UP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000c0ed00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:54:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000035400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1540.087447][T19152] EXT4-fs (loop5): bad geometry: first data block 60864 is beyond end of filesystem (1080) 10:54:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x84800380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd8, 0x0, 0xd0e0000, 0xd8, 0x100, 0x188, 0x1d8, 0x1d8, 0x188, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'macvtap0\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) pipe2$9p(0x0, 0xc4000) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') preadv(r1, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x4000, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 10:54:56 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x4c000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:54:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000009effffff5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000055400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:56 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000ff00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1540.445162][T19191] No such timeout policy "syz0" 10:54:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x84800380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd8, 0x0, 0xd0e0000, 0xd8, 0x100, 0x188, 0x1d8, 0x1d8, 0x188, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'macvtap0\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) pipe2$9p(0x0, 0xc4000) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') preadv(r1, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x4000, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 1540.481647][T19191] No such timeout policy "syz0" [ 1540.534185][T19185] EXT4-fs (loop5): bad geometry: first data block 65280 is beyond end of filesystem (1080) [ 1540.593227][T19208] No such timeout policy "syz0" 10:54:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/147, 0x20000093}, {&(0x7f00000000c0)=""/255, 0xff}], 0x2, 0x6) 10:54:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000065400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000f0ffffff5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1540.735883][T19215] EXT4-fs (loop5): bad geometry: first data block 65280 is beyond end of filesystem (1080) 10:54:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f00000000c0)=""/255, 0xff}], 0x2, 0x6) 10:54:57 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x4ce40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:54:57 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f00000000c0)=""/255, 0xff}], 0x2, 0x6) 10:54:57 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000fff00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:54:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000075400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000feffffff5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) [ 1541.311556][T19252] EXT4-fs (loop5): bad geometry: first data block 65295 is beyond end of filesystem (1080) 10:54:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000a5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) 10:54:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000300128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1541.634532][T19288] EXT4-fs (loop5): bad geometry: first data block 65295 is beyond end of filesystem (1080) 10:54:57 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000002000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:54:57 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r1, r1, &(0x7f0000000240), 0x7ffd) 10:54:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:57 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x4de40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1541.865396][T19312] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000a00128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:58 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1542.137368][T19335] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000800d5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1542.192085][T19335] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000200005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:58 executing program 0: mount$overlay(0x400002, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000280)="82e802000000de36880900000000000000a7ed6e87fe67b594d2", 0x1a}, {&(0x7f0000000000)="af102bfe0eb38077aaef92b7", 0xc, 0x82}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) [ 1542.433052][T19340] EXT4-fs (loop5): bad geometry: first data block 262144 is beyond end of filesystem (1080) 10:54:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) 10:54:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000e5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:58 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x4ee40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:54:58 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000008000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000300005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) 10:54:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000400005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000205400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1543.074957][T19386] EXT4-fs (loop5): bad geometry: first data block 524288 is beyond end of filesystem (1080) 10:54:59 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x4fe40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:54:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) [ 1543.229734][T19414] EXT4-fs (loop5): bad geometry: first data block 524288 is beyond end of filesystem (1080) 10:54:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) socket$packet(0x11, 0x0, 0x300) 10:54:59 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000c000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:54:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000500005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:54:59 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f0000000940)=""/49, 0x31}], 0x7) accept4(r2, 0x0, &(0x7f0000000340), 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:54:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000405400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1543.711454][T19446] EXT4-fs (loop5): bad geometry: first data block 786432 is beyond end of filesystem (1080) 10:54:59 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x50e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:00 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000010100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) 10:55:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000600005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:00 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x51e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000485400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000700005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:00 executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r2, r2, &(0x7f0000000240), 0x7ffd) [ 1544.396887][T19500] EXT4-fs (loop5): bad geometry: first data block 16777216 is beyond end of filesystem (1080) 10:55:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000004c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:00 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000048010100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:00 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x52e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000a00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x84800380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd8, 0x0, 0xd0e0000, 0xd8, 0x100, 0x188, 0x1d8, 0x1d8, 0x188, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'macvtap0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) pipe2$9p(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x908, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:55:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4610, &(0x7f0000000000)) 10:55:01 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1545.041325][T19568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1545.068521][T19569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1545.105446][T19554] EXT4-fs (loop5): bad geometry: first data block 21495808 is beyond end of filesystem (1080) 10:55:01 executing program 4: openat$mice(0xffffff9c, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xbc786, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x7ff}}, 0x26) sendmmsg(r0, &(0x7f00000000c0), 0x2e9, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004095) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20044844}, 0x0) 10:55:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000065585400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1545.298343][T19592] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. 10:55:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000c00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:01 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x53e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1545.347798][T19592] device ip6gretap0 entered promiscuous mode 10:55:01 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000020100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1545.400600][T19592] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. 10:55:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0xfffffedd) 10:55:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000605400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1545.677484][T19622] EXT4-fs (loop5): bad geometry: first data block 33554432 is beyond end of filesystem (1080) [ 1545.756893][T19620] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. 10:55:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000e00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1545.859720][T19620] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1545.946520][T19644] EXT4-fs (loop5): bad geometry: first data block 33554432 is beyond end of filesystem (1080) 10:55:02 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000030100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000058655400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:02 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x54e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x2b, 0x0, 0x0) 10:55:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000001000005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000685400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:02 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) 10:55:02 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f0000000940)=""/49, 0x31}], 0x7) accept4(r2, 0x0, &(0x7f0000000340), 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1546.711766][T19701] md: invalid raid superblock magic on ram96 [ 1546.725715][T19701] md: ram96 does not have a valid v0.0 superblock, not importing! 10:55:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000003e00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1546.755677][T19693] EXT4-fs (loop5): bad geometry: first data block 67108864 is beyond end of filesystem (1080) [ 1546.761946][T19701] md: md_import_device returned -22 10:55:02 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x55e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000006c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1546.872629][T19713] md: invalid raid superblock magic on ram96 [ 1546.912571][T19718] EXT4-fs (loop5): bad geometry: first data block 67108864 is beyond end of filesystem (1080) [ 1546.941682][T19713] md: ram96 does not have a valid v0.0 superblock, not importing! [ 1546.973853][T19713] md: md_import_device returned -22 10:55:03 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000050100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000004800005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:03 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f0000000940)=""/49, 0x31}], 0x7) accept4(r2, 0x0, &(0x7f0000000340), 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:55:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000745400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1547.329696][T19747] EXT4-fs (loop5): bad geometry: first data block 83886080 is beyond end of filesystem (1080) 10:55:03 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x56e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000004c00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:03 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, &(0x7f00000002c0)=""/4096) [ 1547.551365][T19769] EXT4-fs (loop5): bad geometry: first data block 83886080 is beyond end of filesystem (1080) 10:55:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1, 0x400000006) 10:55:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000007a5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:03 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r1, r1, &(0x7f0000000240), 0x7ffd) 10:55:03 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b72d381e5cd2181dff19160800008f74fa00040000000000004793608dd0e7316d1d4f4dbaa0a67be4bd714b7ecefa8a934a00"}, 0x60) close(r0) 10:55:03 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000060100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:04 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x57e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:04 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f0000000940)=""/49, 0x31}], 0x7) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f4619", 0x3c}], 0x3}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000006000005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:04 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:55:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000d805400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1548.163771][T19818] EXT4-fs (loop5): bad geometry: first data block 100663296 is beyond end of filesystem (1080) 10:55:04 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f0000000940)=""/49, 0x31}], 0x7) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1548.411983][T19856] EXT4-fs (loop5): bad geometry: first data block 100663296 is beyond end of filesystem (1080) [ 1548.438675][ T5265] usb 5-1: new high-speed USB device number 8 using dummy_hcd 10:55:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000006800005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000815400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:04 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000070100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1548.676964][ T5265] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1548.694947][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.714350][ T5265] usb 5-1: config 0 descriptor?? [ 1548.775819][T19875] EXT4-fs (loop5): bad geometry: first data block 117440512 is beyond end of filesystem (1080) 10:55:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000006c00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:04 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x58e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000300128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1548.969118][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1548.984929][T19901] EXT4-fs (loop5): bad geometry: first data block 117440512 is beyond end of filesystem (1080) 10:55:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, 0x0) 10:55:05 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000080100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1549.109330][T19918] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) fsync(r0) [ 1549.386653][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1549.413529][T19931] EXT4-fs (loop5): bad geometry: first data block 134217728 is beyond end of filesystem (1080) [ 1549.426156][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1549.439680][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1549.476161][ T5265] asix: probe of 5-1:0.0 failed with error -71 [ 1549.485735][ T5265] usb 5-1: USB disconnect, device number 8 [ 1549.569642][T19952] EXT4-fs (loop5): bad geometry: first data block 134217728 is beyond end of filesystem (1080) [ 1550.166161][ T5265] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1550.416868][ T5265] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1550.435369][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.454372][ T5265] usb 5-1: config 0 descriptor?? [ 1550.706136][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 10:55:07 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='userppp1eth1procppp1eth1\x00') 10:55:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000007400005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000a00128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:07 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x59e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80000008005, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x5c5064) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="00214900000000000000000601004000000000000000", 0xad}], 0x1, 0x0) 10:55:07 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000090100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1550.976151][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1551.006145][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1551.094824][ T5265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1551.157469][T19983] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1551.206286][ T5265] asix: probe of 5-1:0.0 failed with error -71 [ 1551.212295][T19983] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1551.230624][ T5265] usb 5-1: USB disconnect, device number 9 10:55:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000010000000000400"}) syz_open_pts(r1, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x80000000000b) creat(&(0x7f0000000000)='./bus\x00', 0x0) 10:55:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000025400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000007a00005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1551.387485][T19985] EXT4-fs (loop5): bad geometry: first data block 150994944 is beyond end of filesystem (1080) 10:55:07 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000a0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:07 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xa, &(0x7f00000002c0)={&(0x7f0000000240)={0x108, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xf4}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x24040051) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x2400c850) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 10:55:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000003005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:07 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5ae40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000035400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000005005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:08 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000c0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000045400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1552.493630][T20079] EXT4-fs (loop5): bad geometry: first data block 201326592 is beyond end of filesystem (1080) 10:55:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000006005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 10:55:08 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5be40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000055400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4611, 0x0) [ 1552.732172][T20101] EXT4-fs (loop5): bad geometry: first data block 201326592 is beyond end of filesystem (1080) 10:55:08 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004100100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:08 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) 10:55:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000007005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000065400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:09 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) 10:55:09 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5ce40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1553.264658][T20135] EXT4-fs (loop5): bad geometry: first data block 268697600 is beyond end of filesystem (1080) 10:55:09 executing program 4: fspick(0xffffffffffffff9c, 0x0, 0x3f7951d9996b5e4b) 10:55:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000a005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000075400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:09 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe880000000000df000000000000000114000400ff00000c000000000000000000000001080007000000000024000f0014000100edff01007f001001080002007f0000010c0002"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffeb2, &(0x7f0000000200)={0x0}, 0x8}, 0x0) chroot(0x0) 10:55:09 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000001d190100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:09 executing program 4: clock_nanosleep(0x2, 0x0, &(0x7f0000000280), 0x0) [ 1553.657002][T20182] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1553.665150][T20182] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 10:55:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) 10:55:09 executing program 0: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lc\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) read$FUSE(r3, &(0x7f0000000a00), 0x1000) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:55:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1553.936614][T20194] EXT4-fs (loop5): bad geometry: first data block 421330944 is beyond end of filesystem (1080) 10:55:10 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5de40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000a5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1554.124705][T20226] EXT4-fs (loop5): bad geometry: first data block 421330944 is beyond end of filesystem (1080) 10:55:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) tkill(0x0, 0x2) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000880)="b879fa689ddde801ac0fb322c8d73b2b7fb2964f450dc8b4da1da42ad6851ca4081281fb702271e3d7095e637a0dbe81125bd941040347ade0e5aef22551d0b442bb72147a17787b6facfe3bb333947f19b36597cb4373bb864b33e6d779206a7176db4c9c12ef5d440e5cb528b5ac93cac69dfb82121a2113acadd56f9b2b50bd") fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x3}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x24020c50}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000000ec5a93cf707d6f2b5ad0d7f291213e4ab6096d559711f2610d3ccc1b5c6990184771870b51167e2c2e2d2df678028e7d0134ba9bf96d5914fc67caf0cb278f4c987e6ab3adda4141866f7cf52c4abb6b2f01b288d7f2cd31b377230feb3d0c287b65749b1f2d8", @ANYRES16=0x0, @ANYBLOB="010027bd7000fc5bdf2513007400040000000800a400020000000800140000000000999f6a58b90865f79b4ebde529163c5c892786b69c050e8fcf79efa327b3887982077c4a5a15034ead1d5560abd2f2c7d766ee5a581e6b7ca155fa0c479932b438791e28ffd744156f0995f6c439f696fd7b1c31c2627af0002993f1734526e301b407ef62ed2085ff7e750b8eed41c9fa10c531bad776a5e8f3946c9e165c300226aa62c76ca6969901413c402b5bbb07fac423c9d863f1c75799021ba53f5175254e0abc2ee7", @ANYRES32=0x0, @ANYBLOB="4f00be00448f44caec22c9cd866242d063d2b53b8497936f792590076a0f5e5df3f386449376050d117d82034c7ad1ba41c22f9e7331a273f5f0706101000000f45f742a47398c45744e80e16fc25f85940300000000000000dc396629b2e3450e00bd000010380005000300080000000600360000000000080011800400060005002900c10000000c00bd00b8000200"], 0xb0}}, 0x44004) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x400000003, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/69) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 10:55:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000e005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1554.196140][ T5265] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1554.306790][ T5265] usb 5-1: Using ep0 maxpacket: 16 10:55:10 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000200100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1554.428721][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:55:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1554.501122][ T5265] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1554.547571][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.560626][ T5265] usb 5-1: config 0 descriptor?? 