ed1e672ce7d609b86ec2f52af86c82b4a45607e2fad70640cd60b08bff275c5930472b6b7e86223dd3644d5c646efb6102b71b7fba3", @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYPTR, @ANYPTR64], @ANYRES64=r0, @ANYRES16=0x0]], 0xd3)
write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], 0x12)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000740)={'filter\x00', 0x0, 0x3, 0xd4, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000600)=""/212}, &(0x7f00000009c0)=0x78)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000004c0)=0x7, 0x8)
tee(r1, r0, 0x7fff, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x401)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
getsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000500)=""/13, &(0x7f0000000bc0)=0xd)

[  423.440891] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  423.460764] print_req_error: I/O error, dev loop0, sector 0
[  423.468639] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:37 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  423.532086] nla_parse: 14 callbacks suppressed
[  423.532097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  423.561075] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:37 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="625231bcd834b22fef7aaf5dbebbc6ffbb77896969c6f060baa4d0dbf24d51d6f0ef4b270555b6b315e2b46f7443056bd70586c8fd12a43b6305aa580e394acbab1321ff359b1128dba0643554d9d3c62d81ec1f0c1d875adc059eb244d78e03aef7fd08003069abd61ab6f199b23d4d60469096d4215299cc2bb7e3611cb34602d6017a5e29"])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00')
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000009c0)={<r3=>0x0, 0x2, 0x80000000, 0x1000, 0x0, 0x8, 0x10000, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x1d}, 0x3}}, 0xdbd, 0x6, 0x0, 0x0, 0xc4e}}, &(0x7f0000000080)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x101, 0x8000, 0x3, 0x100000001, r3}, &(0x7f00000004c0)=0x10)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:37 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0)

11:50:37 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x20}, 0x0, r2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  423.645729] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  423.703330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  423.757311] 9pnet: Insufficient options for proto=fd
[  423.778760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:37 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0)

[  423.835015] 9pnet: Insufficient options for proto=fd
11:50:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:37 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in=@rand_addr}}, {{@in6=@mcast2}}}, &(0x7f0000000780)=0xe8)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x800)
write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x100000001, 0x9}}, 0x28)

[  423.863033] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  423.961459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  424.000004] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:38 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf8f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:38 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

11:50:38 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x101, 0x2})
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x4000)

11:50:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:38 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000080)='9p\x00', 0x4, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x2, {0xa1, 0x4, 0x8}}, 0x14)

11:50:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x3ff40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  424.257450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x40000188)

11:50:38 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

11:50:38 executing program 5:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
statx(r0, &(0x7f0000000a40)='./file1\x00', 0x2000, 0x400, &(0x7f0000000a80))
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000b80)='./file0/file1\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r0, &(0x7f00000002c0)=ANY=[], 0x0)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r2, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000000600)=""/80, &(0x7f0000000680)=0x50)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000340)=0x4)
mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x80000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'ppp0@}lo'}}, {@afid={'afid', 0x3d, 0x1}}, {@cachetag={'cachetag', 0x3d, 'rfdno'}}]}})
write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r2, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={<r4=>0xffffffffffffffff}, 0x13f, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000c40)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r4, r0}}, 0x18)
write$P9_RGETATTR(r2, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000006c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
symlink(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='./file1\x00')

11:50:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4`', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:38 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x81, 0x6, 0xfffffffffffffffd, 0x8, 0x9})
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  424.414205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x46f40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:38 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

11:50:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x9000)

[  424.572705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:38 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xbf3000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:38 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x64)
mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x104)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:38 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:38 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

11:50:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x42090000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:38 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0xc328)

11:50:38 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0]], 0xfffffffffffffe79)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  424.836816] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  424.854088] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  424.920230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:38 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

11:50:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:39 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_ATTR(r2, &(0x7f00000009c0)={0x78, 0x0, 0x5, {0x0, 0x2, 0x0, {0x0, 0x7, 0x40, 0x4, 0xffffffffffffff01, 0x8, 0x6, 0xad92, 0x0, 0x2, 0x8, r3, r4, 0x3f, 0xfff}}}, 0x78)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:39 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0xfffffe66, 0x4d, 0xffffffffffffffff}, 0xff1e)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
connect$unix(r0, &(0x7f0000000680)=@file={0x0, './file0/file0\x00'}, 0x6e)
write$P9_RREADDIR(r1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], 0xfffffffffffffea9)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
uselib(&(0x7f0000000340)='./file0\x00')
write$P9_RSTAT(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e3448a3661fc11b6f050072666475dc7de368373349f1b56e6f110076626f786e65743174727573746dd7fe889572ffcc3cc2bf373ae309dc6acdc95713808f671556b82b40f9afa5f40aa57aba294a1841daa83a372c38e3faa1d6961e52ccf1c34e04a552371719fa846cdbaaaf88441cfaf1d61c58925f2f8cd8ecf1ef164e1aeaf75761c835e07551a21b38bd32b5731b5926e956ca4cf7f2c28fed0c16018058f3dc11b990e45044bbf0c5aa640ac5efe74358cee139b03642fe9ce745448f9557cd19dc9e719d0101000098aa0e68065d4107141edcf28d18299f1d5be1d9193094f5717bb7966888f20dc2a2890857e5e17d817e12191f45796739ad6d53cdf275e09a17025013aca5b91bfda3988649e33ca999228cab6220ed91ac73add1cabc919d6398edcbda73cee1afd5badf297f53a00174e2495f0c8a32626fb558fcd4baf4fa8d19d9076c7aaec13fbef7c89b696b3e72ffcbd14763b46e92a3d8c967eb1fb148868355f9b5f9689c0442c4a0d3d10668f08c6793d0dcf0aa443b23a200000000000000f1137d25226a96a5398e526a96f00eda9edda2c397624763e41ef22c9cfa0cf22ba7117adb4f87075aa170a380b1bc3812072b53284f043a0641e07aeb226fe868420dc1c7bb3bddcd29d2f8534c19c2d1577820d3e0dc27d09b636586f944475b14541881ee33bcf080a3a91c14f974e6105d82afaa3afadd468dc0271cb1dbcda9a30d2f3682b2cabc"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1ff, 0x101000)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0x750, 0x7, 0x5})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:39 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x3000)

