0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x75) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x44e20, @loopback}, 0x10) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) add_key$user(0x0, 0x0, 0x0, 0xfffffffffffffd61, 0xfffffffffffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x24c, r6, 0x738, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x26}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x534}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfd}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4040011}, 0x48044) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) creat(0x0, 0x0) memfd_create(0x0, 0x0) alarm(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xd8) sendto$inet(r5, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r5, 0x0) [ 1584.573822][T21151] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1584.593862][T21163] IPVS: ftp: loaded support on port[0] = 21 09:48:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000640}, 0x28) [ 1584.632306][T21160] input: syz1 as /devices/virtual/input/input31 [ 1584.678221][T21151] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1584.749300][T21223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:48:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67a04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000641}, 0x28) [ 1584.906588][T21275] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x0, r1}}) 09:48:12 executing program 5: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/46, &(0x7f00000000c0)=0x2e) recvfrom$inet6(r0, 0x0, 0x2000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x711000) [ 1585.024382][T21275] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1585.398453][T21156] IPVS: ftp: loaded support on port[0] = 21 [ 1586.389565][ C1] net_ratelimit: 22 callbacks suppressed [ 1586.389574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.401242][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.709631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.715600][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1587.269604][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1587.275432][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:48:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='security\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x80100) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x22, 0x1, 0x0, 0x0, {0x20}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0xb79) 09:48:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0xc) socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000080607041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x100000000000032e}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x5, 0x3, 0x8531}, 0x6, 0xd02, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x7, 0x400, 0x200}) 09:48:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000642}, 0x28) 09:48:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67b04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:15 executing program 5: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/149, 0x95}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r3) 09:48:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) [ 1587.998525][T21292] IPVS: ftp: loaded support on port[0] = 21 [ 1587.999552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1588.011785][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x7f, 0x4, 0xfff, 0x4, 0x9}) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x1276, 0x0) [ 1588.059638][T21294] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1588.069579][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1588.075512][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:16 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0xffffff1f) splice(r1, 0x0, r0, 0x0, 0x20000000028, 0x6) [ 1588.166897][T21294] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000643}, 0x28) 09:48:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/unix\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/13, 0xd}], 0x1, 0x7ffffffc) 09:48:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) r2 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000400)={0x0, 0x1, 0x1, [], &(0x7f00000003c0)}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@dev, @dev}, &(0x7f00000000c0)=0xa3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', r3}) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d62f23", 0x4) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0x5, &(0x7f0000000500)='GPL{\x00'}, 0x30) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000580)=0x0) setpgid(r6, r7) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) close(r0) r10 = getegid() write$FUSE_ENTRY(r8, &(0x7f0000000440)={0x90, 0xffffffffffffffda, 0x1, {0x0, 0x0, 0xd11, 0x3, 0x7, 0xfffffffffffff2cd, {0x0, 0x9, 0x9, 0x5, 0x6, 0xd8, 0xff, 0xffff, 0x6, 0x1ec, 0x10000, r4, r10, 0x6, 0x17fa}}}, 0x90) 09:48:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67c04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7e}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2828}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x80000000, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x4) [ 1588.405430][T21423] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1588.428505][T21427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:48:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000644}, 0x28) 09:48:16 executing program 4: r0 = socket$inet(0x2, 0x80000000000000, 0x7) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xfffffffffffffffe, 0xffffffffffffff2c) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000580)=""/109) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[]}, 