10:55:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000ec0f005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:10 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5ee40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1554.660645][ T5265] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1554.793551][T20263] EXT4-fs (loop5): bad geometry: first data block 536870912 is beyond end of filesystem (1080) 10:55:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000e5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1554.909701][ T5265] usb 5-1: USB disconnect, device number 10 [ 1554.983624][T20297] EXT4-fs (loop5): bad geometry: first data block 536870912 is beyond end of filesystem (1080) [ 1555.506792][ T5265] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1555.616162][ T5265] usb 5-1: Using ep0 maxpacket: 32 [ 1555.748978][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.773134][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.800496][ T5265] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1555.839479][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.852963][ T5265] usb 5-1: config 0 descriptor?? [ 1555.899315][ T5265] hub 5-1:0.0: USB hub found [ 1556.126270][ T5265] hub 5-1:0.0: 2 ports detected [ 1556.590104][ T5265] usb 5-1: USB disconnect, device number 11 [ 1557.326139][T12553] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1557.419829][T12553] usb 5-1: Using ep0 maxpacket: 16 [ 1557.549433][T12553] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1557.575937][T12553] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1557.587927][T12553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.610095][T12553] usb 5-1: config 0 descriptor?? [ 1557.669304][T12553] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 10:55:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) 10:55:13 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000010200100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000020005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000105400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:13 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x5fe40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:13 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000110) r2 = epoll_create(0x2000007) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000001}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x2e0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1557.932191][ T49] usb 5-1: USB disconnect, device number 12 [ 1558.132488][T20350] EXT4-fs (loop5): bad geometry: first data block 537919488 is beyond end of filesystem (1080) 10:55:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000003e005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000485400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1558.506122][ T49] usb 5-1: new high-speed USB device number 13 using dummy_hcd 10:55:14 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x60e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1558.626124][ T49] usb 5-1: Using ep0 maxpacket: 16 10:55:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000003f005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:14 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000230100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000004c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1558.779342][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1558.796765][ T49] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1558.842389][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.899093][ T49] usb 5-1: config 0 descriptor?? [ 1558.983569][T20418] EXT4-fs (loop5): bad geometry: first data block 587202560 is beyond end of filesystem (1080) [ 1559.029233][ T49] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1559.243728][T20447] EXT4-fs (loop5): bad geometry: first data block 587202560 is beyond end of filesystem (1080) [ 1559.276568][ T8649] usb 5-1: USB disconnect, device number 13 [ 1559.826203][ T8649] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1559.919270][ T8649] usb 5-1: Using ep0 maxpacket: 32 [ 1560.039462][ T8649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.064338][ T8649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.085534][ T8649] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1560.097210][ T8649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.110737][ T8649] usb 5-1: config 0 descriptor?? [ 1560.156676][ T8649] hub 5-1:0.0: USB hub found [ 1560.378241][ T8649] hub 5-1:0.0: 2 ports detected [ 1560.837735][ T8649] usb 5-1: USB disconnect, device number 14 10:55:17 executing program 4: prctl$PR_SET_NAME(0x34, &(0x7f0000000000)='userppp1eth1procppp1eth1\x00') 10:55:17 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffe1}) 10:55:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000048005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000605400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:17 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x61e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:17 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000002d0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:17 executing program 0: io_uring_setup(0xb27, &(0x7f0000000080)={0x0, 0x0, 0x6}) 10:55:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa23fe22e) r1 = eventfd2(0x0, 0x0) dup(r1) r2 = eventfd2(0x0, 0x0) dup(r2) dup2(r1, r2) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x1c, r4, 0x1, 0x0, 0x0, {0xa}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x1c}}, 0x0) r5 = eventfd2(0x0, 0x0) dup(r5) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/106) [ 1561.546832][T20482] EXT4-fs (loop5): bad geometry: first data block 754974720 is beyond end of filesystem (1080) 10:55:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000004c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000685400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1561.695065][T20503] EXT4-fs (loop5): bad geometry: first data block 754974720 is beyond end of filesystem (1080) 10:55:17 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000003a320100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:17 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x62e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:18 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_out(r0, 0x60b, 0x0) 10:55:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000006558005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000006c5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:18 executing program 0: clock_nanosleep(0x8, 0x8, &(0x7f0000000280), 0x0) 10:55:18 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004380100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:18 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x63e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000060005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1562.617367][T20573] EXT4-fs (loop5): bad geometry: first data block 939786240 is beyond end of filesystem (1080) 10:55:20 executing program 4: syz_usb_connect$hid(0x0, 0x3c9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 10:55:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) 10:55:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000745400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:20 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000001390100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000005865005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:20 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x64e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1565.290407][T20615] EXT4-fs (loop5): bad geometry: first data block 956366848 is beyond end of filesystem (1080) 10:55:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000068005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000007a5400128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1565.468409][ T49] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1565.576940][ T49] usb 5-1: Using ep0 maxpacket: 8 10:55:21 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x65e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000006800128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:21 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000013a0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1565.728351][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:55:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000006c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1565.772968][T20666] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1565.779231][ T49] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1565.839824][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.883545][ T49] usb 5-1: config 0 descriptor?? [ 1565.969847][ T49] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1566.011396][T20675] EXT4-fs (loop5): bad geometry: first data block 973144064 is beyond end of filesystem (1080) [ 1566.170792][ T5] usb 5-1: USB disconnect, device number 15 [ 1566.275490][T20701] EXT4-fs (loop5): bad geometry: first data block 973144064 is beyond end of filesystem (1080) [ 1566.956109][ T49] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1567.046743][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 1567.186929][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1567.216112][ T49] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1567.236079][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.256704][ T49] usb 5-1: config 0 descriptor?? [ 1567.309115][ T49] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 10:55:23 executing program 4: syz_usb_connect$hid(0x0, 0x3c9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 10:55:23 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0xa936}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) 10:55:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000ec000128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000074005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:23 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x66e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:23 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000013b0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1567.523124][T26888] usb 5-1: USB disconnect, device number 16 [ 1567.719594][T20730] EXT4-fs (loop5): bad geometry: first data block 989921280 is beyond end of filesystem (1080) 10:55:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000007a005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000300128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1567.796541][T20735] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1567.970218][T20758] EXT4-fs (loop5): bad geometry: first data block 989921280 is beyond end of filesystem (1080) 10:55:24 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000003d0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1568.068812][T26888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1568.166128][T26888] usb 5-1: Using ep0 maxpacket: 8 [ 1568.216354][T20775] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000081005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1568.289384][T26888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:55:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000a00128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:24 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x67e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1568.350424][T26888] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1568.398937][T20781] EXT4-fs (loop5): bad geometry: first data block 1023410176 is beyond end of filesystem (1080) [ 1568.458612][T26888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.508933][T20802] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.540079][T26888] usb 5-1: config 0 descriptor?? [ 1568.576081][T20802] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.629284][T26888] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1568.638171][T20806] EXT4-fs (loop5): bad geometry: first data block 1023410176 is beyond end of filesystem (1080) [ 1568.855299][ T49] usb 5-1: USB disconnect, device number 17 10:55:25 executing program 4: syz_usb_connect$hid(0x0, 0x3c9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000006800128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000fec005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:25 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000003f0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:25 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x68000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:25 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 1569.559083][T20851] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000c00e128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000006800128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1569.718443][T20847] EXT4-fs (loop5): bad geometry: first data block 1056964608 is beyond end of filesystem (1080) [ 1569.886280][T26888] usb 5-1: new high-speed USB device number 18 using dummy_hcd 10:55:25 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000400100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1569.926796][T20880] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000020128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1570.000473][T20888] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1570.016989][T26888] usb 5-1: Using ep0 maxpacket: 8 10:55:26 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x68e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1570.136903][T26888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1570.165351][T26888] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1570.178091][T26888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:55:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000002005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1570.197242][T26888] usb 5-1: config 0 descriptor?? [ 1570.225164][T20903] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1570.249244][T26888] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1570.481618][T26888] usb 5-1: USB disconnect, device number 18 [ 1571.246484][T26888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1571.336123][T26888] usb 5-1: Using ep0 maxpacket: 8 [ 1571.456993][T26888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1571.473617][T26888] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1571.483516][T26888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.495996][T26888] usb 5-1: config 0 descriptor?? [ 1571.539319][T26888] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1571.740448][T26888] usb 5-1: USB disconnect, device number 19 10:55:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000017000101000000000000000004000000040010"], 0x18}}, 0x0) r1 = io_uring_setup(0x869, &(0x7f0000000000)) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 10:55:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005402128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:27 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000480100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 10:55:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000003005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:27 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x69e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1572.010167][T20947] EXT4-fs (loop5): bad geometry: first data block 1207959552 is beyond end of filesystem (1080) [ 1572.140321][T20956] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005403128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000004005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1572.260233][T20980] EXT4-fs (loop5): bad geometry: first data block 1207959552 is beyond end of filesystem (1080) 10:55:28 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6ae40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:28 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 1572.376589][T20992] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:28 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000004c0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005404128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000005005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1572.655261][T21014] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005405128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1572.937522][T21035] EXT4-fs (loop5): bad geometry: first data block 1275068416 is beyond end of filesystem (1080) [ 1572.956477][T21039] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005406128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 10:55:29 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6be40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000006005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:29 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000074610100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1573.134078][T21051] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005407128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:29 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000010000000000400"}) syz_open_pts(r1, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x80000000000b) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x401) 10:55:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000007005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1573.425585][T21072] EXT4-fs (loop5): bad geometry: first data block 1634992128 is beyond end of filesystem (1080) [ 1573.458137][T21085] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540a128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:29 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6c000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:29 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000074650100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1573.746211][T21114] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000a005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540c128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1574.031970][T21123] EXT4-fs (loop5): bad geometry: first data block 1702100992 is beyond end of filesystem (1080) [ 1574.144710][T21148] EXT4-fs (loop5): bad geometry: first data block 1702100992 is beyond end of filesystem (1080) [ 1574.166254][T21135] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 10:55:30 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6ce40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:30 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000680100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540e128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:30 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa283002020020009000000001d85680c1ba3a20400ff6e280000005e00ff39e38e0d0857aa99b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15ab", 0x4c}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000017000101000000000000000004"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x36, 0x2, 0x0) [ 1574.569085][T21163] EXT4-fs (loop5): bad geometry: first data block 1744830464 is beyond end of filesystem (1080) [ 1574.686850][T21177] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:30 executing program 0: io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1574.794337][T21189] EXT4-fs (loop5): bad geometry: first data block 1744830464 is beyond end of filesystem (1080) 10:55:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005410128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000e005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000600)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 10:55:30 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000006c0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000001740)={0x1ec, 0x12, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x9, 0x7fffffff, 0x0, 0x4537], [0x10000, 0x0, 0x2, 0x8], 0x0, [0xbce, 0xb48]}, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "6d3efaf61b0c465d374f0124076a9911a0321f5cb862126a0939885af4147a42caea4e1d7da5ee90fec438d919453a344bd58763c8372ad45d9f23d5543ced82940875dd8ee626d700bae8b434fb9f3ae130d48542d13a4467b60e4607b9af405c6869adc905cd2ef07f643700e1ba02776a3b1c56aa48be27df51717e1711dac5b46e23b4911713d271568f4465b93ba26ad6495ab7092e12d42c668332a3ff3746ccbd76509fdc8d"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "b65fd63768084e363964efbcd5c049d60725362f83356b52ceba60df60495fb4f709888c83986afce99d122d626c2a12fd50a3a0203a45a9c92a552e4355ef8795ccf65797fcefd0c9e018cb2fd86f76e86087bc5c7cfb2bbe0721685bcc05e147ceb5caffffdd11ec7ebe157b1c8c7f3d48adbe46463fac178ad52296d88a51644f5d6be93c7cbfafd4c20eb67690c67012d5c5af44303a13500408137f5534be739fe23681401a2631846ab22a0894952f7fb7d9f257eb839f84200422eeb97f649e45111119d165bdeff482ad5a19ac9d2cf46132d24761831bd6b2993ccdf889064a682ec542"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) 