[  425.057679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:39 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

11:50:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xffffffff00000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  425.181272] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0xa000)

[  425.257646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  425.284940] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:39 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x2, 0x7})
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x41f4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:39 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0)

11:50:39 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x2000)

11:50:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf0f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  425.474895] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  425.510700] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x5000)

11:50:39 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0)

[  425.592022] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x88, 0x400000)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000600)={0x7b, 0x0, [0x0, 0x0, 0x4, 0x6]})
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="5600ea4c6dba0000004f00000000e2ffffff0000bfb95f489b411aa7b886a0ca650000000000000000000000000000000000000000000000000000000000000100280500726609000000000000006e6f110076626f786e657431747275737465646c6f8c37e8297c5b67c2a0b58a966ecf37561ccffe79a79544364afb314b1bb13142487f75f60a5afe"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xfe30, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1dab2c36000000", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7fff, 0x6}, 0x4}, 0x20, 0x1, 0x0)
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  425.681713] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  425.808297] 9pnet: Insufficient options for proto=fd
[  425.875472] 9pnet: Insufficient options for proto=fd
[  425.901501] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:39 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000600)={0x2, 0x1f, 0x10001, 0x1, 0x9, 0x6})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:39 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0)

11:50:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x11}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x7000)

[  426.013795] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:40 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cff03000074656e642cb6374fdf00"])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)

11:50:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0xc000)

11:50:40 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffffffffffc}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="560000007d010000004f00000000000000000000000000000000000000000000000000000000000000000000000000000000f2002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f60ae780b26bee4d2790de02957c240aca012f7d411d73c6efd83cd73ddff0edf3484942bc85097723abbb76390607378292d3346c0ed461e8473adb2fa57"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x421c0, 0x0)
sendto$unix(r2, &(0x7f0000000a40)="e43fcae46a4ba669d366c7b64a7bbef80ab9d7c5628dab19cfa6ed8a5f1bbc4ca46c8aea8fd7f9a487372c92f25e65aa03113975a1f794c1860fa1129d8609b86489c36b8fd3b72c78be8539cddb6b4596388e6794473efb1653e0b384a6357429df4bcac43630d046a256a963b4b65d54a2163eacbe731a189cf4461cbb3d44c9c9126d3e3b669b241141eae32a1c0dc254052337590000", 0x98, 0x24000000, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x130)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf9f20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf44a}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  426.240446] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

11:50:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0xb000)

[  426.335196] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x200000, 0x0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x111000, 0x0)
ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080))
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000600)={<r4=>0x0, 0x409}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000680)={r4, 0xffffffffffffff5b, 0x8}, &(0x7f00000006c0)=0x8)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:40 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
mount(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='nilfs2\x00', 0x880000, 0x0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000000000000000000000001002805007266646e08b3007266646e6f110076626f786e657431747275737465646c6f"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x2)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  426.413046] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1a00}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0)

11:50:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x6000)

[  426.642612] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  426.716779] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="657874347f", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x800000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0)

11:50:40 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x6, 0x0, 0x5})
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:50:40 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000340)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x60}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="6578743497", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  426.882218] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  426.896717] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:40 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80400)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={<r3=>0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0xb4a7, 0x100000001, 0x0, 0x6}, &(0x7f0000000080)=0x98)
chmod(&(0x7f00000006c0)='./file0/file1\x00', 0x40)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r3, 0x38, 0x3, [0x1, 0x8001, 0x4]}, 0xe)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:41 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530bacb470188164913bf0a86bae0fd08492f16b10afcc7095506071c65279bb7c98be9b2bdb8cc384c875e06bf50688f2f1110db57793dedee04c4f0b3cbfb8eb7d5ed0f9386374c434406cfe0b35e44c82fe65678d8b352300483c05728a412632ad0da199b8516d2bc95762c8685bd3d43fb92b553266027e33b2900829c3856faae5a2bb46f1aa84970eafd91885a5c28b9e9c513897e701072bddc388ae56f1dc722db6a73"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0)