0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000004c0)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0x1b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4301, 0x4e22, 0x4, 0xa, 0x80, 0xa0, 0xc, r2, r4}, {0x0, 0x8, 0x101, 0x3f, 0x1, 0x98e2, 0x9}, {0x63, 0xff, 0x7ff, 0xfffffffffffffff8}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0x3e}, 0xa, @in6=@empty, 0x3504, 0x4, 0x1, 0xf5, 0xdba, 0xf549, 0x7}}, 0xe8) [ 1588.489070][T21520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:48:16 executing program 1: mlockall(0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x591}, 0xb) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) [ 1588.564189][T21423] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000645}, 0x28) [ 1588.821274][T21292] IPVS: ftp: loaded support on port[0] = 21 09:48:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:48:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x400800, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null]}, {&(0x7f0000000200)=""/208, 0xd0}, &(0x7f0000000300), 0x2}, 0xa0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000400)={{0x1, 0x5, 0xad, 0x9, 0x7, 0x5}, 0x80000000, 0xfffffffffffffff9, 0x45f1, 0x10001, 0xab3, "4adc562a60d085236cca165a0a4e12f022f9db3711851e328da08d8c575e7899b711b06f1f9c1064f11f3bba4ccbbf46a0ce48d9e5d91144f97775a81462eac9eb84fc8b7a1e96e28d107d1e8d49c015b9bb4976e764089152dd4b6f68f0d4cc6838456ec7c0fe122f0d63beb0ccca9d09e496e9486d11300e43950429fe0251"}) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000080)=0x2, 0xfffffffffffffdbe) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xfffffffffffffffb) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400000) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x5, 0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000500)=0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x80}, &(0x7f0000000580)=0xfffffffffffffefe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={r6, 0x7}, 0x8) [ 1589.045087][T21651] IPVS: ftp: loaded support on port[0] = 21 09:48:17 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x600000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x100000001, 0xdbd1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0x1000, "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"}, &(0x7f0000001100)=0x1008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001180)=0x24) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000011c0)={0x9, 0x100000001}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001200)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001240)={r2, 0x80000000, 0x1, 0x4}, &(0x7f0000001280)=0x10) r4 = accept$ax25(r0, &(0x7f00000012c0)={{0x3, @null}, [@bcast, @remote, @default, @null, @rose, @default, @default, @rose]}, &(0x7f0000001340)=0x48) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000001380)={'nlmon0\x00', 0x2, 0xffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001480)=0x4, 0x4) write$smack_current(r0, &(0x7f00000014c0)='\x00', 0x1) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000001500)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001540)={r2, 0x401, 0x1000}, &(0x7f0000001580)=0x8) epoll_wait(r0, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x80000000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000001640)=0x7) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001680)=@assoc_value, &(0x7f00000016c0)=0x8) getsockname$ax25(r4, &(0x7f0000001700)={{}, [@null, @default, @netrom, @bcast, @bcast, @netrom, @rose, @null]}, &(0x7f0000001780)=0x48) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000017c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) listen(r0, 0xfff) r6 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000001800)=r6) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000001840)={0x4f, 0x7, 0x5, 0x5, 0x5}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001880)={0x8000, 0x9, 0xd, 0x9, 0xee, 0xbd2, 0x9, 0x1, r5}, 0x20) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = geteuid() getresgid(&(0x7f00000018c0), &(0x7f0000001900)=0x0, &(0x7f0000001940)) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001980)={r6, r8, r9}, 0xc) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000019c0)={0x7fffffff, 0x56, 0x101, 0x0, 0x3, 0x3, 0xfffffffffffffff9, 0xfff, 0x1d, 0x5, 0x9, 0x1ff, 0x0, 0x9, 0x1, 0x6, 0x16, 0x8, 0x8000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001a00)) sendto$inet(r3, &(0x7f0000001a40)="351b1b0fc6caef3e6f420674f960edcbec5204801cb60468c1b92a7cea441110a1fc19685fe287b45a3cd8cee1130bc9fbdc17e28789160b14f36643ce9e313d589f85a590613ba032c739d4f61e5924a6e911df9890f4fb134e57645fec432797772fb8198f0d8a103c52b5bafd105dd212bc29feac3bea72ba175e9cba83", 0x7f, 0x40, 0x0, 0x0) 09:48:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000646}, 0x28) 09:48:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67d04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10}) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x0, 'pids'}]}, 0x6) ioctl$FICLONE(r0, 0x40049409, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000380)) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xa) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x9) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x0, 0x42fc}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdi/file0,lowerdir=./file1,wor']) r5 = open(0x0, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) 09:48:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x0, 0xfffffffc}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'vxcan1\x00', 0x3f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a1e2410"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000ffdbdf250c000000000c000300a7a100000000000008000100070000000c0003000200008000000000000000000000000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000d0) memfd_create(&(0x7f00000000c0)='/dev/cachefiles\x00', 