10:55:31 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6de40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1575.109846][T21210] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005448128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1575.233191][T21219] EXT4-fs (loop5): bad geometry: first data block 1811939328 is beyond end of filesystem (1080) 10:55:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000010005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:31 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xdd4ad65, 0x0, 0x0, 0x1, r2}]) r3 = dup2(r0, r2) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) [ 1575.406692][T21251] EXT4-fs (loop5): bad geometry: first data block 1811939328 is beyond end of filesystem (1080) 10:55:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000544c128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:31 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000740100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 10:55:31 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6ee40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000003e005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1575.820021][T21291] EXT4-fs (loop5): bad geometry: first data block 1946157056 is beyond end of filesystem (1080) 10:55:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000600)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 10:55:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005460128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 10:55:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000048005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:32 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000007a0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1576.071126][T21316] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 10:55:32 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x6fe40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005468128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000004c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1576.332685][T21333] EXT4-fs (loop5): bad geometry: first data block 2046820352 is beyond end of filesystem (1080) [ 1576.494146][T21359] EXT4-fs (loop5): bad geometry: first data block 2046820352 is beyond end of filesystem (1080) 10:55:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000546c128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:32 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000ffffff8c0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:32 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x70e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000060005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000600)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 10:55:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005474128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1576.970088][T21387] EXT4-fs (loop5): bad geometry: first data block 2365587455 is beyond end of filesystem (1080) [ 1577.161041][T21407] __nla_validate_parse: 5 callbacks suppressed [ 1577.161055][T21407] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1577.213638][T21415] EXT4-fs (loop5): bad geometry: first data block 2365587455 is beyond end of filesystem (1080) 10:55:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 10:55:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000068005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000547a128011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:33 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x71e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:33 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000edc00100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1577.642471][T21438] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400208011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1577.740854][T21432] EXT4-fs (loop5): bad geometry: first data block 3236757504 is beyond end of filesystem (1080) 10:55:34 executing program 4: prctl$PR_MCE_KILL(0x23, 0x0, 0xfffffffffffffff9) [ 1577.952046][T21472] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 1577.973536][T21465] EXT4-fs (loop5): bad geometry: first data block 3236757504 is beyond end of filesystem (1080) 10:55:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000100)="ce044a008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0634e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:55:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000006c005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400368011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:34 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffff50100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:34 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x72e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b3000000000000200500000001040000040000"], 0x8d0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) chdir(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 10:55:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000074005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1578.425686][T21495] EXT4-fs (loop5): bad geometry: first data block 4127195135 is beyond end of filesystem (1080) [ 1578.485834][T21510] netlink: 1180 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400688011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000007a005400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:34 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffff60100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400368011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:34 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x73e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) chdir(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 10:55:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000035400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1579.113796][T21560] EXT4-fs (loop5): bad geometry: first data block 4143972351 is beyond end of filesystem (1080) 10:55:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400688011000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1579.250778][T21584] netlink: 1180 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000240)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000002280)=[{&(0x7f00000000c0), 0x0, 0x400}, {0x0, 0x0, 0x60000000}, {&(0x7f0000001ec0)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000540)=0x6, 0x4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2d, 0x4, 0x0, {0x0, 0x0, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) umount2(&(0x7f0000000100)='./file0\x00', 0x0) socketpair(0x1e, 0x0, 0x4, 0x0) splice(r3, &(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1579.357837][T21599] EXT4-fs (loop5): bad geometry: first data block 4143972351 is beyond end of filesystem (1080) 10:55:35 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x74000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000055400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:35 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffdf90100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400120020000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1579.626704][T21623] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:55:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000065400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1579.748958][T21649] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:35 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2, 0x4c}, &(0x7f0000000040)='R\x10rist\x18m\x84\x89\xa5\x05\x04Vi0\x97ddR\xd1\x06\xd3r\x90J%P\x0f\x82[\n~P\xd7\x12\x805', 0x0) openat$md(0xffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 1579.821953][T21648] EXT4-fs (loop5): bad geometry: first data block 4194172927 is beyond end of filesystem (1080) 10:55:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128003000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:36 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x74e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:36 executing program 4: syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000180)=0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000680)=""/244, 0xf4, 0x14002, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8000000000000, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) dup(r2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MAP={0x20, 0xe, {0x40000, 0x0, 0x0, 0x89c, 0x6, 0x1f}}]}, 0x40}}, 0x84) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x20000081) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004000000100000560760bc7d9400c12c00fe800000000014ff0200000000000000000000000000012f000000000000000420655800000000000507ff000008000006000086dd000404005746188c9917c3bc13764554744d434b1b5301000000000000003269819a2fbdb7e4bc56d98753a210807291d9f9caa4089520f783ee713c2a8f9d65d7bba815a3d739b6fd176c687f383b4de8220dea65b0886db8dec9baffe3ad8f71b22356bff6ab35a85f055ae972dd080088be00000000100000000100000000000000080022eb00000000200000000200200000000000000000000800655800000000"], 0xf3) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000001c0)=""/48, &(0x7f0000000240)=0x30) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x9, "e58a7768a83c7936514e511bcefc"}, @ipx={0x4, 0x0, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0xfff, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 1580.084333][T21684] EXT4-fs (loop5): bad geometry: first data block 4194172927 is beyond end of filesystem (1080) [ 1580.140202][T21701] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1580.199634][T21710] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000075400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128050000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:36 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffffb0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1580.555820][T21740] EXT4-fs (loop5): bad geometry: first data block 4227858431 is beyond end of filesystem (1080) 10:55:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000a5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1581.049765][T21779] EXT4-fs (loop5): bad geometry: first data block 4227858431 is beyond end of filesystem (1080) 10:55:37 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x75e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128068000100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:37 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffffe0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1581.288914][T21796] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128000200100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1581.405064][T21795] EXT4-fs (loop5): bad geometry: first data block 4278190079 is beyond end of filesystem (1080) 10:55:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001740)={0xb50, 0x12, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x10, 0x0, 0x2, {0x4e21, 0x4e22, [0x9, 0x0, 0x80000000, 0x4537], [0x10000, 0x8, 0x2, 0x8], 0x0, [0xbce, 0xb48]}, 0x10000, 0xd6d}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "6d3efaf61b0c465d374f0124076a9911a0321f5cb862126a0939885af4147a42caea4e1d7da5ee90fec438d919453a344bd58763c8372ad45d9f23d5543ced82940875dd8ee626d700bae8b434fb9f3ae130d48542d13a4467b60e4607b9af405c6869adc905cd2ef07f643700e1ba02776a3b1c56aa48be27df51717e1711dac5b46e23b4911713d271568f4465b93ba26ad6495ab7092e12d42c668332a3ff3746ccbd76509fdc8daea437af29ba7aee64cb49506fba7ac1f92edca63510fa"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "7d4f51a1d092c20076c74c7455147ea0db5b21ac3b6e693c"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "b65fd63768084e363964efbcd5c049d60725362f83356b52ceba60df60495fb4f709888c83986afce99d122d626c2a12fd50a3a0203a45a9c92a552e4355ef8795ccf65797fcefd0c9e018cb2fd86f76e86087bc5c7cfb2bbe0721685bcc05e147ceb5caffffdd11ec7ebe157b1c8c7f3d48adbe46463fac178ad52296d88a51644f5d6be93c7cbfafd4c20eb67690c67012d5c5af44303a13500408137f5534be739fe23681401a2631846ab22a0894952f7fb7d9f257eb839f84200422eeb97f649e45111119d165bdeff482ad5a19ac9d2cf46132d24761831bd6b2993ccdf889064a682ec54271c0e5014b9470f327ddf10811fe"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "54de9be67e76bcd0efabb2140f1e5643bc9eb50c38d6cc519e3dcbfb3d307c67143d38262fa079a1395612122eb0141c6c84e95e51c3264bc9cb3fa541f3806a46eca100bc6017c61166261c97b28e5bc0675b78f6e9b34110a2bdeb36bff1ab5a99fec1b66aba4610d1f3def22d0504237cc3c14a50e675d922c179c3cf3f6cb528e057e0de37e68d85a942938beca95280637f46a9fe"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "8aa8ebef0aea787b0f9ab3cd403e53b3d4e148f31f2403d4229b0e1350d901084e7ee4b4b3782c381c5724c7f23e66566f8daaa5fec151753acf6ab9fa50db4b9810d52dd61c3449b19d9f7180fb5863ad4afa84627a088bf7e0e4999262a842657d6c356ecb3a47c34bb34d87f6fa28b5f4281a87829b1dc54379473f4b8fa1bdc28df2e6582ffa9ca115a20df745"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x704, 0x1, "e4354528c5b6bde6476cb76f76b0798d53393a2ba05400dbb537fbf49a653c3fe9b7ef25b89f907eb878c83b4ac43e453da9c13c0f91a4dba93b0dc2a965b73f725af6aed3ddd38f9107692c5d4ce2c3faf59a7496a77bb5bfeba413bd1442293b466479d5ef687fac78ace2cc29c370c30a5e67b634f1091204f0b96c5f59ea182215701a3884d1332bdf16eb8dc8f77fb9cc2eef2aea39d145cc51000ce467bc42ab9dc7661dfc69d16cdf035adae09b6dff462dbd7ff1c942d40277384d9f86ad280bb54785d6c8bad34ca9a0277ebdb1650b52d2037baa80fe64e2101bb74e1e79f761c129003c3c92c5351aa1f4495de06fea8167e24e83e5f2448a04f81f404d550977b7cacc8f9c6fc5a344bc5699e8be55fed3150a0f5ef6d6cc1f0738f838fb7d168ecf456e314cd0e5fe4d14168d0c5a02512e1e29f8c494ae718940c20b3b459b8885bf42ce6f6aecca35aba7c9c1e81aa11e43de8e60268601d6ec147c1d0fb46dbe2e072bf0a35fd105b72e2dbda9d08c09944e86a428896122c9d254ac99d1f82bcb403e6349cedfabcec7519ad040d6bc4d93724b31ecf069b35869f432e819e73231eed275d3036d2e800b622f7ac1f76b80a15872f7b6d100cafc0497bd2e4a8b709c04aa4d3403300e690ecc6030e7eaa0ff202020b4995e49a0d39573dd37e2d4647396bb709efb906de92aaae9ebca5d54b5e0240ab35992c8e684210498e55c1c2b12de0b8da466344a8af9cb987c56be79c804f440f98294dbe499c1c58ec6afda86a271eb00ccdab37b7f608bad669ebc621d436c2399889363a29d07d3d21acff4aa85beb771c8aed0745804d055066966a95eaf6bf1d08e77a501e98afa4e0410a013541026401d71108f23f52afcc555df9ebbbca753e65c3a4e44815d8ad16967cf9ecc8a0f643d3eaca167d802e7c9010d5106c4752477a3d067c3b6c0d09713afea5e4dcc009bad9dd9d3d644abe6b8fc3eb493fae15197f96e6f18626e8136677adb5e31b33988c6414f7c29086303374d26467f844750316413c9b6eaade91833532a7790fe7fadae7dae26647f7a222ce0a62d355048a652bd373c580fba05a62058d8f6a30413cedab95f94645f7e923bcc72e99210d0935250a26819ef82b2f25f8de6ade7156b468d2b92eaa259bf0a7ac33c75a57f9cc83f2bd3d603118cc903097315ca85eb8bb8c45f59f8a2a5ff04c7d225873f24936dc5cb0daa65b54953b0258c4bba0cf8e8f124d12fa84b4d4921be33ffe0d5912776ccaa532cb3d24ab3aee9ae686d6e7a211e80daf00f61d7c554ffc5c46be436476dd39436b9f9cf855e3f18c213465216e75698ea9cffdb6adcb5096ccbe0fec6e70bb8bdb46de250a3b1dda18dbdf6bc8af7e259304c300bcb8431b491818de073d743af061577e04fc41e0c7ef78514e8d79e53cb8cbc1eaa781767dfdf6b819b3783e851adec085caf113f12d25e8faf4fc68c05701d5c70b3d24f9f3e77be0ae29863afa1a4db3f49c2f7ba345170c389ce89e1fb9233225a8b1ff740aa00c14d5b4055507863ede65e904afa1df50cf8e1b76b1e92ea8d951a636b48a8e4d63e6586460c334e51ccf11fbc7a52e68dcf01eb5f37dd2f95bf4e1049d2a7c378c6421ba81728fc9d3d948b8d3c2fe4d9e9edc04f4d5bdd175186b63b3f884916c90599a7812a8695c957ca95c1ea9fae163243a1abc95efd0340014c0e945726876aedfbc240f9dbed442c62f6dcc41cc7a9747a5bc0c8addd002222eb47c825f2c68125bb5b94480930d31c698375a974e494b5ca8b9c58f39486d034b856abfb8789b11858bcba5815f03ab62417675333c19de4a7cd5af4a980af2a35cd10e6b7406764a1d195f879139e1b687f210e1ae68af52028228f7b260a84eb3c1eaca102dc0b732231a207399ca6660e803b708821fc7daeb3368db14d81377504c7fd87d8c4f7888e91a9e83e25a73d4836bcf7c1137e1de0619c85710c1cba007d52b3ddbec5c3dc7cd4b956d7fd39ae1a20022623db657242bc3153cd6803bbdcfb7a895356cff3e2d77141f403e7a20e6bab98ab48fdac1d087c5d0286b6ac597be78cf55cefeb48be4cfa35ffb9285530b53b44e4fe2ddbcd1abd896ca96f6ff45d46c40f6fb15b456d909d0d664800e2d5e3fc80b0940ece9cb752b1f0493daa9e8e8450e9db71b5a8cc224a9fad44e623888d833571c3c4e1d1397d0c222010e82f7f344b7e3895373da5e7c0c4f33fe88d986f6d55c7ad0b942cfcdb5764bd20fb01d670ec419cf91e9098d313bcff6c8e982a1e9a4909e719082701450323c1350d05da5ec5759f83ac10e7c5cb5303f7f521673c60e14827b5e3b11fe19a6c9865eebd67a25956b9c37de043ce0633af70f1e81e679cccfa00d7be87095b76529f86c94bd1d2072b70c274fc9c9466991c3ee3650d4542b9ead8da250894b2b7ccfa9ac99d3cc5f6b0e81385ae44db1f6a24f1ae3959081ea2f9777f6a70d8cd6341813bc1675b56ed6d45935c3043aa"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "9f067fabd0d05bb7a0e36be3f1114affaca6e6e65bc6cd135bc3f0df0763e7c71e71d30c67fd793904f4a27c83e50588b01099e3d01fcde66fbf2cf3632bec6fdc1260e1610e62f6583a99bf6fcb77b7a1ed9653c1dbc882bedd750c99eb3416e88050329c54479c70817e065cb71685b9ca08d0ee119368f37298c009c10a12d53d87b78e66cf2a02abb4a01982fd679a109ba05fd6a44c6dc58d0a19832f8a41f9936a8d13231bb865363f3f7c53396ac57d42650989a3799d30add69b9ee792ef95415ac529bf78dd89ee1ac6623931ade4a2b34a29b2cb83f6dc947cd40900a5ddcd6b"}]}, 0xb50}, 0x1, 0x0, 0x0, 0xc080}, 0x40) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, [], 0x1}, 0xb13}, 0x1c) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x27, "0016174c81000000080044944eaba71a4976e252922cb18f6e2e2abae83800012e0b3836005404b0e0301a4ce80900e30360163ee340b7679500800000000001000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006adce5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) chdir(&(0x7f0000000340)='./file0\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x8, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4006) [ 1581.495371][T21818] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011040000627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1581.629673][T21825] EXT4-fs (loop5): bad geometry: first data block 4278190079 is beyond end of filesystem (1080) 10:55:37 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000ff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1581.756446][T21834] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000e5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011050000627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:37 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x76e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:37 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000540), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 10:55:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1582.038819][T21854] EXT4-fs (loop5): bad geometry: first data block 4278190080 is beyond end of filesystem (1080) 10:55:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 10:55:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011020100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000ec0f5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1582.237769][T21889] EXT4-fs (loop5): bad geometry: first data block 4278190080 is beyond end of filesystem (1080) 10:55:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000001740)={0x1270, 0x12, 0x100, 0x70bd27, 0x0, {0x5, 0x0, 0xbd, 0x2, {0x4e21, 0x4e22, [0x0, 0x0, 0x80000000, 0x4537], [0x0, 0x0, 0x0, 0x8], 0x0, [0xbce, 0xb48]}, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6d3efaf61b0c465d374f0124076a9911a0321f5cb862126a0939885af4147a42caea4e1d7da5ee90fec438d919453a344bd58763c8372ad45d9f23d5543ced82940875dd8ee626d700bae8b434fb9f3ae130d48542d13a4467b60e4607b9af405c6869adc905cd2ef07f643700e1ba02776a3b1c56aa48be27df51717e1711dac5b46e23b4911713d271568f4465b93ba26ad6495ab7092e12d42c668332a3ff3746ccbd7650"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "7d4f51a1d092c20076c74c7455147ea0db5b21ac3b6e69"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "8aa8ebef0aea787b0f9ab3cd403e53b3d4e148f31f2403d4229b0e1350d901084e7ee4b4b3782c381c5724c7f23e66566f8daaa5fec151753acf6ab9fa50db4b9810d52dd61c3449b19d9f7180fb5863ad4afa84627a088bf7e0e4999262a842657d6c356ecb3a47c34bb34d87f6fa28b5f4281a87829b1dc54379473f4b8fa1bdc28df2e6582ffa9ca115"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "4e321ac33ac12d397290628052e4af2e845f259e377b60476b1a0162a0bbd9b02804f8eefcf860a80523d2f789c6c4c9b691b25bd96f17d0eb93f35cf6202e8f05508f71cb99a65a30"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "bce6c0aae86213d7454cd4771472df8cef6e89210a34662ae37431d8608243414e6f334827c1ca2118231beff01265486b0615378331020e99451f9a8189ac47f3fd35ef53e0b18a2fdc583e51fc3c2bfaf22544c3f279bba07c90cba5ccf994e27b80014afcdd202f8b164c5d6ed685710657"}, @INET_DIAG_REQ_BYTECODE={0xfc4, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "9f067fabd0d05bb7a0e36be3f1114affaca6e6e65bc6cd135bc3f0df0763e7c71e71d30c67fd793904f4a27c83e50588b01099e3d01fcd"}]}, 0x1270}, 0x1, 0x0, 0x0, 0xc080}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x8, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) 10:55:38 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000fff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) [ 1582.399977][T21898] __nla_validate_parse: 2 callbacks suppressed [ 1582.399996][T21898] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011030100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:38 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x77e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1582.501029][T21920] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000001740)={0x1270, 0x12, 0x100, 0x70bd27, 0x0, {0x5, 0x0, 0xbd, 0x2, {0x4e21, 0x4e22, [0x0, 0x0, 0x80000000, 0x4537], [0x0, 0x0, 0x0, 0x8], 0x0, [0xbce, 0xb48]}, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6d3efaf61b0c465d374f0124076a9911a0321f5cb862126a0939885af4147a42caea4e1d7da5ee90fec438d919453a344bd58763c8372ad45d9f23d5543ced82940875dd8ee626d700bae8b434fb9f3ae130d48542d13a4467b60e4607b9af405c6869adc905cd2ef07f643700e1ba02776a3b1c56aa48be27df51717e1711dac5b46e23b4911713d271568f4465b93ba26ad6495ab7092e12d42c668332a3ff3746ccbd7650"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "7d4f51a1d092c20076c74c7455147ea0db5b21ac3b6e69"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "8aa8ebef0aea787b0f9ab3cd403e53b3d4e148f31f2403d4229b0e1350d901084e7ee4b4b3782c381c5724c7f23e66566f8daaa5fec151753acf6ab9fa50db4b9810d52dd61c3449b19d9f7180fb5863ad4afa84627a088bf7e0e4999262a842657d6c356ecb3a47c34bb34d87f6fa28b5f4281a87829b1dc54379473f4b8fa1bdc28df2e6582ffa9ca115"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "4e321ac33ac12d397290628052e4af2e845f259e377b60476b1a0162a0bbd9b02804f8eefcf860a80523d2f789c6c4c9b691b25bd96f17d0eb93f35cf6202e8f05508f71cb99a65a30"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "bce6c0aae86213d7454cd4771472df8cef6e89210a34662ae37431d8608243414e6f334827c1ca2118231beff01265486b0615378331020e99451f9a8189ac47f3fd35ef53e0b18a2fdc583e51fc3c2bfaf22544c3f279bba07c90cba5ccf994e27b80014afcdd202f8b164c5d6ed685710657"}, @INET_DIAG_REQ_BYTECODE={0xfc4, 