11:50:41 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={<r3=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000680)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18)
write$P9_RUNLINKAT(r1, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x31, 0xfe8})
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

11:50:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x300}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3002000000000000}, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf306}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  427.232613] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  427.360758] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:41 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
dup(r0)

11:50:41 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000000000000000000000000000000400080000000000000001002805007266646e6f05007266646e6f110076626f786e657431747275737465646c6f"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0)

11:50:41 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x9}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4c000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000001)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
r2 = getpgrp(0x0)
write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x8, {{0x2, 0x401, 0x3, r2}}}, 0x28)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)
sched_yield()

11:50:41 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
r2 = geteuid()
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xffffffffffffff16, 0x19, 0x1, {0x0, {}, 0x0, r2}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x480)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000680), &(0x7f00000006c0)=0xb)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x1)
getpeername(r4, &(0x7f0000000600)=@rc, &(0x7f0000000080)=0x80)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  427.655318] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

11:50:41 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a0000002901000000000000000000000027c3c59896f3caaf8062769dfcfa9c0000000000000000000000f8ffffff2f66696c6530"], 0x2a)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x6c082, 0x0)
ioctl$RTC_WIE_OFF(r2, 0x7010)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r3, 0x4000008912, &(0x7f0000000600)="295ee1311f16f677671070")
futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000080), 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x401}}, 0xa0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000780)={0x100, 0xb95, 0x837, 0x6, 0x2})
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000900)=<r4=>0x0)
perf_event_open(&(0x7f0000000640)={0x7, 0x70, 0x0, 0x3a9a23f5, 0x5, 0x2, 0x0, 0x3, 0x0, 0x8, 0x2, 0x0, 0x6, 0x0, 0x5, 0x3, 0x0, 0xffffffffffffcb7f, 0x1ff800000000, 0x6, 0x401, 0x0, 0x80000000, 0x51, 0x10000, 0x2, 0x9, 0x4, 0x4, 0x6, 0xac9, 0x1000, 0x5, 0x1f, 0x6, 0x607c, 0x5, 0x5, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x2}, 0x8000, 0x4, 0xbda, 0x4, 0x7fff, 0xa8e, 0x2}, r4, 0xc, r2, 0x9)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x1fffe00000}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
sched_setattr(r4, &(0x7f0000000400)={0x0, 0x0, 0x1, 0xc4, 0x8, 0x0, 0x80, 0x5}, 0x0)

[  427.733592] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e000000000000}, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xfcf2}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  427.950147] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:41 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
socket$inet_smc(0x2b, 0x1, 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x1)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  428.016628] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:42 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)="65787434ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:42 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80000)
r2 = gettid()
write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0x0, 0x6, {{0x7fffffff, 0xefe, 0x3, r2}}}, 0x28)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x2, 0x7f, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d)
fsync(r0)
r4 = dup(r0)
read$eventfd(r4, &(0x7f00000000c0), 0x200000c8)

11:50:42 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657801656e060000b367402dda9f45d91bc4b68a88fc0d85f56dc45b99262c4b10545b2322a4977620c5cf999c1fbdef210e76cb20c180b737d8cced82f0e1250294c0ad4009206c8622cdd6200fd28ba4ca6a7e3492b25f7b16c2f4256759f3056ac9c1645c9ab5363a8a97fc7b4032de7707fcb61ade55dad1bd16326f46cfdbce3bbf2a2e3ebc05a1cdbebf1c0d508e6e3d1c975fe1a7759db4b9ab79e0445b1ed1f094502522a2b576a397525872c7abb0c6254a5682444149d84785fa41bdd0b68cf4ebbc3b5492d8bb447daaeec01cb9275cd018385e599a2a5f"])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000340)=0x8000)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r3 = socket(0x5, 0x80800, 0x8)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x3ff, 0x4)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xe4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:42 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0)

11:50:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:42 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x8)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x36, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
pipe2(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000006c0)={<r3=>0x0, 0x0, 0x3ff, 0x81, 0x1}, &(0x7f0000000780)=0x14)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000b80)={r3}, &(0x7f0000000bc0)=0x8)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000))

11:50:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf2fe}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  428.294486] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  428.313215] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:42 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000000000000}, 0x0)

[  428.396665] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:42 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x2000, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="732f879fedb4e2c9e4fbc4b4a05b9dd1", 0x10)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x800, {{0xa, 0x4e21, 0x200, @loopback, 0x8}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x3ff, @empty, 0x7}}, {{0xa, 0x4e20, 0x401, @mcast2, 0x6}}, {{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0xe}, 0x9}}]}, 0x210)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r2 = dup(r1)
read$eventfd(r2, &(0x7f0000000080), 0x8)

11:50:42 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20840, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000340)=0x4)