0x1) [ 1589.234186][T21656] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000647}, 0x28) 09:48:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x0, 0xfffffffc}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'vxcan1\x00', 0x3f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="01003a1e2410"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000ffdbdf250c000000000c000300a7a100000000000008000100070000000c0003000200008000000000000000000000000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000d0) memfd_create(&(0x7f00000000c0)='/dev/cachefiles\x00', 0x1) 09:48:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ftruncate(r0, 0x9) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x7850, 0x0, 0x0, 0x101aa) [ 1589.390392][T21656] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67e04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000648}, 0x28) [ 1589.708532][T21779] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1589.875010][T21779] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1589.974659][T21651] IPVS: ftp: loaded support on port[0] = 21 09:48:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:48:18 executing program 1: openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x100) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x5e}, 0x2c) read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0xff, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180)=0xfe, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000780)='./file0\x00', 0x0, 0x807a00, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x1, "100bfac30277243d8c72f9011c95f4a24746f89b018bb9da43478c8d9a2b378b", 0x200, 0x7fff, 0x2, 0x4, 0x1}) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x2, @local, 0x0, 0x2, 'wrr\x00', 0x0, 0x3, 0x2d}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x2, 0x100, 0xffffffff, 0x80000001}}, 0x44) write$cgroup_pid(r3, &(0x7f00000001c0), 0x6) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="060000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012ba00000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac141411000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000171665cc87e8194a9d7cb509a72b5fdfb38bfc437a5fefe475fdea3e5fa867a52fa774db862086c32c78b374de4fed09d9d470a55a0079ea336b8c2a"], 0x310) 09:48:18 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8001, 0x301000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x9dc4c7145f537493, 0xffffffffffffffff, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x12, &(0x7f0000000100)={@multicast2, @initdev}, 0x10) 09:48:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x4000000005fd, 0x800) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x1, 0x80) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x9, 0x2}}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200), 0x4) rmdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f00000004c0)='./file0\x00', 0x3) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000100)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x80, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1e, 0x5, "0272c683923108e9b6e5bafd0c23ef5d38d775c510397841080a71fa09ad34ae15ff032360ba57ab8b34cc47ec1f709bf2edbda6d1ca5621eb370c67421a5b97", "6b9abd020b7174366f0aaa6828138f571112e38b18b942350578ffdf634f21f1", [0x4, 0x6]}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000500)={r5, 0x19}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x2, 0x0, 0x3988, 0xfffffffffffffffc}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="010008004707000000aa0c94826cde8a9a4217e739da09a4f7c81f31def03d686b3f02b657ecc3f6e7ff0f69f6b617c5ca40992a0a656f9f"], 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x84000, 0x0) 09:48:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000649}, 0x28) 09:48:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e67f04006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet(0x2, 0x5, 0x40000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) 09:48:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064a}, 0x28) [ 1590.745413][T21798] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1590.756851][T21803] IPVS: ftp: loaded support on port[0] = 21 [ 1590.827384][T21798] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:18 executing program 1: socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x915d, @null, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$cgroup_subtree(r2, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 09:48:18 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) sendto$inet6(r0, &(0x7f0000000080)="b89ccca720e7e96d7b825fea66952ec11cf1d08c1f7b22c0c974f4ade9455185dc0864c4bf6f7bf921eff7b16569ba0ecf1bdb8d388909b4b728af21a40baf7820b265831a47139521d3392fa792c753de8e342119031c087e3de9aa230c4c86be223ed603916d296f37a4ec452e623e4b53dcb409c72b8583c8ee43a4928f48d5642bcc391b077a5c11ee651163b50b2d276d8f27cec878625021e1d5086aadfb0248a532f3606b0080d6bfcbd451de9b2c874ce1390bedc5f27b1752da1cc2d4c69d29a2b5fb14efa8a5145b6d8ef6d64cdae5744f4cd30d5bb0bc1a0bfe59", 0xe0, 0x4000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x8001}, 0x1c) write$cgroup_type(r0, 0x0, 0xfdff) 09:48:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064b}, 0x28) 09:48:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e68004006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1591.094346][T21920] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1591.176016][T21920] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1591.429557][ C1] net_ratelimit: 18 callbacks suppressed [ 1591.429565][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.441069][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1591.509101][T21803] IPVS: ftp: loaded support on port[0] = 21 09:48:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:48:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x7, 0x7f, 0x8, 0x70, 0xfffffffffffffffe}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c69) 09:48:19 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) fallocate(r1, 0x0, 0x0, 0x84003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x70b5) fallocate(r0, 0x3, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x44, @rand_addr="7022b2ce4f7da8add2ebe8f0cd2a2228", 0x5}], 0x1c) 09:48:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="82"], 0x1) fallocate(r1, 0x0, 0x0, 0x2000002) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="8d2910f2ab13e93090adeb40ca4682e4"}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044001}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 09:48:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064c}, 0x28) 09:48:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e61e08006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000040)=']keyring&\x00') [ 1591.769337][T22033] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1591.801214][T22038] IPVS: ftp: loaded support on port[0] = 21 09:48:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064d}, 0x28) 09:48:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1591.901606][T22033] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e62f26006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1591.965232][T22052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:48:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064e}, 0x28) 09:48:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='vmnet0') preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x5, "4a4148e3024e931c3c913fbb0e807df64830e42ac347f93f8b50dfef6d37a75d", 0x1, 0x2, 0x3, 0x200, 0x10, 0x2}) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) [ 1592.047529][T22057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1592.148145][T22064] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1592.159568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.165544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.229577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.235641][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.241688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.247621][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.275893][T22064] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1592.501690][T22038] IPVS: ftp: loaded support on port[0] = 21 09:48:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:48:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) fcntl$setsig(r0, 0xa, 0x1e) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000009c0), 0x4000000000000ca, 0x22, &(0x7f0000000a80)={0x0, r1+10000000}) 09:48:20 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x803, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000013000000050000009400000095000000c1eb502a133fd44a000000009219853bca4168a7c8452f5a4e7a0ced0b7fee60df474b3c1f6dbfda69605bbb6f1ded4cc11dcecd2f48573dbea342c26d4fdeed81d996275a126b68cb0753d338f0"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 09:48:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000064f}, 0x28) 09:48:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e63526006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:20 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = semget$private(0x0, 0x2, 0x351) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000340)=""/16) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6665eae8", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/current\x00') ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000300)={0xfffffffffffffff7, 0xfffffffffffff801}) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x401, 0x8000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000140), &(0x7f0000000180)=0x4) read$FUSE(r0, &(0x7f00000080c0), 0x560) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x19, 0x8}}, 0xfffffffffffffe22) [ 1592.629560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.635463][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:48:20 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000100)={0x4, 0x24}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x2000140) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000012c0)=""/102) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001340)=ANY=[], &(0x7f00000001c0)=""/4096, 0xffffffffffffff34) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000001240)) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/kvm\x00', 0x204000, 0x0) 09:48:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000650}, 0x28) 09:48:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x5, 0x1, 0x5}) eventfd(0x100) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000100)={{0x1, 0x3, 0x9, 0x3, 0x8}, 0x10000, 0x100000001, 'id0\x00', 'timer0\x00', 0x0, 0xffff, 0x8, 0x57, 0xb0f}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000240)={0x10, 0x9, {0x51, 0x0, 0xf7362e2, {0x9, 0x6}, {0x8000, 0x4}, @rumble={0x1, 0x9}}, {0x53, 0x96c, 0x3, {0x7, 0x8}, {0x1, 0xe653}, @period={0x5b, 0x8001, 0xffffffffffffffcf, 0x81, 0x9, {0x6, 0x1, 0x2, 0x9}, 0x2, &(0x7f0000000200)=[0x3ff, 0xc258]}}}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000002c0)={0x30002, 0x0, [0x1, 0x3, 0x7db7, 0x7, 0x2, 0x4, 0x81, 0x6]}) connect$l2tp(r0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x1, 0x3, {0xa, 0x10001, 0xf672, @empty}}}, 0x32) fsetxattr(r0, &(0x7f0000000380)=@known='system.sockprotoname\x00', &(0x7f00000003c0)='id0\x00', 0x4, 0x3) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000480)={{0x3a, @loopback, 0x4e24, 0x4, 