0x1, "e4354528c5b6bde6476cb76f76b0798d53393a2ba05400dbb537fbf49a653c3fe9b7ef25b89f907eb878c83b4ac43e453da9c13c0f91a4dba93b0dc2a965b73f725af6aed3ddd38f9107692c5d4ce2c3faf59a7496a77bb5bfeba413bd1442293b466479d5ef687fac78ace2cc29c370c30a5e67b634f1091204f0b96c5f59ea182215701a3884d1332bdf16eb8dc8f77fb9cc2eef2aea39d145cc51000ce467bc42ab9dc7661dfc69d16cdf035adae09b6dff462dbd7ff1c942d40277384d9f86ad280bb54785d6c8bad34ca9a0277ebdb1650b52d2037baa80fe64e2101bb74e1e79f761c129003c3c92c5351aa1f4495de06fea8167e24e83e5f2448a04f81f404d550977b7cacc8f9c6fc5a344bc5699e8be55fed3150a0f5ef6d6cc1f0738f838fb7d168ecf456e314cd0e5fe4d14168d0c5a02512e1e29f8c494ae718940c20b3b459b8885bf42ce6f6aecca35aba7c9c1e81aa11e43de8e60268601d6ec147c1d0fb46dbe2e072bf0a35fd105b72e2dbda9d08c09944e86a428896122c9d254ac99d1f82bcb403e6349cedfabcec7519ad040d6bc4d93724b31ecf069b35869f432e819e73231eed275d3036d2e800b622f7ac1f76b80a15872f7b6d100cafc0497bd2e4a8b709c04aa4d3403300e690ecc6030e7eaa0ff202020b4995e49a0d39573dd37e2d4647396bb709efb906de92aaae9ebca5d54b5e0240ab35992c8e684210498e55c1c2b12de0b8da466344a8af9cb987c56be79c804f440f98294dbe499c1c58ec6afda86a271eb00ccdab37b7f608bad669ebc621d436c2399889363a29d07d3d21acff4aa85beb771c8aed0745804d055066966a95eaf6bf1d08e77a501e98afa4e0410a013541026401d71108f23f52afcc555df9ebbbca753e65c3a4e44815d8ad16967cf9ecc8a0f643d3eaca167d802e7c9010d5106c4752477a3d067c3b6c0d09713afea5e4dcc009bad9dd9d3d644abe6b8fc3eb493fae15197f96e6f18626e8136677adb5e31b33988c6414f7c29086303374d26467f844750316413c9b6eaade91833532a7790fe7fadae7dae26647f7a222ce0a62d355048a652bd373c580fba05a62058d8f6a30413cedab95f94645f7e923bcc72e99210d0935250a26819ef82b2f25f8de6ade7156b468d2b92eaa259bf0a7ac33c75a57f9cc83f2bd3d603118cc903097315ca85eb8bb8c45f59f8a2a5ff04c7d225873f24936dc5cb0daa65b54953b0258c4bba0cf8e8f124d12fa84b4d4921be33ffe0d5912776ccaa532cb3d24ab3aee9ae686d6e7a211e80daf00f61d7c554ffc5c46be436476dd39436b9f9cf855e3f18c213465216e75698ea9cffdb6adcb5096ccbe0fec6e70bb8bdb46de250a3b1dda18dbdf6bc8af7e259304c300bcb8431b491818de073d743af061577e04fc41e0c7ef78514e8d79e53cb8cbc1eaa781767dfdf6b819b3783e851adec085caf113f12d25e8faf4fc68c05701d5c70b3d24f9f3e77be0ae29863afa1a4db3f49c2f7ba345170c389ce89e1fb9233225a8b1ff740aa00c14d5b4055507863ede65e904afa1df50cf8e1b76b1e92ea8d951a636b48a8e4d63e6586460c334e51ccf11fbc7a52e68dcf01eb5f37dd2f95bf4e1049d2a7c378c6421ba81728fc9d3d948b8d3c2fe4d9e9edc04f4d5bdd175186b63b3f884916c90599a7812a8695c957ca95c1ea9fae163243a1abc95efd0340014c0e945726876aedfbc240f9dbed442c62f6dcc41cc7a9747a5bc0c8addd002222eb47c825f2c68125bb5b94480930d31c698375a974e494b5ca8b9c58f39486d034b856abfb8789b11858bcba5815f03ab62417675333c19de4a7cd5af4a980af2a35cd10e6b7406764a1d195f879139e1b687f210e1ae68af52028228f7b260a84eb3c1eaca102dc0b732231a207399ca6660e803b708821fc7daeb3368db14d81377504c7fd87d8c4f7888e91a9e83e25a73d4836bcf7c1137e1de0619c85710c1cba007d52b3ddbec5c3dc7cd4b956d7fd39ae1a20022623db657242bc3153cd6803bbdcfb7a895356cff3e2d77141f403e7a20e6bab98ab48fdac1d087c5d0286b6ac597be78cf55cefeb48be4cfa35ffb9285530b53b44e4fe2ddbcd1abd896ca96f6ff45d46c40f6fb15b456d909d0d664800e2d5e3fc80b0940ece9cb752b1f0493daa9e8e8450e9db71b5a8cc224a9fad44e623888d833571c3c4e1d1397d0c222010e82f7f344b7e3895373da5e7c0c4f33fe88d986f6d55c7ad0b942cfcdb5764bd20fb01d670ec419cf91e9098d313bcff6c8e982a1e9a4909e719082701450323c1350d05da5ec5759f83ac10e7c5cb5303f7f521673c60e14827b5e3b11fe19a6c9865eebd67a25956b9c37de043ce0633af70f1e81e679cccfa00d7be87095b76529f86c94bd1d2072b70c274fc9c9466991c3ee3650d4542b9ead8da250894b2b7ccfa9ac99d3cc5f6b0e81385ae44db1f6a24f1ae3959081ea2f9777f6a70d8cd6341813bc1675b56ed6d45935c3043aaa2a226c0371181ac18e7232f4e998a570d82167aebd8635da2f25f077b814c4a58e34ded1b7301b6607a71271731e1e6c9875f22b6ef26d7adfd99d4cc948b43ef47e1287e5ab822856d0cb28a7564a3e92db877869ac97518a2a5503cf972eb869d2e6381c76c2ed6e744cf9a45b185e755e577b039449d3e1f8f5579c5c0a5ddda5fce074624c9b87921cd7d0bbb6899c7b760b5747f648f3505bf39c72462b98e114de2c964dba4009c8ce4d1e33e2393228a26a13972600f58faf7917d72d04d3affd882208863e6c73bfa236c2b90a5cc750ef6846860272011e2ff56c535e9dafb6622aed1136ae890d7622299e42d016e83f3b0df1cdca792a06d96fca8c9b4c4f8f2ba28bff128228fd7ba970171960997a95375b0008a319af932369f0a2e3482683665e3589fb882630e41a647ce96ac686d37b519a2c657cc6d26cac7b43befd1adb044576c09c829db50525ff83d6eecea552febb60d956058612499c1c74522521c2609ece3fbda87f73b6f799f1829938f79759489b5bece3f091cc6a83c910b7d1a4b41af6661f440d9285998643e83cab1793d150d659853d8071c7e0ec108ac606b8c6a7d59c22638297b52eadce7f5737713588c51607c69412d6b940dba419961555b1eb8c78a78aaac00747805cc994aac928ffd1b624cf8e12d56571d394c124601ac4e98bbb3f3507d55bddb724ff3aeb7970b11938acc4c680a4fedb1b7da63b1ee17bf368371148596001d2beb33edc5b6f571d6d5e5d6a34fda623e4e8b2692c64db0ff3039d4cc70475ee64df7de4dfd5d82786598f608efb4860f302c990d37309ad1684c0375a24b279b1e89eac9390cd47ef2791f304ff099033c521a04a71fb765e43b13ad9fa87ff40e861067644725dfdb895c94121adff30aea9cabbb97a497c6683f7d986368b87ab41f0d44f1a4e387bb51d8f21c610838bd2bc88a71098180917ea319d836214f06bbc864f04448c4668dfc19570abddcb847ae9e3ed748d14eb8dea5d8abf96029b7ce20df5ea464d879b3469941be46bb17299e4a66b529035997a1d6bcac6f51d280c8d0b0514ac4403346b9988072eb8093897b493526ad56720a43c14dc00fd55b436b898f83bd70ed07b7898012b26fe7e92220027ca25ae59ad343c3656e9d09911c12e5e80b353aee1f1972513687b6af20f767a6660679fb9f93a3ebd7bf3a7ace2c429a1c10fc675d73e78c46ac79a1f3a3d5f08982b7d9a3654904c784b5fdda565770136f9615d60d634cae3f93cb7288cb27a91f08fc8052950dacb0f47828be6f5f7aa42f4e4613ac10e7bde7372041f74280f9c0c4dc7190f4eecbc028e2d32d1b4158c3c66bf45d2a3be9b6a3ece780b83d06a626ace683337041fc6c6d7ee06598f7f46fb155c544a2d81d30141f38cdbe70ddf2c963f23784d1248e369d3ebc45826758aa831c17fbbc50d98bf6e97ac5172b0f2eae0bf885440de5e9f7b2765419eb7fc5845baf156af3140af5013a2fbde4660d8322cbbe45fee504846dfa5dd0b13cb70d8fd6ac70495829d8c6d939898af7c991696600ee1fc1c1b38133f2cf11c8e9504b7d4f89ad513a04afb3afa2a7fc85895f1b7a0b626f12ca79bac72cd1913ce1b3d52b594b02aed9869144dfe0de74bc5b5a2bfb3cf14eebee641db10fbd839082c1a6bae82412f926bb63f0467a76e13136fbb1f6f30b9e347062b148b05de0aee30ef372dfe047b8682feff76b456003e33ba34dfdc8ccc20a14d119c006a0f06ed01cfd9411044449a4168f57d86ad07a63af1d0ed5f8a6f31e9662f953d29cb0634c5b9697b81ecf3ae99b3f8fcbd223d3c420401ed3ba5007c230821aeb8bc43f34e34cbc32c9012f32bfc32abee58467e48bd272af5adab4e3047ea8cccadee2e7e3494bbaad7054f57188f8647ce1a92c3919097b228b1a6dd0448f4a0355e794779a0af6da2f8a64da558a37105a52aacc18dbc9886d249da95e85069b118a62f4859014461c15acc6a4d50046227234eb671594c292c77ecefff8e60e92e2e1ab5de8b592556a96adae50267c5a80e035b650549343cc5f57a4ed5d6e78e27552ea97e08ebdf2198beb16a7e47667c4f04c3538b8cbd8c604cd79a9adb123ce6ec08694f36c291dce99129bad9d1fc49425528064bfedd364d66b847ab7374ae73d50cc3b27ecde5a3f6be4c68a7c23753e6ac5d46027fdaf0734ecf60d0c89680c279f8bf756ade9dd699e1ffc063ba150ca9c9762f824a17018f002875d84149ff1aa7c184a91d6cee19a044eaf07761ae78a77f3f2bb4e1c0b157c789df906c410f2f5e8a2457cfef39b428999f5796192bd6d2e4975e49fdae5e726c546bed70edd04b72b0903b7e2a8d159578948f90afd0fa4ecc7e97eb264d7f293bb8c1540db6dfb1c52769891624d0e8001a26d106ae984257c5f97ff9ba4cbe32e326fbbff0842e5735cdd2d4d78e98445e564b4109b55eac3abc7ccca7d0fcfb2c79f26bccafcabb8a5788ad403d8ad5fc0bcac75f8111e39da5229955d545807e8a71e793cc7af334ddab89dbb75682e3ef3db843d9ed8358fb81f1ac7d57eef035586222e034f1f69f56737d032b05a8630d8eaa9a0c9706eef7e5a0cef1803d0b3550fe53b78887c79dae86a65377a93e998989e9aaeac8b29a07e4b679a0b9e0ed30559b2dd8efbdde8de394f3dbe392498cb42fdaad3c796e97e6081be7d4135935bbe9d6008380f5dbf6a4e0a5018318668b7b89b2f87ab83ac87b4403bd294b4b86e639a5e4fe2e22e45801fccd5959063668768ec9605e295b734a2f79bac64ea9a73e9ffd1e9ce10f6f776b0460d39436c2cdf8fd2e2e3c85e034c79ca7578fb2cb002b16880c813ecef43bb1adc33e84f917b79b89d5f9866e5b958bda9723ecb63a8cce82b79a6efde358dbe39fbb2bc082707d73b3827159debbb19d5d36a422fb76320a55f03902f9a6f3c398e3eee06ca53ece29e15e9f3001e1b0dc5cc57d3be980a818b2cf72bb4ad292233b9cfd30edd5ee8fe54a0a2b01eb7e3b6d4bf8a7909ebf70d6708c88a104908d3a76581b08c952fcadeeb45d8a5cb61c424c399ab93b13034097a66bd60cd0cd22abeb6c2027951ff5f46c7d21ff00adb0281014a71fd694687fb36bbb756b91e2bab"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "9f067fabd0d05bb7a0e36be3f1114affaca6e6e65bc6cd135bc3f0df0763e7c71e71d30c67fd793904f4a27c83e50588b01099e3d01fcd"}]}, 0x1270}, 0x1, 0x0, 0x0, 0xc080}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x8, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) 10:55:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) [ 1582.599390][T21930] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000205400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1582.700995][T21924] EXT4-fs (loop5): bad geometry: first data block 4279173120 is beyond end of filesystem (1080) [ 1582.747461][T21947] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000001740)={0x1270, 0x12, 0x100, 0x70bd27, 0x0, {0x5, 0x0, 0xbd, 0x2, {0x4e21, 0x4e22, [0x0, 0x0, 0x80000000, 0x4537], [0x0, 0x0, 0x0, 0x8], 0x0, [0xbce, 0xb48]}, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6d3efaf61b0c465d374f0124076a9911a0321f5cb862126a0939885af4147a42caea4e1d7da5ee90fec438d919453a344bd58763c8372ad45d9f23d5543ced82940875dd8ee626d700bae8b434fb9f3ae130d48542d13a4467b60e4607b9af405c6869adc905cd2ef07f643700e1ba02776a3b1c56aa48be27df51717e1711dac5b46e23b4911713d271568f4465b93ba26ad6495ab7092e12d42c668332a3ff3746ccbd7650"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "7d4f51a1d092c20076c74c7455147ea0db5b21ac3b6e69"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "8aa8ebef0aea787b0f9ab3cd403e53b3d4e148f31f2403d4229b0e1350d901084e7ee4b4b3782c381c5724c7f23e66566f8daaa5fec151753acf6ab9fa50db4b9810d52dd61c3449b19d9f7180fb5863ad4afa84627a088bf7e0e4999262a842657d6c356ecb3a47c34bb34d87f6fa28b5f4281a87829b1dc54379473f4b8fa1bdc28df2e6582ffa9ca115"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "4e321ac33ac12d397290628052e4af2e845f259e377b60476b1a0162a0bbd9b02804f8eefcf860a80523d2f789c6c4c9b691b25bd96f17d0eb93f35cf6202e8f05508f71cb99a65a30"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "bce6c0aae86213d7454cd4771472df8cef6e89210a34662ae37431d8608243414e6f334827c1ca2118231beff01265486b0615378331020e99451f9a8189ac47f3fd35ef53e0b18a2fdc583e51fc3c2bfaf22544c3f279bba07c90cba5ccf994e27b80014afcdd202f8b164c5d6ed685710657"}, @INET_DIAG_REQ_BYTECODE={0xfc4, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "9f067fabd0d05bb7a0e36be3f1114affaca6e6e65bc6cd135bc3f0df0763e7c71e71d30c67fd793904f4a27c83e50588b01099e3d01fcd"}]}, 0x1270}, 0x1, 0x0, 0x0, 0xc080}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x8, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) 10:55:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011040100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:38 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x78e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1582.926546][T21965] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:39 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffff7ff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000003e5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1583.055253][T21980] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:39 executing program 4: r0 = eventfd2(0x75, 0x800) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x8) 10:55:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011050100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x2000, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) [ 1583.304417][T21993] EXT4-fs (loop5): bad geometry: first data block 4294443007 is beyond end of filesystem (1080) [ 1583.376701][T21999] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1f, &(0x7f00000002c0)=""/226, &(0x7f0000000040)=0xe2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) 10:55:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011060100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1583.491636][T22022] EXT4-fs (loop5): bad geometry: first data block 4294443007 is beyond end of filesystem (1080) 10:55:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000003f5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:39 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x79e40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:39 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffffbff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:39 executing program 4: [ 1583.768010][T22047] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000485400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011070100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:39 executing program 4: 10:55:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1584.000948][T22066] EXT4-fs (loop5): bad geometry: first data block 4294705151 is beyond end of filesystem (1080) [ 1584.100963][T22079] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:40 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x7a000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:40 executing program 4: 10:55:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110a0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:40 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fff7ffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000004c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:40 executing program 4: 10:55:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1584.479553][T22112] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110c0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:40 executing program 4: [ 1584.552649][T22114] EXT4-fs (loop5): bad geometry: first data block 4294965247 is beyond end of filesystem (1080) 10:55:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000065585400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:40 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x7ae40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1584.697185][T22138] EXT4-fs (loop5): bad geometry: first data block 4294965247 is beyond end of filesystem (1080) 10:55:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:40 executing program 4: 10:55:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110e0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:40 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fffbffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:41 executing program 4: [ 1585.081739][T22170] EXT4-fs (loop5): bad geometry: first data block 4294966271 is beyond end of filesystem (1080) 10:55:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011100100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:41 executing program 4: 10:55:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000605400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:41 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000f9fdffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:41 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x7be40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:41 executing program 4: 10:55:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011480100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1585.587418][T22220] EXT4-fs (loop5): bad geometry: first data block 4294966777 is beyond end of filesystem (1080) 10:55:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000058655400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:41 executing program 4: 10:55:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280114c0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:41 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000007fffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:41 executing program 4: 10:55:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000685400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:42 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x7ce40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011600100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:42 executing program 4: 10:55:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1586.132200][T22277] EXT4-fs (loop5): bad geometry: first data block 4294967167 is beyond end of filesystem (1080) 10:55:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000006c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:42 executing program 4: 10:55:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011680100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1586.425065][T22318] EXT4-fs (loop5): bad geometry: first data block 4294967167 is beyond end of filesystem (1080) 10:55:42 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000008cffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:42 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x7de40100}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:42 executing program 4: 10:55:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000745400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280116c0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:42 executing program 4: [ 1586.886969][T22356] EXT4-fs (loop5): bad geometry: first data block 4294967180 is beyond end of filesystem (1080) 10:55:42 executing program 4: 10:55:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011740100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1587.091210][T22390] EXT4-fs (loop5): bad geometry: first data block 4294967180 is beyond end of filesystem (1080) 10:55:43 executing program 4: 10:55:43 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000f5ffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000007a5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:43 executing program 4: 10:55:43 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x86200000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 10:55:43 executing program 4: 10:55:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280117a0100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000815400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:43 executing program 4: 10:55:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1587.687233][T22446] __nla_validate_parse: 10 callbacks suppressed [ 1587.687245][T22446] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1587.707355][T22428] EXT4-fs (loop5): bad geometry: first data block 4294967285 is beyond end of filesystem (1080) 10:55:43 executing program 4: 10:55:43 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x915087b3}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1587.844616][T22469] EXT4-fs (loop5): bad geometry: first data block 4294967285 is beyond end of filesystem (1080) 10:55:44 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000f6ffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 10:55:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000fec5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 4: 10:55:44 executing program 4: 10:55:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000500627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000300128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 4: [ 1588.320091][T22504] EXT4-fs (loop5): bad geometry: first data block 4294967286 is beyond end of filesystem (1080) 10:55:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 10:55:44 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xa2000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:44 executing program 4: [ 1588.502776][T22539] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.528298][T22536] EXT4-fs (loop5): bad geometry: first data block 4294967286 is beyond end of filesystem (1080) 10:55:44 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fbffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000600627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 4: 10:55:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000a00128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0xd00}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 10:55:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000900627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:45 executing program 4: [ 1589.029756][T22582] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1589.050828][T22567] EXT4-fs (loop5): bad geometry: first data block 4294967291 is beyond end of filesystem (1080) [ 1589.063782][T22582] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000a00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:45 executing program 0: 10:55:45 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xaa000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000025400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:45 executing program 4: 10:55:45 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000feffffff0100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:45 executing program 0: 10:55:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000b00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:45 executing program 4: 10:55:45 executing program 0: 10:55:45 executing program 4: 10:55:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000035400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:45 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xb3875091}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011c00e00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1589.679512][T22630] EXT4-fs (loop5): bad geometry: first data block 4294967294 is beyond end of filesystem (1080) 10:55:45 executing program 4: 10:55:45 executing program 0: [ 1589.852274][T22657] EXT4-fs (loop5): bad geometry: first data block 4294967294 is beyond end of filesystem (1080) 10:55:45 executing program 0: 10:55:46 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:46 executing program 4: 10:55:46 executing program 0: 10:55:46 executing program 4: 10:55:46 executing program 0: 10:55:46 executing program 4: [ 1590.166174][T22671] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1590.249868][T22684] EXT4-fs (loop5): fragment/cluster size (2048) != block size (1024) 10:55:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000045400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:46 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xe4ffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:46 executing program 4: 10:55:46 executing program 0: 10:55:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:46 executing program 4: [ 1590.480292][T22700] EXT4-fs (loop5): fragment/cluster size (2048) != block size (1024) 10:55:46 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000800000000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000055400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:46 executing program 0: 10:55:46 executing program 4: 10:55:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001200627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:46 executing program 4: 10:55:46 executing program 0: 10:55:46 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xf4000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:46 executing program 4: 10:55:47 executing program 0: [ 1590.977417][T22743] EXT4-fs (loop5): fragment/cluster size (2048) != block size (1024) 10:55:47 executing program 0: 10:55:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000065400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1591.198925][T22767] EXT4-fs (loop5): fragment/cluster size (2048) != block size (1024) 10:55:47 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000200000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:47 executing program 4: 10:55:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:47 executing program 0: 10:55:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000075400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:47 executing program 4: 10:55:47 executing program 0: 10:55:47 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xfeff0000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001400627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:47 executing program 4: 10:55:47 executing program 0: [ 1591.635638][T22799] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 61)! [ 1591.741061][T22799] EXT4-fs (loop5): group descriptors corrupted! 