11:50:42 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x4)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b00)="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", 0x1000, 0xfffffffffffffffd)
r3 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001b00)="98681357a7835908150277bc6c7201c22a1ed67074e5cbfa6fcf931746907d2766d6c0e58d8e25333069227b2406824298e54516917184d4c64e2d0e1707237b82a32d418a17617cb8bc7129fcfdc472205f9711a11b012adc7424bcc7e5614dd7e7a0dd3a6ac3e8399a1b6e5c3d095a54d5ee6c9a3620131071a93f14939163de9d503ebd55d41f1d1467678322f4c205c178a96c3cbb4abf1dfb5375ef7f3c4c37355f6fc8d0a5cb9e09d85909936b71d7492d4e211906694a0e36fbb2a2c0f5924db1f996acb01e21c6998235cc3258e53b67f9eeb1c728910b07", 0xdc, 0xfffffffffffffffd)
keyctl$instantiate(0xc, r2, &(0x7f0000000600)="63938e0d985c79ab28ff1d0fce959e127ec91fbcc555737c086a58dd01d00d898e856d9c4ca4199e8df8f3a0a770160976f9be3a74c61e88491eb95877e4852afca7c36d0a2504031a3f70109e72f10bea048c46e805386ec96799acf9506b5050105d5c0bc059acf6a0a0e8f5526202b352a3430e6c612e9bc6131820a98f4803aff483792a629c21fd6040e71722887b69d2780e753566c12a87", 0x9b, r3)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000780)='./file0/file0\x00')

11:50:42 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0)

[  428.541159] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x4bf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:42 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)="65787434fe", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  428.644903] nla_parse: 20 callbacks suppressed
[  428.644913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:42 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)=':keyringvboxnet0#nodevposix_acl_accessvboxnet0*.vboxnet1&{\x00')

[  428.778211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  428.920582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:43 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:43 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd<rfdoo=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2aeaff00290100000000000000000000edffffff000000000000000000000000f9ff00002f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0)

11:50:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x1900000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:43 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000009c0))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:43 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x7ff, 0x401, 0x6, 0x9e07, 0x0, 0x80000001, 0x3, 0x600, 0x7, 0x9b32, 0x3, 0xfffffffffffffff9, 0x4}, {0x5, 0x7, 0xffffffffffff0000, 0x5, 0x4, 0xff, 0x2, 0x8, 0x47b, 0xda, 0x8, 0x0, 0x1e7c800000}, {0x5, 0x1000, 0x7ff, 0x8001, 0x6, 0x20, 0x7fff, 0xfff, 0x12197599, 0x8000, 0x9fb, 0xffffffffffffff35, 0x9}], 0x1})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r2 = dup(r0)
read$eventfd(r2, &(0x7f00000000c0), 0x200000c8)

11:50:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x12}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x30020000}, 0x0)

[  429.103731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  429.114782] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  429.124787] 9pnet: Could not find request transport: fd<rfdoo=0x0000000000000003
11:50:43 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000009c0)='./file0\x00')

11:50:43 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  429.158636] 9pnet: Could not find request transport: fd<rfdoo=0x0000000000000005
[  429.195710] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

[  429.266331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:43 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0)
getpeername$unix(r2, &(0x7f0000000600), &(0x7f0000000080)=0x6e)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dbbbd27c19ea5de040ebf94941ac0676ae98e9bf25c44ea267163747aa9c0be8acde6d84e9ea45e7f9486ea59b9b7c18a4995ed84560ac4fcff07ffed7a1c81ec34538f6a0ff33dfeb4e910ac6d18eaa5e8d1109e744b0a6020fd902e325e8739fdf232027e18cf186c12bb7fc6", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

11:50:43 executing program 5:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x363, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  429.356849] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:43 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = dup(r0)
read$eventfd(r1, &(0x7f00000000c0), 0x200000c8)

[  429.402698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  429.431411] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  429.520122] 9pnet: Insufficient options for proto=fd
[  429.556637] 9pnet: Insufficient options for proto=fd
11:50:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0xf3f2000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3002}, 0x0)

11:50:43 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4#', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time'}}]})

11:50:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:43 executing program 3:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc328)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xc3d5, 0x200000)
sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x4, 0x2, 0x6138}, 0x2, 0x1, 0x0, 0x0, "492e8647f40d5f61"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r2 = dup(r0)
read$eventfd(r2, &(0x7f00000000c0), 0x200000c8)

11:50:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x7400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

11:50:43 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000006c0), 0x10)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000080000000000000000000007002e2f66696c6530"], 0x2a)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
r4 = getgid()
write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x20, {0x20, 0x3, 0x7}, 0x21, r3, r4, 0x80, 0x4, 0x3, 0x401000000000000, 0x311, 0x80000001, 0x4, 0x3, 0x81, 0x6, 0x5, 0x6, 0x33c, 0x20, 0x9}}, 0xa0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00'}, &(0x7f0000000340)=0x44)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="560000007d010000004f0000000000000000000000000000000000008000000000000200000000000000000000000000000001002805007266646e6f05007266646e6f110076626f786e6574317472ee02fa1a757374"], 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

[  429.686429] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  429.700914] EXT4-fs (loop0): bad geometry: block count 4 exceeds size of device (2 blocks)
[  429.764645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
[  429.796596] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

[  429.817913] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  429.844155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
11:50:43 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x268000, 0x0)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:43 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2a7}}, {@barrier_val={'barrier'}}]})

11:50:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x26, 0x311, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

[  429.930719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'.
11:50:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x600000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0)

[  429.997144] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
11:50:44 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x8000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="050000006eff0f", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16)
write$P9_RSTAT(r1, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb)
write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43)
write$P9_RGETATTR(r1, &(0x7f0000000900)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

11:50:44 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x24d0, 0x60700)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xc328)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x800, @loopback, 0x3ff}}}, &(0x7f0000000200)=0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0x124, @remote, 0x8}}}, 0x84)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r3 = dup(r1)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdff)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[  430.055479] EXT4-fs (loop4): bad geometry: block count 4 exceeds size of device (2 blocks)
[  430.080070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
[  575.848509] INFO: task syz-executor5:20964 blocked for more than 140 seconds.
[  575.855883]       Not tainted 4.18.0+ #205
[  575.860158] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  575.868139] syz-executor5   D25408 20964   4427 0x00000004
[  575.873806] Call Trace:
[  575.876419]  __schedule+0x87c/0x1df0
[  575.880175]  ? __sched_text_start+0x8/0x8
[  575.884360]  ? __follow_mount_rcu.isra.35.part.36+0x38e/0x890
[  575.890297]  ? lockdep_hardirqs_on+0x421/0x5c0
[  575.894899]  ? graph_lock+0x170/0x170
[  575.898736]  ? print_usage_bug+0xc0/0xc0
[  575.902814]  ? d_alloc_cursor+0xe0/0xe0
[  575.906831]  schedule+0xfb/0x450
[  575.910217]  ? __schedule+0x1df0/0x1df0
[  575.914220]  ? lockdep_hardirqs_on+0x421/0x5c0
[  575.918818]  ? trace_hardirqs_on+0xbd/0x2c0
[  575.923168]  ? kasan_check_read+0x11/0x20
[  575.927333]  ? __rwsem_down_write_failed_common+0x62b/0x1650
[  575.933171]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  575.938535]  ? kasan_check_write+0x14/0x20
[  575.942822]  ? do_raw_spin_lock+0xc1/0x200
[  575.947089]  __rwsem_down_write_failed_common+0x98b/0x1650
[  575.952762]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  575.958323]  ? rwsem_spin_on_owner+0xa40/0xa40
[  575.962936]  ? __lock_acquire+0x7fc/0x5020
[  575.967189]  ? mark_held_locks+0x160/0x160
[  575.971451]  ? mark_held_locks+0x160/0x160
[  575.975702]  ? find_held_lock+0x36/0x1c0
[  575.979806]  ? find_held_lock+0x36/0x1c0
[  575.983890]  ? lock_downgrade+0x8f0/0x8f0
[  575.988075]  ? graph_lock+0x170/0x170
[  575.991890]  ? dput.part.26+0x276/0x7a0
[  575.995892]  ? shrink_dcache_sb+0x350/0x350
[  576.000232]  ? lockref_get_not_dead+0x70/0x90
[  576.004760]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  576.009794]  ? lock_acquire+0x1e4/0x4f0
[  576.013797]  ? lock_rename+0x236/0x290
[  576.017700]  ? lock_release+0x9f0/0x9f0
[  576.021700]  ? check_same_owner+0x340/0x340
[  576.026038]  rwsem_down_write_failed+0xe/0x10
[  576.030568]  ? rwsem_down_write_failed+0xe/0x10
[  576.035255]  call_rwsem_down_write_failed+0x17/0x30
[  576.040326]  down_write_nested+0xae/0x130
[  576.044498]  ? lock_rename+0x236/0x290
[  576.048404]  ? _down_write_nest_lock+0x130/0x130
[  576.053189]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  576.058750]  ? __sb_start_write+0x17f/0x300
[  576.063104]  lock_rename+0x236/0x290
[  576.066840]  do_renameat2+0x69e/0x1120
[  576.070761]  ? user_path_create+0x40/0x40
[  576.074958]  ? fsnotify_first_mark+0x350/0x350
[  576.079580]  ? __fsnotify_parent+0xcc/0x420
[  576.083944]  ? do_syscall_64+0x9a/0x820
[  576.088010]  ? do_syscall_64+0x9a/0x820
[  576.092036]  ? trace_hardirqs_on+0xbd/0x2c0
[  576.096409]  ? __ia32_sys_read+0xb0/0xb0
[  576.100497]  ? __ia32_sys_mknod+0xb0/0xb0
[  576.104680]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  576.110092]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  576.115234]  ? ksys_ioctl+0x81/0xd0
[  576.118890]  __x64_sys_rename+0x5e/0x80
[  576.122899]  do_syscall_64+0x1b9/0x820