10:55:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000a5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1591.920735][T22831] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 61)! [ 1591.964757][T22831] EXT4-fs (loop5): group descriptors corrupted! 10:55:48 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000300000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:48 executing program 4: 10:55:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011011800627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:48 executing program 0: 10:55:48 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xfeffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:48 executing program 0: 10:55:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7fff) [ 1592.231100][T22862] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002000627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:48 executing program 0: [ 1592.415099][T22863] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 61)! [ 1592.451274][T22879] new mount options do not match the existing superblock, will be ignored [ 1592.513226][T22863] EXT4-fs (loop5): group descriptors corrupted! [ 1592.544350][T22879] new mount options do not match the existing superblock, will be ignored 10:55:48 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xff000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000e5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:48 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000400000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:48 executing program 4: 10:55:48 executing program 0: 10:55:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011032400627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:48 executing program 0: 10:55:49 executing program 4: 10:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000105400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1592.989252][T22925] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:49 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xffff0300}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002500627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1593.100466][T22927] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 61)! 10:55:49 executing program 0: [ 1593.164662][T22927] EXT4-fs (loop5): group descriptors corrupted! 10:55:49 executing program 4: 10:55:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011033600627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:49 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000500000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:49 executing program 4: 10:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000003e5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:49 executing program 0: [ 1593.527353][T22975] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:49 executing program 0: 10:55:49 executing program 0: 10:55:49 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xffffff7f}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:49 executing program 4: 10:55:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011033900627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000485400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:49 executing program 0: [ 1593.780965][T22986] EXT4-fs (loop5): bad geometry: first data block 1280 is beyond end of filesystem (1080) 10:55:49 executing program 0: [ 1593.935884][T23011] EXT4-fs (loop5): bad geometry: first data block 1280 is beyond end of filesystem (1080) 10:55:50 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000600000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:50 executing program 0: 10:55:50 executing program 4: 10:55:50 executing program 0: [ 1594.076280][T23007] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 10:55:50 executing program 4: 10:55:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000004c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:50 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xffffffe4}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011003e00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:50 executing program 0: 10:55:50 executing program 4: [ 1594.392869][T23038] EXT4-fs (loop5): bad geometry: first data block 1536 is beyond end of filesystem (1080) 10:55:50 executing program 0: 10:55:50 executing program 4: 10:55:50 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000700000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:50 executing program 0: 10:55:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011004000627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000605400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:50 executing program 4: 10:55:50 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xfffffffe}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:50 executing program 0: 10:55:50 executing program 4: [ 1594.969716][T23088] EXT4-fs (loop5): bad geometry: first data block 1792 is beyond end of filesystem (1080) 10:55:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:51 executing program 0: 10:55:51 executing program 4: 10:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000685400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1595.214790][T23110] EXT4-fs (loop5): bad geometry: first data block 1792 is beyond end of filesystem (1080) 10:55:51 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000800000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:51 executing program 0: 10:55:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006800627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:51 executing program 4: 10:55:51 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0xffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000006c5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:51 executing program 4: 10:55:51 executing program 0: 10:55:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000200627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:51 executing program 4: 10:55:51 executing program 0: [ 1595.765274][T23153] EXT4-fs (loop5): bad geometry: first data block 2048 is beyond end of filesystem (1080) 10:55:51 executing program 4: 10:55:52 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000900000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:52 executing program 0: 10:55:52 executing program 4: 10:55:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:52 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000745400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:52 executing program 0: 10:55:52 executing program 4: 10:55:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000007a5400128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1596.289912][T23203] EXT4-fs (loop5): bad geometry: first data block 2304 is beyond end of filesystem (1080) 10:55:52 executing program 0: 10:55:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000400627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:52 executing program 4: [ 1596.527584][T23231] EXT4-fs (loop5): bad geometry: first data block 2304 is beyond end of filesystem (1080) 10:55:52 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000a00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:52 executing program 0: 10:55:52 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:52 executing program 4: 10:55:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000006800128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:52 executing program 0: 10:55:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000500627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:52 executing program 4: [ 1596.850555][T23272] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:52 executing program 0: 10:55:52 executing program 4: 10:55:53 executing program 4: 10:55:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000300128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1597.014712][T23269] EXT4-fs (loop5): bad geometry: first data block 2560 is beyond end of filesystem (1080) [ 1597.195292][T23298] EXT4-fs (loop5): bad geometry: first data block 2560 is beyond end of filesystem (1080) [ 1597.210673][T23308] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:53 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000c00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:53 executing program 0: 10:55:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000600627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:53 executing program 4: 10:55:53 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x3}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000000a00128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:53 executing program 0: 10:55:53 executing program 4: 10:55:53 executing program 0: 10:55:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000800627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:53 executing program 4: [ 1597.651901][T23325] EXT4-fs (loop5): bad geometry: first data block 3072 is beyond end of filesystem (1080) 10:55:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000006800128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1597.812661][T23362] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1597.926138][T23366] EXT4-fs (loop5): bad geometry: first data block 3072 is beyond end of filesystem (1080) 10:55:54 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002300000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:54 executing program 0: 10:55:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000900627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:54 executing program 4: 10:55:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005402128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 4: 10:55:54 executing program 0: 10:55:54 executing program 4: [ 1598.249768][T23391] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000a00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005403128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 0: [ 1598.398640][T23393] EXT4-fs (loop5): bad geometry: first data block 8960 is beyond end of filesystem (1080) [ 1598.573909][T23425] EXT4-fs (loop5): bad geometry: first data block 8960 is beyond end of filesystem (1080) [ 1598.594221][T23428] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:54 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002d00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:54 executing program 4: 10:55:54 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x5}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000b00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 0: 10:55:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005404128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:54 executing program 0: 10:55:54 executing program 4: [ 1598.879371][T23455] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001000627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1598.979366][T23443] EXT4-fs (loop5): bad geometry: first data block 11520 is beyond end of filesystem (1080) 10:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005405128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:55 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:55 executing program 0: [ 1599.235984][T23484] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1599.250748][T23479] EXT4-fs (loop5): bad geometry: first data block 11520 is beyond end of filesystem (1080) 10:55:55 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003d00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:55 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x80, 0x2, 0x0, 0x0, 0x10004, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xb549}, 0x40c80, 0x4, 0xc8, 0x7, 0x0, 0xa288, 0x6046}, 0x0, 0x3, 0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000280), 0x4, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) 10:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005406128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001100627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) [ 1599.529236][T23516] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005407128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1599.637812][T23512] EXT4-fs (loop5): bad geometry: first data block 15616 is beyond end of filesystem (1080) 10:55:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(0xffffffffffffffff, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}) [ 1599.772239][T23542] EXT4-fs (loop5): bad geometry: first data block 15616 is beyond end of filesystem (1080) 10:55:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001200627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:55 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:55 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004800000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1599.920116][T23559] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540a128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:56 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 1600.079337][T23576] EXT4-fs (loop5): bad geometry: first data block 18432 is beyond end of filesystem (1080) 10:55:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1600.232042][T23605] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.255041][T23599] EXT4-fs (loop5): bad geometry: first data block 18432 is beyond end of filesystem (1080) 10:55:56 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:56 executing program 4: 10:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540c128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:56 executing program 0: 10:55:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001400627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:56 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004c00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a012b3260004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:55:56 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfd37ff58b659bbf65d6a2b2e441a0e0c44a3d9abeb7d90f0d01107d0e077d0d67096da85a6d22c36fac7585a35892211b5194d55e0ad396b242ac56b00fbd89c9ff98e0fb30333b4e890581b21245b36f9ab48e8f83bfcc455d81d7aff06587ca3d455f61f4258a09db4a85d59af344928e136cf95a1898f97d5031c56550cfb29d367f2fb2674b908612cea6c93ade32c8e740e3bbf6c71b00010000e13b72d8"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1600.699313][T23639] EXT4-fs (loop5): bad geometry: first data block 19456 is beyond end of filesystem (1080) [ 1600.718940][T23630] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d0000b}) 10:55:56 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000006800000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002500627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:56 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xa}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540e128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r0, r1, 0x0, 0x10000000000f) 10:55:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @multicast2}}]}, 0x110) 10:55:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011003e00627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005410128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1601.270758][T23689] EXT4-fs (loop5): bad geometry: first data block 26624 is beyond end of filesystem (1080) 10:55:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:55:57 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea54994e702d609331ab3c70aa6b030ed69efddccea3e793e8287051d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809b2bc7b716441ef6b2b3c690a88728fe3c766be4825548e085c7866d7ac33165a2178a5c647457a8713e7b70a85bbdb078320eafa48d43c96aebc3da20d188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f633b5b0402ffa95acb51428785ae09fdae241f51f7ff22745696f1ffe2ca9ed226213275a566ae3f64fb2dfe777d16832bbb703ea39868fcf0fe11894d2c876e4809a16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e258d5d74a133278866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7316bb7c31f8e867734a5a66f0465d7183fc05c0d804ac719fa87f64cd637deb88254e9ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea01662abbc567a9db53997aa9abd409b5cb990ea1bc76127057ad2ae000000000000000000000000000000000000000000448495daae181b1c6f442f2f739ce0b3e4377f359887cdf898a4463717a18f4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435b0100008000000000a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ce2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a1d1f872d0000000000ddad9444a6f712c20fd0d908c376316a7b26cbaad28bc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4676997286042b43c6cb7e2a01a16ae5757072574afadf6962a40ed57025b5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00a378771ee3c704a3947879f4ea1f031cd8432a27bc2cb985d55dc9dda125e9f2e5e0d9f2e69559e4c477ce19c798177c6e8afd63019e1bcbafae31b279da000615ad2f98b9cbcc7eaca2ef509f2aaf0d6b5f6fd16ed11e4da5ed2993ff7e5779b5f18167b2addd98a75e18e9d7ee24c491f99d5645304fd80c63616f1588c88c9461a887762ca7c6ab30111fe505e2b451c702f4fbfa4695288f8b94a3c2a5301ebb5203c43be94f1050cdebc18cc899d5d3b6f27b41ede904290451a23354453860fb28206cf0b606dc2424e58983f54b4dee173c940805"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6a, 0xcf, &(0x7f0000000580)=""/207, 0x0, 0xa, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1601.411403][T23725] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006300627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000543e128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1601.553140][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:57 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000006c00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:57 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x48}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x6a, &(0x7f0000000000), 0x4) 10:55:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006800627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005000)=ANY=[@ANYBLOB="8c4c000030001fffffff00000000000000000000784c0100500001000c000100736b6265646974003c0002801800090000000000000000000000000000000000000000000800030000000000180002"], 0x4c8c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000007, 0x0) 10:55:57 executing program 0: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x0, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x80, 0x2, 0x0, 0x0, 0x10004, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xb549}, 0x40c80, 0x4, 0xc8, 0x7, 0x0, 0xa288, 0x6046}, 0x0, 0x3, 0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000280), 0x4, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) syncfs(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 10:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005448128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2}, 0x1c) 10:55:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001801627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000007400000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:58 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x4c}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005000)=ANY=[@ANYBLOB="8c4c000030001fffffff00000000000000000000784c0100500001000c000100736b6265646974"], 0x4c8c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000007, 0x0) 10:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000544c128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002403627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0xfffffff7}, 0x8) [ 1602.495773][T23826] EXT4-fs (loop5): bad geometry: first data block 29696 is beyond end of filesystem (1080) 10:55:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011003603627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000705deffff3f07a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x1}}, @TCA_RSVP_SRC={0x8}]}}]}, 0x68}}, 0x0) 10:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005460128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 10:55:58 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x68}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:55:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000705deffff3f07a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 1602.726576][T23861] EXT4-fs (loop5): bad geometry: first data block 29696 is beyond end of filesystem (1080) 10:55:58 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000007a00000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011003903627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x210) 10:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005468128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1603.049195][T23900] EXT4-fs (loop5): bad geometry: first data block 31232 is beyond end of filesystem (1080) 10:55:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r3, r3, &(0x7f0000000240), 0x7ffd) 10:55:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000005627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000546c128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:59 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003901000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000705deffff3f07a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 10:55:59 