[  576.126813]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  576.132313]  ? syscall_return_slowpath+0x5e0/0x5e0
[  576.137293]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  576.142359]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  576.147404]  ? recalc_sigpending_tsk+0x180/0x180
[  576.152255]  ? kasan_check_write+0x14/0x20
[  576.156583]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  576.161465]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  576.166676] RIP: 0033:0x457089
[  576.169956] Code: 08 e8 3b a9 fb ff 48 8b 44 24 20 48 8b 4c 24 18 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 <48> 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 8b 4c 24 48 48 8b
[  576.189001] RSP: 002b:00007ff597081c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  576.196755] RAX: ffffffffffffffda RBX: 00007ff5970826d4 RCX: 0000000000457089
[  576.204157] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040
[  576.211465] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000
[  576.218764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  576.226092] R13: 00000000004d3890 R14: 00000000004c851a R15: 0000000000000002
[  576.233958] 
[  576.233958] Showing all locks held in the system:
[  576.240341] 1 lock held by khungtaskd/775:
[  576.244598]  #0: 00000000a9ddb57b (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428
[  576.253280] 1 lock held by rsyslogd/4284:
[  576.257614]  #0: 0000000091545838 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200
[  576.265698] 2 locks held by getty/4374:
[  576.269794]  #0: 000000007c8158d6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.278131]  #1: 00000000fa5b2188 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.287257] 2 locks held by getty/4375:
[  576.291316]  #0: 000000007d7a08f8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.299677]  #1: 000000005c9b33c0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.308761] 2 locks held by getty/4376:
[  576.312783]  #0: 00000000dfd0d1ba (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.321123]  #1: 000000006a692723 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.330072] 2 locks held by getty/4377:
[  576.334101]  #0: 0000000068bceadf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.342424]  #1: 0000000078c982e2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.351377] 2 locks held by getty/4378:
[  576.355407]  #0: 00000000f03e5780 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.363758]  #1: 000000007ff96bd9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.372724] 2 locks held by getty/4379:
[  576.376804]  #0: 00000000707a8edc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.385132]  #1: 00000000b85b5e89 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.394128] 2 locks held by getty/4380:
[  576.398155]  #0: 00000000014ff9a0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40
[  576.406488]  #1: 000000009f742283 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  576.415435] 3 locks held by syz-executor5/20880:
[  576.420314]  #0: 00000000f8380406 (sb_writers#18){.+.+}, at: mnt_want_write+0x3f/0xc0
[  576.428376]  #1: 000000008f6bbab4 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: lock_rename+0x236/0x290
[  576.437750]  #2: 000000007af85c9e (&sb->s_type->i_mutex_key#20/4){+.+.}, at: lock_two_nondirectories+0xdd/0x120
[  576.448097] 2 locks held by syz-executor5/20964:
[  576.452891]  #0: 00000000f8380406 (sb_writers#18){.+.+}, at: mnt_want_write+0x3f/0xc0
[  576.460955]  #1: 000000008f6bbab4 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: lock_rename+0x236/0x290
[  576.470333] 
[  576.472022] =============================================
[  576.472022] 
[  576.479102] NMI backtrace for cpu 0
[  576.482805] CPU: 0 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #205
[  576.489382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  576.498721] Call Trace:
[  576.501368]  dump_stack+0x1c9/0x2b4
[  576.504996]  ? dump_stack_print_info.cold.2+0x52/0x52
[  576.510174]  ? vprintk_default+0x28/0x30
[  576.514223]  ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f
[  576.519399]  nmi_cpu_backtrace.cold.3+0x48/0x88
[  576.524051]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  576.528713]  ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f
[  576.533889]  nmi_trigger_cpumask_backtrace+0x151/0x192
[  576.539154]  arch_trigger_cpumask_backtrace+0x14/0x20
[  576.544338]  watchdog+0xb39/0x1040
[  576.547871]  ? reset_hung_task_detector+0xd0/0xd0
[  576.552712]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  576.557803]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  576.562888]  ? lockdep_hardirqs_on+0x421/0x5c0
[  576.567451]  ? trace_hardirqs_on+0xbd/0x2c0
[  576.571757]  ? kasan_check_read+0x11/0x20
[  576.575892]  ? __kthread_parkme+0xd7/0x1b0
[  576.580111]  ? kasan_check_write+0x14/0x20
[  576.584330]  ? do_raw_spin_lock+0xc1/0x200
[  576.588551]  ? __kthread_parkme+0x58/0x1b0
[  576.592781]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  576.598307]  ? __kthread_parkme+0x106/0x1b0
[  576.602624]  kthread+0x35a/0x420
[  576.605992]  ? reset_hung_task_detector+0xd0/0xd0
[  576.610815]  ? kthread_bind+0x40/0x40
[  576.614603]  ret_from_fork+0x3a/0x50
[  576.618430] Sending NMI from CPU 0 to CPUs 1:
[  576.624368] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.177 msecs
[  576.624989] NMI backtrace for cpu 1
[  576.624995] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.18.0+ #205
[  576.625003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  576.625008] RIP: 0010:__lock_acquire+0x7e7/0x5020
[  576.625021] Code: 4c 89 94 24 80 00 00 00 e8 e6 dc ff ff 4c 8b 94 24 80 00 00 00 44 8b 4c 24 68 85 c0 0f 84 f2 f9 ff ff 4c 89 d6 ba 08 00 00 00 <4c> 89 f7 44 89 4c 24 68 4c 89 94 24 80 00 00 00 e8 b4 dc ff ff 4c
[  576.625026] RSP: 0018:ffff8801db107120 EFLAGS: 00000046
[  576.625035] RAX: 0000000000000000 RBX: 000000000000002b RCX: 0000000000000002
[  576.625041] RDX: 0000000000000008 RSI: ffff8801d9f1abc0 RDI: ffff8801d9f1abe4
[  576.625048] RBP: ffff8801db1074b0 R08: 0000000000000000 R09: 0000000000000000
[  576.625054] R10: ffff8801d9f1abc0 R11: ffff8801d9f1abac R12: 0000000000000000
[  576.625060] R13: 0000000000000020 R14: ffff8801d9f1a380 R15: 0000000000000002
[  576.625078] FS:  0000000000000000(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
[  576.625083] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  576.625089] CR2: 00007f3c504dc000 CR3: 00000001b51c9000 CR4: 00000000001406e0
[  576.625095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  576.625101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  576.625104] Call Trace:
[  576.625107]  <IRQ>
[  576.625112]  ? rb_insert_color+0x1480/0x1480
[  576.625116]  ? graph_lock+0x170/0x170
[  576.625120]  ? mark_held_locks+0x160/0x160
[  576.625124]  ? find_held_lock+0x36/0x1c0
[  576.625128]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  576.625133]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  576.625138]  ? lockdep_hardirqs_on+0x19e/0x5c0
[  576.625142]  ? trace_hardirqs_on+0xbd/0x2c0
[  576.625146]  ? kasan_check_read+0x11/0x20
[  576.625151]  ? update_blocked_averages+0x1011/0x1d10
[  576.625156]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  576.625160]  ? lock_repin_lock+0x430/0x430
[  576.625165]  ? update_blocked_averages+0x1011/0x1d10
[  576.625169]  ? rq_online_fair+0x4c0/0x4c0
[  576.625173]  lock_acquire+0x1e4/0x4f0
[  576.625177]  ? rebalance_domains+0x135/0xd90
[  576.625181]  ? lock_release+0x9f0/0x9f0
[  576.625185]  ? mark_held_locks+0x160/0x160
[  576.625190]  ? print_usage_bug+0xc0/0xc0
[  576.625194]  rebalance_domains+0x170/0xd90
[  576.625198]  ? rebalance_domains+0x135/0xd90
[  576.625203]  ? run_posix_cpu_timers+0x6c7/0x2580
[  576.625207]  ? load_balance+0x3640/0x3640
[  576.625228]  ? __lock_acquire+0x7fc/0x5020
[  576.625232]  ? __lock_acquire+0x7fc/0x5020
[  576.625236]  ? graph_lock+0x170/0x170
[  576.625240]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  576.625245]  ? find_next_bit+0x104/0x130
[  576.625253]  _nohz_idle_balance+0x636/0x820
[  576.625257]  ? __lock_acquire+0x7fc/0x5020
[  576.625262]  ? rebalance_domains+0xd90/0xd90
[  576.625266]  ? mark_held_locks+0x160/0x160
[  576.625271]  ? kasan_check_read+0x11/0x20
[  576.625275]  ? do_raw_spin_unlock+0xa7/0x2f0
[  576.625280]  ? trace_hardirqs_on+0x2c0/0x2c0
[  576.625283]  ? graph_lock+0x170/0x170
[  576.625288]  ? kasan_check_write+0x14/0x20
[  576.625292]  ? do_raw_spin_lock+0xc1/0x200
[  576.625296]  ? graph_lock+0x170/0x170
[  576.625300]  ? _raw_spin_unlock_irqrestore+0x63/0xc0
[  576.625305]  run_rebalance_domains+0x2c6/0x4c0
[  576.625309]  ? _nohz_idle_balance+0x820/0x820
[  576.625313]  ? rcu_is_watching+0x8c/0x150
[  576.625324]  ? rcu_pm_notify+0xc0/0xc0
[  576.625328]  __do_softirq+0x2eb/0xa74
[  576.625333]  ? __irqentry_text_end+0x1f9f00/0x1f9f00
[  576.625337]  ? rcu_is_watching+0x8c/0x150
[  576.625341]  ? rcu_pm_notify+0xc0/0xc0
[  576.625346]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  576.625350]  ? trace_hardirqs_off+0xb8/0x2b0