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x6c}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1603.380107][T23948] __nla_validate_parse: 16 callbacks suppressed [ 1603.380121][T23948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 1603.472983][T23963] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000020627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1603.564447][T23952] EXT4-fs (loop5): bad geometry: first data block 80128 is beyond end of filesystem (1080) 10:55:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005474128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:55:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 10:55:59 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003a01000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:55:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) 10:55:59 executing program 0: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x0, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) syncfs(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 10:55:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000ec0627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1603.899203][T24003] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:00 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x74}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000547a128011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001000a7269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1604.199023][T24004] EXT4-fs (loop5): bad geometry: first data block 80384 is beyond end of filesystem (1080) 10:56:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) [ 1604.450679][T24037] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:00 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003b01000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400368011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) 10:56:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100257269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:00 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x7a}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x12) 10:56:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1604.947266][T24068] EXT4-fs (loop5): bad geometry: first data block 80640 is beyond end of filesystem (1080) 10:56:01 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea54994e702d609331ab3c70aa6b030ed69efddccea3e793e8287051d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809b2bc7b716441ef6b2b3c690a88728fe3c766be4825548e085c7866d7ac33165a2178a5c647457a8713e7b70a85bbdb078320eafa48d43c96aebc3da20d188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f633b5b0402ffa95acb51428785ae09fdae241f51f7ff22745696f1ffe2ca9ed226213275a566ae3f64fb2dfe777d16832bbb703ea39868fcf0fe11894d2c876e4809a16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e258d5d74a133278866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7316bb7c31f8e867734a5a66f0465d7183fc05c0d804ac719fa87f64cd637deb88254e9ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea01662abbc567a9db53997aa9abd409b5cb990ea1bc76127057ad2ae000000000000000000000000000000000000000000448495daae181b1c6f442f2f739ce0b3e4377f359887cdf898a4463717a18f4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435b0100008000000000a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ce2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a1d1f872d0000000000ddad9444a6f712c20fd0d908c376316a7b26cbaad28bc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4676997286042b43c6cb7e2a01a16ae5757072574afadf6962a40ed57025b5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00a378771ee3c704a3947879f4ea1f031cd8432a27bc2cb985d55dc9dda125e9f2e5e0d9f2e69559e4c477ce19c798177c6e8afd63019e1bcbafae31b279da000615ad2f98b9cbcc7eaca2ef509f2aaf0d6b5f6fd16ed11e4da5ed2993ff7e5779b5f18167b2addd98a75e18e9d7ee24c491f99d5645304fd80c63616f1588c88c9461a887762ca7c6ab30111fe505e2b451c702f4fbfa4695288f8b94a3c2a5301ebb5203c43be94f1050cdebc18cc899d5d3b6f27b41ede904290451a23354453860fb28206cf0b606dc2424e58983f54b4dee173c940805"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6a, 0xcf, &(0x7f0000000580)=""/207, 0x0, 0xa, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1605.132752][T24105] EXT4-fs (loop5): bad geometry: first data block 80640 is beyond end of filesystem (1080) 10:56:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054004e8011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:01 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004801000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) dup(0xffffffffffffffff) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:56:01 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xa2}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000102627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1605.595812][T24126] EXT4-fs (loop5): bad geometry: first data block 83968 is beyond end of filesystem (1080) 10:56:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400688011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r5, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000003280), 0x0) fcntl$setstatus(r2, 0x4, 0x44800) io_submit(r3, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) 10:56:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000103627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1605.834932][T24152] EXT4-fs (loop5): bad geometry: first data block 83968 is beyond end of filesystem (1080) 10:56:01 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000003000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400368011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:02 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xaa}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:04 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea54994e702d609331ab3c70aa6b030ed69efddccea3e793e8287051d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809b2bc7b716441ef6b2b3c690a88728fe3c766be4825548e085c7866d7ac33165a2178a5c647457a8713e7b70a85bbdb078320eafa48d43c96aebc3da20d188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f633b5b0402ffa95acb51428785ae09fdae241f51f7ff22745696f1ffe2ca9ed226213275a566ae3f64fb2dfe777d16832bbb703ea39868fcf0fe11894d2c876e4809a16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e258d5d74a133278866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7316bb7c31f8e867734a5a66f0465d7183fc05c0d804ac719fa87f64cd637deb88254e9ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea01662abbc567a9db53997aa9abd409b5cb990ea1bc76127057ad2ae000000000000000000000000000000000000000000448495daae181b1c6f442f2f739ce0b3e4377f359887cdf898a4463717a18f4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435b0100008000000000a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ce2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a1d1f872d0000000000ddad9444a6f712c20fd0d908c376316a7b26cbaad28bc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4676997286042b43c6cb7e2a01a16ae5757072574afadf6962a40ed57025b5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00a378771ee3c704a3947879f4ea1f031cd8432a27bc2cb985d55dc9dda125e9f2e5e0d9f2e69559e4c477ce19c798177c6e8afd63019e1bcbafae31b279da000615ad2f98b9cbcc7eaca2ef509f2aaf0d6b5f6fd16ed11e4da5ed2993ff7e5779b5f18167b2addd98a75e18e9d7ee24c491f99d5645304fd80c63616f1588c88c9461a887762ca7c6ab30111fe505e2b451c702f4fbfa4695288f8b94a3c2a5301ebb5203c43be94f1050cdebc18cc899d5d3b6f27b41ede904290451a23354453860fb28206cf0b606dc2424e58983f54b4dee173c940805"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6a, 0xcf, &(0x7f0000000580)=""/207, 0x0, 0xa, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 10:56:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 10:56:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054004e8011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000104627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:04 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000001004000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:04 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xf4}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000105627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:04 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x130}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400688011000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003804000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:05 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6a, 0xcf, &(0x7f0000000580)=""/207, 0x0, 0xa, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 10:56:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128003000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000106627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1609.261335][T24268] EXT4-fs (loop5): bad geometry: first data block 276480 is beyond end of filesystem (1080) 10:56:05 executing program 4: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6a, 0xcf, &(0x7f0000000580)=""/207, 0x0, 0xa, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) preadv(0xffffffffffffffff, &(0x7f0000000300), 0xffffee9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x401) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) r3 = epoll_create(0x9) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="730043d5dbc93f57a247fb003e18697c92d933ced25f0ea14ed072a997d152f30def533e24e8c1b7e0bc4b2dabdccf6b35e5b0714865eb3e0a1d3d0b07bf914aa59444135d7e428c8e78a49e371480040157d28b99b710bf861756b9ffd3a2f23966afd0b153c648456070165144e5e8fc9d7726ef5ea2fa59e971d414869730f19d00fe571dbbd01005421d49fd829c22bc2a1088781c6dbccbc580", 0x9c}], 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1609.430358][T24285] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000107627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012804e000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xdd4ad65, 0x0, 0x0, 0x1, r2}]) r3 = dup2(r0, r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) [ 1609.544418][T24298] EXT4-fs (loop5): bad geometry: first data block 276480 is beyond end of filesystem (1080) 10:56:05 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x138}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:05 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000005000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100010a627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128050000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:05 executing program 4: r0 = socket(0x40000000002, 0x3, 0xff) sendto$unix(r0, &(0x7f0000000140)="1d9b000000007675d706d94e590291c9900d3be5299d0a4d3d1891a1fe3d8edd715c9f981c39daefbae33fbd06698cc347008df8", 0x34, 0xa00, &(0x7f0000000180)=@abs, 0x6e) [ 1609.984830][T24329] EXT4-fs (loop5): bad geometry: first data block 327680 is beyond end of filesystem (1080) [ 1610.040376][T24358] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 1610.149348][T24362] EXT4-fs (loop5): bad geometry: first data block 327680 is beyond end of filesystem (1080) 10:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@getlink={0x3c, 0x12, 0x6424285de8f3d0fb, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}}, 0x0) 10:56:08 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x300}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100010c627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:08 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lseek(r0, 0x1, 0x0) 10:56:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128068000100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:08 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000006000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1612.351051][T24397] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1612.396160][T24385] EXT4-fs (loop5): bad geometry: first data block 393216 is beyond end of filesystem (1080) 10:56:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100010e627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[], [{@uid_lt={'uid<'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:56:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011040000627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@getlink={0x3c, 0x12, 0x6424285de8f3d0fb, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}}, 0x0) 10:56:08 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x500}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:08 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000007000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) dup(0xffffffffffffffff) [ 1612.650134][T24423] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 1612.703020][T24429] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000110627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:08 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, r2, 0x0) wait4(0x0, &(0x7f0000000280), 0x4, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) syncfs(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 10:56:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011050000627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1613.024236][T24463] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000148627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011020100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0x14, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) 10:56:09 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000009000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:09 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x600}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1613.304142][T24488] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100014c627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011030100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:09 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, r2, 0x0) wait4(0x0, &(0x7f0000000280), 0x4, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) syncfs(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 10:56:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) sendfile(r0, r1, 0x0, 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) [ 1613.605019][T24499] EXT4-fs (loop5): bad geometry: first data block 589824 is beyond end of filesystem (1080) [ 1613.615779][T24508] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011040100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1613.788014][T24532] EXT4-fs (loop5): bad geometry: first data block 589824 is beyond end of filesystem (1080) [ 1613.805373][ T28] audit: type=1804 audit(1590663369.806:270): pid=24538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 10:56:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000160627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1613.829473][ T28] audit: type=1804 audit(1590663369.826:271): pid=24538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 [ 1613.852679][ T28] audit: type=1804 audit(1590663369.836:272): pid=24527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 [ 1613.870764][T24543] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1613.895028][ T28] audit: type=1804 audit(1590663369.896:273): pid=24538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 10:56:10 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x700}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1613.949326][ T28] audit: type=1804 audit(1590663369.926:274): pid=24527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 10:56:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) sendfile(r0, r1, 0x0, 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 10:56:10 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000a000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1614.078775][ T28] audit: type=1804 audit(1590663369.936:275): pid=24538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 10:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011050100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000168627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:10 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 1614.198564][ T28] audit: type=1804 audit(1590663369.966:276): pid=24547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2068/bus" dev="sda1" ino=16368 res=1 [ 1614.227992][ T28] audit: type=1804 audit(1590663370.206:277): pid=24568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2069/bus" dev="sda1" ino=15776 res=1 [ 1614.268998][ T28] audit: type=1804 audit(1590663370.206:278): pid=24564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2069/bus" dev="sda1" ino=15776 res=1 [ 1614.325630][T24565] EXT4-fs (loop5): bad geometry: first data block 655360 is beyond end of filesystem (1080) [ 1614.343132][ T28] audit: type=1804 audit(1590663370.276:279): pid=24564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir969663018/syzkaller.Dnx6G3/2069/bus" dev="sda1" ino=15776 res=1 [ 1614.386531][T24582] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@getlink={0x34, 0x12, 0x6424285de8f3d0fb, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x36, 'veth1_vlan\x00'}]}, 0x34}}, 0x0) 10:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011060100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100016c627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@huge_within_size={'huge=within_size', 0x3d, '$].%'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 10:56:10 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000c000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) 10:56:10 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xa00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1614.683614][T24604] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011070100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1614.848653][T24611] tmpfs: Bad value for 'huge' 10:56:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000174627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:10 executing program 0: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x7d, 0x82, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000011c0), 0x2}, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x1, 0x40}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10004, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xb549}, 0x40c80, 0x4, 0xc8, 0x7, 0x0, 0xa288, 0x6046}, 0x0, 0x3, 0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000280), 0x4, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) syncfs(0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 10:56:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x65, &(0x7f0000000000), 0x4) [ 1615.010690][T24633] EXT4-fs (loop5): bad geometry: first data block 786432 is beyond end of filesystem (1080) [ 1615.048502][T24653] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100017a627269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1615.248545][T24653] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110a0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:11 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x1f00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:11 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000410000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100687269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7fff, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@huge_within_size={'huge=within_size', 0x3d, 'binfmt_misc\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) [ 1615.555236][T24684] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1615.586954][T24689] tmpfs: Bad value for 'huge' 10:56:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110c0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000000000007000080000000000010000000002489f2ae0000000000000700000000020000c4000000010000007f00000000000000000000c0ffff000000020000080000000300000000000000000000400800000001010000b80f00000300000000000000010000c079ea00003f580c8f900000006f0000000000000001000080070000001f000000ff0f"]) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 10:56:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x700600]}) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}]}, 0x11) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000580)={0x0, 0xfb, 0x15, 0x0, 0x0, "53f76220c93100"}, 0x15, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x1, 0x8) 10:56:11 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1615.783571][T24697] EXT4-fs (loop5): bad geometry: first data block 1049600 is beyond end of filesystem (1080) 10:56:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001000a7269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1615.850910][T24719] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110e0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x68, &(0x7f0000000000), 0x4) 10:56:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100257269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002010000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 1616.191902][T24765] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:12 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x3001}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100687269646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011100100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c3760004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 1616.444861][T24778] EXT4-fs (loop5): bad geometry: first data block 1056768 is beyond end of filesystem (1080) [ 1616.581215][T24802] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000000000007000080000000000010000000002489f2ae0000000000000700000000020000c4000000010000007f00000000000000000000c0ffff000000020000080000000300000000000000000000400800000001010000b80f00000300000000000000010000"]) 10:56:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x43a, &(0x7f0000001080)={@link_local={0x3}, @random="a17c8541c5c9", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '3Ny', 0x4, 0x3a, 0x0, @private2, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={[], [], @broadcast}]}, @dstopts={0x0, 0x9, [], [@jumbo, @jumbo, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, @hopopts={0x0, 0x22, [], [@pad1, @hao={0xc9, 0x10, @local}, @generic={0x0, 0xf5, "9768fcb9725232a872ab682567a70b2e97e1af9f84f7939a13f581ffd447b90861b463330c2a6566142966800e4b0dc480b64e3db5700938427ecd64157157234c3716453a5e7d45f171ed683daf14049dcee087fbd87775db5d04a964a4cf8e979421e3c49a91689e479e11ede319a0f57c50913c54e9052c8565704f4d7caddc68cb8196bd0f1989fe418985f6e7078639256d68423739ecedb80699f9245a00b5e7960799397428d56fc2910ea03b0532242c413a3ffcf967fef2a8ec9141db026c3e4463a454ea6b72e9871a8549018d322e374dc2e96a5de8a5bb9e4af14111fd9b0cd67c6148607686a8baa436fe8c73d908"}, @pad1, @padn]}, @dstopts={0x0, 0x1, [], [@padn={0x1, 0x1, [0x0]}, @jumbo]}, @dstopts={0x0, 0x4, [], [@generic={0x0, 