[  576.625354]  ? irq_exit+0x210/0x210
[  576.625358]  ? sched_ttwu_pending+0x8e/0x280
[  576.625363]  ? trace_hardirqs_on+0x2c0/0x2c0
[  576.625368]  ? sched_set_stop_task+0x290/0x290
[  576.625371]  irq_exit+0x1d6/0x210
[  576.625375]  scheduler_ipi+0x53c/0xa50
[  576.625380]  ? migration_cpu_stop+0x470/0x470
[  576.625383]  ? kasan_check_read+0x11/0x20
[  576.625387]  ? rcu_nmi_exit+0xe0/0x2d0
[  576.625391]  ? rcu_idle_enter+0x480/0x480
[  576.625396]  ? clockevents_program_event+0x140/0x370
[  576.625400]  ? trace_hardirqs_off+0xb8/0x2b0
[  576.625404]  ? task_prio+0x50/0x50
[  576.625408]  smp_reschedule_interrupt+0xfd/0x5e0
[  576.625413]  ? smp_thermal_interrupt+0x710/0x710
[  576.625417]  ? interrupt_entry+0xb5/0xf0
[  576.625422]  ? trace_hardirqs_off_caller+0xbb/0x2b0
[  576.625426]  ? trace_hardirqs_off_caller+0xbb/0x2b0
[  576.625431]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  576.625436]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  576.625440]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  576.625444]  ? task_prio+0x50/0x50
[  576.625449]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  576.625453]  reschedule_interrupt+0xf/0x20
[  576.625456]  </IRQ>
[  576.625460] RIP: 0010:native_safe_halt+0x6/0x10
[  576.625473] Code: c7 48 89 45 d8 e8 ca 4e 07 fb 48 8b 45 d8 e9 d2 fe ff ff 48 89 df e8 b9 4e 07 fb eb 8a 90 90 90 90 90 90 90 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90
[  576.625478] RSP: 0018:ffff8801d9f27c30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
[  576.625488] RAX: dffffc0000000000 RBX: 1ffff1003b3e4f8a RCX: 0000000000000000
[  576.625494] RDX: 1ffffffff0fe3798 RSI: 0000000000000001 RDI: ffffffff87f1bcc0
[  576.625500] RBP: ffff8801d9f27c30 R08: ffff8801d9f1a380 R09: 0000000000000000
[  576.625506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[  576.625512] R13: ffff8801d9f27cf0 R14: 0000000000000001 R15: 0000000000000000
[  576.625516]  default_idle+0xc2/0x410
[  576.625520]  ? kasan_check_write+0x14/0x20
[  576.625524]  ? __sched_text_end+0x1/0x1
[  576.625528]  ? rcu_idle_enter+0x30a/0x480
[  576.625533]  ? rcu_eqs_special_set+0x1b0/0x1b0
[  576.625537]  ? tsc_verify_tsc_adjust+0x109/0x380
[  576.625542]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  576.625547]  ? mark_tsc_async_resets+0x20/0x20
[  576.625551]  ? trace_hardirqs_on+0x2c0/0x2c0
[  576.625556]  ? __tick_nohz_idle_restart_tick+0x28c/0x3c0
[  576.625560]  arch_cpu_idle+0x10/0x20
[  576.625564]  default_idle_call+0x6d/0x90
[  576.625568]  do_idle+0x3aa/0x580
[  576.625572]  ? retint_kernel+0x10/0x10
[  576.625576]  ? arch_cpu_idle_exit+0x70/0x70
[  576.625580]  cpu_startup_entry+0x10c/0x120
[  576.625584]  ? cpu_in_idle+0x20/0x20
[  576.625588]  start_secondary+0x433/0x5d0
[  576.625593]  ? set_cpu_sibling_map+0x18b0/0x18b0
[  576.625597]  secondary_startup_64+0xa4/0xb0
[  576.625642] Kernel panic - not syncing: hung_task: blocked tasks
[  577.240961] CPU: 0 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #205
[  577.247522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  577.256853] Call Trace:
[  577.259431]  dump_stack+0x1c9/0x2b4
[  577.263832]  ? dump_stack_print_info.cold.2+0x52/0x52
[  577.269012]  ? printk_safe_log_store+0x2f0/0x2f0
[  577.273756]  panic+0x238/0x4e7
[  577.276936]  ? add_taint.cold.5+0x16/0x16
[  577.281082]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  577.286612]  ? nmi_trigger_cpumask_backtrace+0x13a/0x192
[  577.292046]  ? printk_safe_flush+0xd7/0x130
[  577.296365]  watchdog+0xb4a/0x1040
[  577.300073]  ? reset_hung_task_detector+0xd0/0xd0
[  577.304933]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  577.310029]  ? _raw_spin_unlock_irqrestore+0x74/0xc0
[  577.315121]  ? lockdep_hardirqs_on+0x421/0x5c0
[  577.319689]  ? trace_hardirqs_on+0xbd/0x2c0
[  577.323993]  ? kasan_check_read+0x11/0x20
[  577.328226]  ? __kthread_parkme+0xd7/0x1b0
[  577.332454]  ? kasan_check_write+0x14/0x20
[  577.336680]  ? do_raw_spin_lock+0xc1/0x200
[  577.340908]  ? __kthread_parkme+0x58/0x1b0
[  577.345171]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  577.350729]  ? __kthread_parkme+0x106/0x1b0
[  577.355038]  kthread+0x35a/0x420
[  577.358392]  ? reset_hung_task_detector+0xd0/0xd0
[  577.363216]  ? kthread_bind+0x40/0x40
[  577.367002]  ret_from_fork+0x3a/0x50
[  577.371167] Dumping ftrace buffer:
[  577.374701]    (ftrace buffer empty)
[  577.378394] Kernel Offset: disabled
[  577.382014] Rebooting in 86400 seconds..