0x1f, "cabc6227f57a0be3a3f8e45ebe4b7b53ede5b5bb7808056eb39dc3ce1fe5ab"}]}, @srh={0x0, 0x12, 0x4, 0x9, 0x0, 0x0, 0x0, [@local, @ipv4={[], [], @private}, @mcast2, @empty, @private0, @private2, @private2, @empty, @private2]}, @hopopts={0x0, 0x1d, [], [@jumbo, @generic={0x0, 0xe1, "f812a671cf7e24487fed02df7c9ae162257fda438952a11dc86cb1876ac9921326beda9d1322c3e0dbccdbc16090b3fa987c7b757f726f27cf7912b8cc0a74b7be6f2772e3aadc91aeecbd11e9c8ede5c9aeda858ca156064845c78723af54940d88c8725ae6557171d7a024bfd33e6d3c059c88381e55df15eb1643bf7fedf97ae845aa8a6a16235e26b5e0b8043fb8ef1da348b04719d1724d7b60cf67429fd5162352d2299549c827b99743476c392bdbecac68faae190aa2352d6d212262c19cf910ecf947131490d79fea32522c005e8392b29f678283798e6006817c221a"}]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2002dad382b5747eb0fc57bb2fdcce205c237d697d4a5a81fa215aa39503e25e", "d43af84474ca6030e181295ba764d4d864ecd2cdc510b318b09054ed2d7aeeaa15d7c25ee6fa395be36fe987364cc88a", "cc0d775f94d63800c251e56602cf2d2130b9f574e3c6ef9ab7ee0678", {"d02bc09ea6897e8fb1a15c4d5947a70b", "97fe26cdffcc7c46bb3df52a1f0e9f0b"}}}}}}}}, 0x0) 10:56:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100620a69646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280113e0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:12 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000001d19000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:12 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x3801}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1616.845636][T24827] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 10:56:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x0) [ 1616.961483][T24847] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100622569646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1617.099622][T24841] EXT4-fs (loop5): bad geometry: first data block 1645824 is beyond end of filesystem (1080) 10:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011480100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) [ 1617.259424][T24868] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100010062720a646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280114c0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0xc0045009, &(0x7f00000000c0)=0x10) 10:56:13 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000191d000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:13 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x3f00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00005563f1c9b0f8ac4bebb100"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "c2a6463d907fbb60ee3e8cc7cb8bc565f4ef61"}) 10:56:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627225646765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1617.597040][T24906] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 10:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011600100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lseek(r0, 0x1, 0x0) getdents64(r0, 0x0, 0xc0000000) [ 1617.744648][T24907] EXT4-fs (loop5): bad geometry: first data block 1906944 is beyond end of filesystem (1080) 10:56:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269236765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) tkill(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, 0x0) [ 1618.004262][T24942] EXT4-fs (loop5): bad geometry: first data block 1906944 is beyond end of filesystem (1080) 10:56:14 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000020000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011680100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:14 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000b00)='nfs\x00', 0x0, &(0x7f0000000000)) 10:56:14 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x4000}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1ef017cfaf87a3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x44045}], 0x1, 0x0) setfsgid(r3) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext, 0x181, 0x40, 0x0, 0x7, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x2, 0x800, 0x0, 0x26da, 0x20}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 10:56:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269256765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1618.338744][ C0] sd 0:0:1:0: [sg0] tag#5185 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1618.349243][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB: Test Unit Ready [ 1618.355696][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.365482][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.375148][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.384853][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.394545][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.404231][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.413890][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.423648][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.434041][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.443667][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.453281][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.463842][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.473563][ C0] sd 0:0:1:0: [sg0] tag#5185 CDB[c0]: 00 00 00 00 00 00 00 00 10:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280116c0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1618.505624][T25001] NFS: mount program didn't pass remote address [ 1618.528766][T25003] EXT4-fs (loop5): bad geometry: first data block 2097152 is beyond end of filesystem (1080) [ 1618.558048][T25001] NFS: mount program didn't pass remote address 10:56:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1ef017cfaf87a3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x44045}], 0x1, 0x0) setfsgid(r3) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext, 0x181, 0x40, 0x0, 0x7, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x2, 0x800, 0x0, 0x26da, 0x20}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 10:56:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272692a6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:14 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x4800}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) [ 1618.680017][T25014] EXT4-fs (loop5): bad geometry: first data block 2097152 is beyond end of filesystem (1080) 10:56:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:56:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272692b6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1618.866663][ C0] sd 0:0:1:0: [sg0] tag#5186 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1618.877139][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB: Test Unit Ready [ 1618.883657][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.893900][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.903534][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.913157][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.923203][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.932827][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.942454][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.952085][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10:56:15 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000001020000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1618.962682][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.972405][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.982020][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1618.991743][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.001348][ C0] sd 0:0:1:0: [sg0] tag#5186 CDB[c0]: 00 00 00 00 00 00 00 00 10:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011740100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:15 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000280)="c0", 0x1, 0x4000052, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 10:56:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272692d6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=r0]) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) [ 1619.295390][T25051] EXT4-fs (loop5): bad geometry: first data block 2101248 is beyond end of filesystem (1080) 10:56:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272692e6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280117a0100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:15 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x4c00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0), 0x4) 10:56:15 executing program 4: socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000']) clock_gettime(0x0, &(0x7f0000000080)) 10:56:15 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$vhost_msg(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f00000003c0)=""/148, 0x94, &(0x7f00000001c0)=""/106, 0x3, 0xf121ad25aff05335}}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private1, 0x5}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 10:56:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269306765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:15 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000023000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1619.702077][T25113] fuse: Invalid rootmode 10:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000300627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1619.743812][ C0] sd 0:0:1:0: [sg0] tag#5187 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1619.754331][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB: Test Unit Ready [ 1619.760823][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.770431][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.780042][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.789679][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.799693][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.809320][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.819063][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.828681][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.838293][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.847906][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.857547][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.867185][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1619.876796][ C0] sd 0:0:1:0: [sg0] tag#5187 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1619.976600][T25132] EXT4-fs (loop5): bad geometry: first data block 2293760 is beyond end of filesystem (1080) 10:56:16 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$vhost_msg(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f00000003c0)=""/148, 0x94, &(0x7f00000001c0)=""/106, 0x3, 0xf121ad25aff05335}}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private1, 0x5}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 10:56:16 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/164, 0xa4}], 0x2, 0x0) 10:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000500627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269586765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:16 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x6800}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:16 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000002d000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1620.215579][ C0] sd 0:0:1:0: [sg0] tag#5188 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1620.226101][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB: Test Unit Ready [ 1620.232677][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.242322][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.251965][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.261610][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.271777][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.281402][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.291300][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.300975][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.310616][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.320252][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.329872][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.339772][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1620.349394][ C0] sd 0:0:1:0: [sg0] tag#5188 CDB[c0]: 00 00 00 00 00 00 00 00 10:56:16 executing program 4: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 10:56:16 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:56:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) [ 1620.641004][T25181] EXT4-fs (loop5): bad geometry: first data block 2949120 is beyond end of filesystem (1080) 10:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000600627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269636765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:16 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003a32000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:16 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x6c00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:16 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:56:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0xc1000000, [0x4b564d02, 0x1, 0x4b564d02, 0x3]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80000, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000001c0)={0x1, 0x5, 0x4, 0x80000, 0xef8, {r6, r7/1000+60000}, {0x3, 0x1, 0x50, 0x80, 0xbe, 0x96, "b4ce0471"}, 0x80000001, 0x1, @planes=&(0x7f0000000180)={0x5, 0x7, @mem_offset, 0x3}, 0x80, 0x0, r3}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000240)) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000040)) 10:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000900627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44010000100013070000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff0000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)='/'}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1621.176263][T25225] EXT4-fs (loop5): bad geometry: first data block 3291648 is beyond end of filesystem (1080) 10:56:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269686765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1621.295542][T25258] __nla_validate_parse: 5 callbacks suppressed [ 1621.295553][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000a00627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:17 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="e5379e4f0d67058e618d7918654228b359b2d8101fc7981dda756e5bb29aa9d486c2926d5938c17303f86c336cbc44ecc978c727c688341817070783c0eca825e6b01b91346278a2d972b71160a3eb2f556ea609b3179a3d8fcf5182b3053c701afdbeca5b62813bd0040d748ca515157dcd4d1e153e33a9c3c4d6b8c93659ab02a88e68bd7338363e8082fb71848f66918e1e4896e63c2935269dac7f1459542d842c10762f46072a73ab81f6efb22d4140436bec05d3882ab5f5775257f134e8743456e6d15146411a332f3fe4374b5fc9c3a6a372131f0a77f9d16a950935e711a4a07a7e2497ab468eb85671235dab1bcd8796aa5ed7a8fad8301b8781", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="4ae2594bafefb87ed9e953a26a8aeeefc59c4dded35671550d5f8c30ece91bab67ef8ac44a80d26a36d769f997f217e44383cd1565fa3d4a49b38fe29a0c165f56d7166df5ce9776488c3999958f0d4d03774596e274078d5e4760b332ee26c4597df22f834bef204805c181ac3cdfed558e6c1fe46645def90fcd92dfda210ff19f7f75ac102eb12594f4737e0b6a97642b0f7712c4734c874b5e2b05e86ef0b6d0ffcd328a59a98377a4f55bb3dc4ada56f731a2a1f5888ee047cb3b0d33f0bff483551d40c493004f2649dcf46adf27897b9408a8b1309e7186c3549525f1da0d1919cbb94472a3b6a89ff7326bc60c7238da7c7991e0282eafc4ce400f9f7bc87e304168ef511e4c96d50a579c9a3551e9dc0c9c97dd658905e5d6cd0291c938535e3f7642a0aa7c0695e40484593a37400d784fbc428434953455fa7353b5479142a10a0f53c71700adf8d940bf221baecf372c274279f01ba25609c7438b83f9400866046e1fed65a84a192b50f9801b9fae97a4434ecc31d2f8dc82e717c839ee16d419721f3952387ee4adaa39a695f6c70401629a99c94b5a4f5cb0d87f5f3eb7f7fbbeac500f05ce77fc8dfa2dc9d037c8948f91941b4470dad874f620e5af8814c45234a9aecf61e66b0b98baccb371a5c2dc0582fdb5dd28e0fd64f15f48d37fa6676d48b0a2928c156b6589a3b967f101feea1416c8a30b1dd2b29b00e61bab08201f61834ec10acebe2be09388404b37ac5c79beec0cd56ea4d59a662c6e3c56d1c6d9d033063a478230ca9eca7afec04670395370688c368023ba011ff584f12860dbaa9c8280724365b21c3ded0660e322755bcf157af78aa17b675ebeefab012ccd92852c45f98dfbd862cd9779bb11cdab1e519266c4923f8444651f8102db1ab7c5c9c410c0c66be5de9fe8531e6226ae1ced459444048250138bc45e7a4aefd4335eda679c60281d1641b3be845a060d0441f4f53c560aed5c4c1a27e8dc945216c8804fc72d02633fca16f980072b94ed24b87ccdf2be62013b8da983f55dab182f79c49f57e770faf67bc047bf44297368720d46cc2eb2cc73b68b007ccb3b6456d543c19a84758f0a727c8056f729a9cca38710339701672cbe5cf5fa8db2af36b1c804de38fb82c39ae077b4962d502f6ed51f6df5424d9d24c82b2c229049e36a83bf7164fc18d94ba3d35342f35b947d998764195610a079dc9120ee0ce4e35e86dc577e2fb94a6627b2152cdb8b5873fa56cd118b32b269532ed6c2c53337a244d91a668dd341025517bfffc98091bcb5dbc38610b0ec1ac33863760efc287faaf7a7e679265c15c78554661f301f4ab7eca1f33a0b768968a1ab28e4225e1ea8b72ca3486bb64e5a1f4535d6258d0be4c06b36a8c5250fa40337def63b51569e2f4011f8b43ab972572d2f03400ef77ec602f180394550cb1df898c488b220690905787ec2d1422d888e77f905358e9dd8502c1991d37a4c54f44d180e5955b74c636840af378ea5c80093487f62a7578be1e3bbf937a0c3c17418878d9903ed7c86db3df2ef2fb0de9792ab33034b5b84bd5c7813e17c57c1a605def442b029a2a8847ada5e6283aa4f4ccfa06d24a9de89b4f8eda6563b9557eac741b8c6b0502793ea5b65b8a39ab1078d64fdb2a0041f8aa0e144a98f8c97e2b9cba08741a6042462ba4c6e9b367cc8282a3915850adac95bd5f6718fbe0ff6e2878ede3a62edcec0cd90a2cf612e8b0146eff69864c9fa4f66bd49b41fb185ba1b8bac8ce69b86ee6e8fea1f65c9a2c4d4da39a9bd9266c015a27f4eb65cb08017cbd355f910f2c5b4981fb8677e21b5dbca66dfee630b868203c5376ade9965565251b686b4e47e305954ca1382f7b058d86f22aa0ac5697c3ce1119b25abab78f92747ae7252ddb174f8e882059e8cefffa649b9aa39a7b1a87b302daad2f70209470df60933eb82855efcadb8cfafab97c9c15d39aaeca699bb577d3802fb0551362988168537bb8887cef02b843bf6b08de51d4569e0877f2de4cfbc425171ce807112681ca3792ce87ce2cf8b3d4e49390fa5c05a34023329ffbb2489ac0c89e0f2dd880a82a53b1d24a4ebeb813afa8934077378007337e4d1a624f4bf38e834cfb2ca57ce90681360731f7b054cd84188506dab36da89522282dbd79fec53843150a30b8d1c2a6905a31c7be09f6283bff7ed4bfd3c3e01c16390624413f9731e0c91ac773cd15ee47da0b5bff261361121bd5daaa43ffe5701f2783301ae779e62bc037aa436af383fcb29ecba6f77ed4a9ff38c22023f16e11aca273e1069b04f3229fb79f4d603bea5a3d82c91a71f5d2222c5bffdd1b2f1fad1dd08004f1625c57a5923343e84571181815eada9c10a6bd27e6f5c4b484309b211d4fa9d096cf8835cd0b7300b7b62687554bc2a052f6ee13085f584a922e7ad7f7fff72dbb82a3a349364b6d44f07f329193033be7b9281f728fc77b37b8fb22d3900aad95b9b5ed3652bda7e83adb158bdea8938ef3d6b38133af79ff855d946a5d319e88c74cf66834825889f4b0402d802d98e0b1affe1838eb928159afe026f7e9ce6adc5ad198edf0d62efef91a9340a91d7e707e0123485857d96025ad04a9fee1dada7abcc398e5e6321a4b64d0e3b583430c87c181c23856594ef4b40b88dc570fe3d65a72541baa79403d0a5f2a4ef57135bb8abff3f2b40e2580af92a7d472dd442a1521e13c7e535e9ab2ab67722fa21eb2ff6960446daa903bdf97a85f457335d4884f26745ce4de195a2117b4457b3a6a035054be75eb64e596a7e9cc9200e625a64b5e3f23162f296581749c0d0146217e1cd4ebc340d5103f97b5059bbd501c93d80afca68df00caa9ddc7e5c81fc57be6539310aa3bc5ff22263d5c9ca10ce0e465fcb7d96e8393278fdfe2bfa8e7a9d299ad48e1ad28f8108cb9f5b717159ca41da1b35e13011b39fdf8b2a45a26c6215073b0b387e4aeca9268da44a23ed6717b48e6f99d1208a6a88c283e8a58de86568cb0e13ff843a3a1936ca8d83c5599428629298210d0eba33b4dbc5d4a3aa1e526021d38f747e49e65c2fce9bfd2f47d5d24a8e09717fd5b618f68ea32ed45921c6ac9d7ae1cadd82d1684b62465d32c453d86a5d2f07769f2733ff626e96b86327e27e91808d4b37b2b9389dda21929db4fa603592685fb25bb2742302719618796e32c33d09f596760e6968ebb3a160cd213458ed361a724116426a77f3899ccf70d7192119fa37bd052c0a3224c9d849f8b0ca33a54df50438b0a823c65dae9a5dac11c03132602ba9be9e21c3c374f8198e8a1511241bf777049980dc5a195552eedc62e5539a7d20e3fb8f92c4d2bf13461393c6bb51ca1c9810d77e9ab73e8de4e7659ae7ac174b4b35abe61cf7b15502c43fb1ca57b2278c2d71ed927fcae3ec381133f693f21fa820b64c981f389f20cc9a07cee303daa03cad2077a02dbbaab3b67619c497e3c1096fe27d3f0808b6d8efb2ae83062474d323c82f7b2abd276f113a8052e63717c5cce0ead40da122ab9bdfa78a3d23fee4189a158551c32fe0e53500343538f6ae483462c296ccbcdd85d86177c6181d1c685523f5ce77c1703874ee69b7b44c16f2b72a0df9a45ef0735231ae8d284f861d9279785e255da660eb9f0a97151ed65e7f249cc1b07cc58751b5de7d3cffd00c3ea8bf3848ee9ec9bcc629b7a4d7113d58d756bfd342eb8700c1c1f70f2d4bb9e4dbf5dd62df9615c63a911b842d661f2dde5624d5662e29de98d5d801c9c5c2d580e185cc278245487d59a32398e5f7c3b7bda5ac240dfba10371c0100000000000000a710d7bb9432e4c874dfe9d93b4d5060fc79cdb3e10fedc4880995ee1d54b384d1bf84b1319dbe55d93a84a3cb7f0921db2de346ddb6e352ebc1bcb7feb334b05e1209729d5c603b9fbcffc13606ff7dfefdc9150baeb292ab3ec25729156397f24479e98536b42d0117a63799b2977ce38c4f077af1405adb726babdbb1a41f06835df8dbe89e467b5b619a7b0303e72ce6af00ec0adfabd1b482157e487adfb0483b9cf7ce82bdcd695eb93bdaf75d07c91dbc4d42f17300a1f4f14c6f596c796fc740571488ed723195f6073cd25ee9e3d134b53bb4ec9cc3c513c7ccc78b3d0e7365f5c4eb48f86affb89964a890b04564ca3696464d0b7cd29c241dd0d00948896e35f4b8092a24341a757ae02e66084a1326494e8592f6ed61c3e7c1383f4bef26615bd162793c63534fecd0c9d4fe037fcdd718e0ce9c12a27df37bb75f9eaef68547f6054c6dcd20817fa6bea36bdcaaee8b8d9de5a386d2c9b109db37aa383177a8f730cebcd5c07efd06e32260d275146d6716754e4ae3ba9164424f597e63af7f1fa4cc57ce39b988f27e31303c1af2548b71866a9dea3cd459201a2bf40251ef4d323b3b98065cab72e6ab7d2199230f4be43f9e2fe40b7a36deda1fcda40a34dd6cb7c2112063ec4ef4b26876fc6471fc5a726a926f1e9fc1b4b3c349dfeda5e5253e8a28ac051199e3920967e88052abbe18f56bc3a324582c1e9931ff979932c19a7d8fa82a9a88cd053800f97b521328fcffe0d36834d7b75b5f69a677d05a07c86857df3ea94a0e8ea12d8d0feeb8517f159991ac5e042c8b4d225807a3724b1a5cfc8eddf8ced57a9f7d6907bd63db816db6fad5bdb14ecf7a2670ddd354017dcf7cc12019110554055d1a41656d803a63aaf2153281d7a3a7110412d2c34151f9f21562c3b23f7032a05b1a93d20a65880fccedee3950903ba3da77538f2b2e852cd3f13b51571de34000b00382f970fd93c21bbf42642b2567a6cfd73c4cfbe5d5c996a3f71a6a2a2647954b8eb9de236decd2070b5577106052e503b878b6d4040d732287ee9b63c436e9cc50b7dac0a0a7f580f04a2ccea55fb70310792877aea69d9a825ff63b567e41880c32638f6edb188406023ccc79570d033f855992f6e7103a92c19a2c931ee22bbcf7ca8d7c1fac0634c3871d02062351fb37b1bb7ece32f554eeb472f01759ee4ef17ec8ecf821abaec9d81e030eb25dbfc78effb6872b74b6ec1756198e4dba2b58e6f76b3040a8e1515150432bbf7512c7e6bc9db7fadee5fb55d5a627dfdb2bb291dd639b6f09dd7b12de1e2825a210991e7833a9904c94addcbb6ce5916504f175ceb458f684fa1788015515b8a9a83451b545be11bf21a365c5fd9a7b1437eeb19b45c88f5afae54674e98dd6c7b5ef5a10ad5c2775c4863d86b42b53a671753ee253bf41e1cc42a1199065162637ff8cf272c6fc5267679cc84d67c86e02e74f17585bba21d4785c7ec3e061b31ff4c4f474afd2c86778b96bb3c9ddc9095eb2f0ec011587d2ef4684e40c81c4c851fb81f33a823046eac7e084ea8776fdba4fa6264271564e800d4ea4efaef2200f8cfb579523bb347ccf101efc8a0471e8c38ddf8af0604c6e486ec5fd77c0bf051d1433204f4f4b6ee9f2efe0f27dd03bae2e6446fc552e6358e31287a3f8ff2e834e76cceed9f17968d7b3f5b25b872fe305eb1a8c2f2d7e4efee27c56e1ddc264ba066e454a75780f96ff6b8d5f6f571e16286eb55f37d34440f9460cd701ad4dd77840ab8d5b2b530d3a56791444a76a99c055e21f7a4a15ae141779298ea2a7369cb3c30f27b07c32245f855a91151aa8306f898534e2bc94cc92c12ff437a0aa4ee335ed21f15d19eee386a50b76ad41d8d3e7616181dad4bcf0c9cc05afe081811486f5f974370ec08af6c137a9491af64d147f2bbb219a30022190169536e3a28b54ba52b4ac094b0000cc7ccf09fd860e8767dbcbac3cb6ef0b3a0a21b8bab9e129678ad374688efc231b5ea9a08f13362047d74b3da5f98e11afc14dde09929aa55e880488281787dfcb9cd0d91a33724108fe74fa30ae3b41e17ab29cad7152a1a66513c0bdafc1ee8dadcd74f2d33cff6241", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) [ 1621.336436][T25256] EXT4-fs (loop5): bad geometry: first data block 3291648 is beyond end of filesystem (1080) [ 1621.406984][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:17 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000438000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:17 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x3f, 0x2, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 10:56:17 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x7400}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269696765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000b00627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 10:56:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="e5379e4f0d67058e618d7918654228b359b2d8101fc7981dda756e5bb29aa9d486c2926d5938c17303f86c336cbc44ecc978c727c688341817070783c0eca825e6b01b91346278a2d972b71160a3eb2f556ea609b3179a3d8fcf5182b3053c701afdbeca5b62813bd0040d748ca515157dcd4d1e153e33a9c3c4d6b8c93659ab02a88e68bd7338363e8082fb71848f66918e1e4896e63c2935269dac7f1459542d842c10762f46072a73ab81f6efb22d4140436bec05d3882ab5f5775257f134e8743456e6d15146411a332f3fe4374b5fc9c3a6a372131f0a77f9d16a950935e711a4a07a7e2497ab468eb85671235dab1bcd8796aa5ed7a8fad8301b8781", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="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", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) [ 1621.784439][T25295] EXT4-fs (loop5): bad geometry: first data block 3671040 is beyond end of filesystem (1080) 10:56:17 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x3f, 0x2, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 10:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001100627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272696c6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:18 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x3f, 0x2, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 1622.043207][T25347] EXT4-fs (loop5): bad geometry: first data block 3671040 is beyond end of filesystem (1080) 10:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001200627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:18 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000139000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:18 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x7a00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:18 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x0, 0x3f, 0x2, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 10:56:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="000000000000000054001280110001006272696f6765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="bb0e0000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 10:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001300627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x8}, 0xdb}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x4}}}}]}]}, 0x6c}}, 0x0) [ 1622.411085][T25395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1622.420601][T25395] bridge4: port 1(bond3) entered blocking state [ 1622.428430][T25387] EXT4-fs (loop5): bad geometry: first data block 3735808 is beyond end of filesystem (1080) [ 1622.431187][T25395] bridge4: port 1(bond3) entered disabled state [ 1622.449470][T25395] device bond3 entered promiscuous mode [ 1622.542690][T25439] 8021q: adding VLAN 0 to HW filter on device bond4 10:56:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269706765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1622.584094][T25439] bridge4: port 2(bond4) entered blocking state [ 1622.602545][T25439] bridge4: port 2(bond4) entered disabled state 10:56:18 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000013a000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1622.624684][T25439] device bond4 entered promiscuous mode 10:56:18 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x10000100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x300704cdda2b62d6}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) [ 1622.757624][T25488] tipc: Started in network mode [ 1622.766800][T25494] EXT4-fs (loop5): bad geometry: first data block 3801344 is beyond end of filesystem (1080) [ 1622.772988][T25488] tipc: Own node identity ff080000000000000000000000000001, cluster identity 4711 10:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011001400627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1622.824170][T25488] tipc: Enabling of bearer rejected, failed to enable media [ 1622.919930][T25512] EXT4-fs (loop5): bad geometry: first data block 3801344 is beyond end of filesystem (1080) 10:56:19 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xa200}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="05"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 10:56:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269736765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x59) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e25, @private}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000) 10:56:19 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000323a000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002200627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x0, 0x2, 0x68}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000580)='ip6_vti1\x00') 10:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011002500627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1623.415967][T25549] EXT4-fs (loop5): bad geometry: first data block 3813888 is beyond end of filesystem (1080) 10:56:19 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e"], 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) 10:56:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269756765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:19 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xaa00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:19 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:19 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000013b000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011003e00627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 10:56:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269786765000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:19 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1624.020300][T25623] EXT4-fs (loop5): bad geometry: first data block 3866880 is beyond end of filesystem (1080) 10:56:20 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011004e00627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:20 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 10:56:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269640a65000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:20 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xf400}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006300627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:20 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000003d000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:20 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$vhost_msg(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f00000003c0)=""/148, 0x94, &(0x7f00000001c0)=""/106, 0x3, 0xf121ad25aff05335}}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private1, 0x5}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) 10:56:20 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1624.539044][ C0] sd 0:0:1:0: [sg0] tag#5189 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1624.551120][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB: Test Unit Ready [ 1624.557615][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.567217][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.576834][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.586459][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.596213][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.605803][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.615520][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.625144][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10:56:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269642565000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1624.634886][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.644614][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.654769][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.664476][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.674290][ C0] sd 0:0:1:0: [sg0] tag#5189 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1624.729622][ C0] sd 0:0:1:0: [sg0] tag#5190 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1624.740086][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB: Test Unit Ready [ 1624.746582][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.756198][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.765803][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.775416][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.785034][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.794662][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.804285][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.813884][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10:56:20 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1e1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64007db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801da96c697d5005fa8ab950f42c0945c08ba8c55299a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc1fc2442eac2d344609aba9e6000000000000000000000000000000f390d71c1c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80a00cff8ca29ece518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037e3a11886a0ecfea4342b11a5dbb27622cd9e9d843a8d256996ab6f2dc045421994d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2984ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73df040000005f1feb88914dab57e869048821b68b5f2e9c06b3592b3c4fbdc777d867c50d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c8f5a677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e207267bd20d5b1349548c64db5dddbffafe7da744f277dbf9d80e6e596575e6b44c483adc4b5fdcc396de7519f6dca272aeaaa47b19b56e9d5c748dd5ef34e8be5fc5d6294878efc32f03c4d78b92e9471b25761fe41d2ffdd7bb8d65e267ede116cf72a0f698af44fde08dbce7c4764a45b24dc61a3c33b272192eca80f39e478d1b9afd4f9f41d0face81e2740327d2fbe7fd362febc94cba54a18be6ecbed5feb22093ceee72f8394c304a2d6f750efd6ed4b8ab65fb45e8de7ce306b069f628243069443db7e1697a3e99e495a174ac2531130465c5ceffc893d21f3472e0b729ceae4ccfc2a45cf5d42"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$vhost_msg(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f00000003c0)=""/148, 0x94, &(0x7f00000001c0)=""/106, 0x3, 0xf121ad25aff05335}}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x3, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)=""/238) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private1, 0x5}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000000, 0x1008, 0x240000) [ 1624.823616][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.832362][T25708] EXT4-fs (loop5): bad geometry: first data block 3997696 is beyond end of filesystem (1080) [ 1624.833220][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.853364][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.863198][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1624.872893][ C0] sd 0:0:1:0: [sg0] tag#5190 CDB[c0]: 00 00 00 00 00 00 00 00 10:56:20 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1625.000572][ C0] sd 0:0:1:0: [sg0] tag#5191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1625.011089][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB: Test Unit Ready [ 1625.017582][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.030631][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.040256][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.049977][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.059607][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.069340][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.079428][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.089112][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10:56:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[], 0x231ddae8) r2 = socket(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) [ 1625.099222][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.108952][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.118595][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.128225][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1625.137866][ C0] sd 0:0:1:0: [sg0] tag#5191 CDB[c0]: 00 00 00 00 00 00 00 00 10:56:21 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011006800627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646865000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1625.300931][T25708] EXT4-fs (loop5): bad geometry: first data block 3997696 is beyond end of filesystem (1080) 10:56:21 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xfeff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:21 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:21 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000003f000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801103bf00627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000540012801100010062726964670a000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:21 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1625.621935][T25772] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000200627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:21 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x1000]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1625.816091][T25782] EXT4-fs (loop5): bad geometry: first data block 4128768 is beyond end of filesystem (1080) 10:56:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff00000200be7802000605000003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160008000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 10:56:22 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xff00}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646725000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000300627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:22 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000040000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1626.135803][T25825] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1626.153507][T25825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646768000000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010003b0e0000000000f1000000000000", @ANYRES32=0x0, @ANYBLOB="060200000000010008000a00", @ANYRES32, @ANYBLOB="280012800b000100697036677265000018000280040012"], 0x50}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:56:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1626.356396][T25859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000400627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1626.413627][T25859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:22 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0xfffe}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1626.456874][T25847] EXT4-fs (loop5): bad geometry: first data block 4194304 is beyond end of filesystem (1080) 10:56:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646700200000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$alg(r0, 0x0, 0x0) r4 = dup(r3) write$UHID_DESTROY(r4, &(0x7f0000000080), 0xfff2) 10:56:22 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000500627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:22 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000048000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:22 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002140)={{{@in6=@initdev, @in6}}, {{@in6=@empty}, 0x0, @in6=@local}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 10:56:22 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646765020000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000600627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:23 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 1627.197947][T25930] EXT4-fs (loop5): bad geometry: first data block 4718592 is beyond end of filesystem (1080) 10:56:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646765030000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002140)={{{@in6=@initdev, @in6}}, {{@in6=@empty}, 0x0, @in6=@local}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 10:56:23 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000800627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) [ 1627.493818][T25974] EXT4-fs (loop5): bad geometry: first data block 4718592 is beyond end of filesystem (1080) 10:56:23 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/49, 0x31}], 0x9) accept4(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x4e23, 0x6957f062, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="be4bb1d46bc7207d7720016c9c87401eea28188072b8d500e621fe640b8d372e63fb563fb436235ce3ba2ad8", 0x2c}, {&(0x7f00000000c0)="726bc792b760122bc858c1a8e7316a35bdaddd461d9af2600de5792af22233e289e64f827310b3cf674ff1a7952820c4eb82ef43689c4b5ef55aa98c76e085cbb647af0bc6f77709684df1fc11dbfbc3f945d0391b43", 0x56}, {&(0x7f0000000140)="77fb3d4b45326f8486020f3c9edbff37a1e4af07e9eefa3627abb0ec73956c4e583f0dead0ca53d08eb177e03e55936c1b6b01935ae2f3ad392f461968e92cf1cb1fecd096c99fefbcd975dafe56d0", 0x4f}], 0x3}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000300)={0xfffffff7, 0xffff, 0xfffffffe, 0x0, 0x6}) 10:56:23 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a7767310e2400038008000300000000000800010000000400080003000000000008000100000000003000058008000100756470001c0002800800020000004000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000000600000000000000000000008010000000000000000000000000000014000000000000006e6574"], 0x3d) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x10001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000148000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:56:23 executing program 4: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4440, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 10:56:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000100627269646765040000007665000000003c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000010000104002dfcffffff000000060000", @ANYRES32=r1, @ANYBLOB="00000000000000005400128011000900627269646765000000007665000000003c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) 10:56:23 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r2}, &(0x7f0000000200)=0x8) 10:56:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@private0, @in6=@private2, 0x0, 0x0, 0x2}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) [ 1627.926913][T26018] ================================================================== [ 1627.935267][T26018] BUG: KCSAN: data-race in vm_area_dup / vma_interval_tree_remove [ 1627.943093][T26018] [ 1627.945436][T26018] write to 0xffff888075e3b5d0 of 8 bytes by task 26019 on cpu 0: [ 1627.953173][T26018] vma_interval_tree_remove+0x6ae/0x8e0 [ 1627.958757][T26018] __vma_adjust+0x279/0x1190 [ 1627.964663][T26018] __split_vma+0x1fe/0x340 [ 1627.969096][T26018] __do_munmap+0x20d/0xb20 [ 1627.973531][T26018] __vm_munmap+0xa9/0x130 [ 1627.978176][T26018] vm_munmap+0x25/0x40 [ 1627.982259][T26018] elf_map+0x1b9/0x200 [ 1627.986341][T26018] load_elf_binary+0x14bc/0x2b10 [ 1627.991288][T26018] search_binary_handler+0x11c/0x3f0 [ 1627.996593][T26018] __do_execve_file.isra.0+0xb53/0x1120 [ 1628.002248][T26018] do_execve+0x39/0x50 [ 1628.006336][T26018] call_usermodehelper_exec_async+0x394/0x3e0 [ 1628.012413][T26018] ret_from_fork+0x1f/0x30 [ 1628.016826][T26018] [ 1628.019159][T26018] read to 0xffff888075e3b578 of 200 bytes by task 26018 on cpu 1: [ 1628.026996][T26018] vm_area_dup+0x71/0x110 [ 1628.031778][T26018] __split_vma+0x83/0x340 [ 1628.036123][T26018] __do_munmap+0x20d/0xb20 [ 1628.040552][T26018] __vm_munmap+0xa9/0x130 [ 1628.045447][T26018] vm_munmap+0x25/0x40 [ 1628.049562][T26018] elf_map+0x1b9/0x200 [ 1628.053634][T26018] load_elf_binary+0x14bc/0x2b10 [ 1628.058579][T26018] search_binary_handler+0x11c/0x3f0 [ 1628.063891][T26018] __do_execve_file.isra.0+0xb53/0x1120 [ 1628.069446][T26018] do_execve+0x39/0x50 [ 1628.073695][T26018] call_usermodehelper_exec_async+0x394/0x3e0 [ 1628.079778][T26018] ret_from_fork+0x1f/0x30 [ 1628.084191][T26018] [ 1628.086519][T26018] Reported by Kernel Concurrency Sanitizer on: [ 1628.092699][T26018] CPU: 1 PID: 26018 Comm: modprobe Not tainted 5.7.0-rc1-syzkaller #0 [ 1628.100851][T26018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.111001][T26018] ================================================================== [ 1628.119066][T26018] Kernel panic - not syncing: panic_on_warn set ... [ 1628.125659][T26018] CPU: 1 PID: 26018 Comm: modprobe Not tainted 5.7.0-rc1-syzkaller #0 [ 1628.133806][T26018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.143862][T26018] Call Trace: [ 1628.147172][T26018] dump_stack+0x11d/0x187 [ 1628.151537][T26018] panic+0x210/0x640 [ 1628.155535][T26018] ? vprintk_func+0x89/0x13a [ 1628.160225][T26018] kcsan_report.cold+0xc/0x1a [ 1628.164933][T26018] kcsan_setup_watchpoint+0x3fb/0x440 [ 1628.170328][T26018] vm_area_dup+0x71/0x110 [ 1628.175035][T26018] __split_vma+0x83/0x340 [ 1628.179374][T26018] __do_munmap+0x20d/0xb20 [ 1628.183891][T26018] __vm_munmap+0xa9/0x130 [ 1628.188239][T26018] vm_munmap+0x25/0x40 [ 1628.192346][T26018] elf_map+0x1b9/0x200 [ 1628.196515][T26018] load_elf_binary+0x14bc/0x2b10 [ 1628.201501][T26018] search_binary_handler+0x11c/0x3f0 [ 1628.206815][T26018] __do_execve_file.isra.0+0xb53/0x1120 [ 1628.212391][T26018] do_execve+0x39/0x50 [ 1628.216484][T26018] call_usermodehelper_exec_async+0x394/0x3e0 [ 1628.222564][T26018] ? umh_complete+0x80/0x80 [ 1628.227082][T26018] ret_from_fork+0x1f/0x30 [ 1628.232729][T26018] Kernel Offset: disabled [ 1628.237061][T26018] Rebooting in 86400 seconds..