'sed\x00', 0x2, 0x9, 0x6c}, {@remote, 0x4e24, 0x12000, 0x7ef, 0x3, 0x3}}, 0x44) recvmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/186, 0xba}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000940)=""/98, 0x62}], 0x8, &(0x7f0000000a40)=""/204, 0xcc}, 0x101) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000b80)="9de52982d5e880e367ff52fafa8b76734d0028deff611518298f67f9486518dd49a28cc740c9d86a4b41b1e62bc1dc1f296e6d702b5a5658cc72489a8e"}, 0x10) pselect6(0x40, &(0x7f0000000c00)={0x1, 0x5, 0x3, 0x40, 0x15d, 0x3, 0x200, 0x4}, &(0x7f0000000c40)={0x81, 0x9782, 0xffffffff, 0x1, 0x800, 0x1, 0x7, 0x8}, &(0x7f0000000c80)={0x0, 0x8, 0x101, 0x2000000020000000, 0x20, 0x4, 0x80000001, 0x7}, &(0x7f0000000cc0)={0x0, 0x989680}, &(0x7f0000000d40)={&(0x7f0000000d00)={0x401}, 0x8}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000d80)={0x7, 0x1}) r2 = dup3(r1, r0, 0x80000) rename(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='./file0\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000e40)={0x0, 0x26, "94342aef4476ad0312c68fd01488c5cd592a050932f1b3b8106785fbf20a75b3d516a5de7049"}, &(0x7f0000000e80)=0x2e) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000ec0)=@assoc_value={r3, 0x21ba}, 0x8) r4 = add_key(&(0x7f0000000f00)='dns_resolver\x00', &(0x7f0000000f40)={'syz', 0x1}, &(0x7f0000000f80)="ba174bd34edaad9c2be40d7346467f5c1e966a218b8afa0247e8620f43ed9fbfd7deb06353f33eb554fb3bdbeed72ba2e70291b2b5c6f9501529ff16a3d2f9155559", 0x42, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x8000214) fstatfs(r1, &(0x7f0000001000)=""/21) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001040)={0x60, @tick=0x80000000, 0x4, {0x2d6, 0x5}, 0x3, 0x2, 0x800}) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000001100)={0x0, @time={r5, r6+10000000}, 0x4, {0x400, 0x2}, 0x20}) [ 1592.751077][T22177] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1592.771807][T22185] IPVS: ftp: loaded support on port[0] = 21 09:48:20 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0xffffffff, 0x850f, 0x80, 0x7, 0x6, 0xca7f00}) r3 = memfd_create(&(0x7f00000001c0)='eth0-(eth0:\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x102000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1592.852399][T22177] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60032006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000651}, 0x28) [ 1593.048872][T22348] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1593.132672][T22348] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1593.354500][T22185] IPVS: ftp: loaded support on port[0] = 21 09:48:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:48:21 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x101080, 0x0) connect$inet(r0, &(0x7f0000000680)={0x2, 0x0, @broadcast}, 0xa) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @empty, 0xff}, @in6={0xa, 0x4e21, 0x8, @rand_addr="f369136ee78797c6614300d738f4de3e", 0xffffffffffffffff}], 0x38) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) unshare(0x6c060000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00\x06\x00'}, &(0x7f0000000080)=0x54) 09:48:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x219a}, 0x8) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = dup3(r1, r0, 0x80000) write$FUSE_STATFS(r4, &(0x7f0000000080)={0x60, 0xffffffffffffffda, 0x6, {{0x5, 0x3f, 0x80000001, 0x329, 0x5, 0x8, 0x100000000, 0xf6b}}}, 0x60) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000002a7, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 09:48:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x9, 0x8, 0x9, 0x4, 0x1, 0xffffffffffffffff}, 0x5b) socket$caif_seqpacket(0x25, 0x5, 0x6) 09:48:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000652}, 0x28) 09:48:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e600c1006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1593.647197][T22409] IPVS: ftp: loaded support on port[0] = 21 09:48:21 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) [ 1593.718772][T22418] IPVS: ftp: loaded support on port[0] = 21 [ 1593.767828][T22419] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000653}, 0x28) [ 1593.867818][T22424] IPVS: ftp: loaded support on port[0] = 21 [ 1593.901350][T22419] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, &(0x7f0000000800)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000083, 0x0, 0x40000084], [0x187]}) 09:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x502, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, 0x4, {0x0, 0x4, 0x9}}, 0x20) 09:48:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e600c2006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000654}, 0x28) [ 1594.155399][T22539] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1594.289218][T22539] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1594.510622][T22418] IPVS: ftp: loaded support on port[0] = 21 09:48:22 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:48:22 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) sendto$inet(r0, &(0x7f0000000040)="b471fee6b700872366727282619ba9683ef0a6611442da7528057e57251ab88b0bbf4c00c4a7765f0a54bdaf3bf833720882c05bc4a7f6dec1f739a32b3a7f53852a41539f7a", 0x46, 0x40, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mprotect(&(0x7f0000032000/0x1000)=nil, 0x1000, 0x5) setitimer(0x0, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) 09:48:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x20000000000009, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000001440)={{0x8, 0x0, 0x1, 0x4, 'syz1\x00', 0x1ff}, 0x5, 0x9, 0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xc3a4, 0xffff, 0xe1]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000100)={0x4, "16939593e98a95309e02159581ec781a80569ea1e49febc0d0e84bebd7b9c197", 0x2, 0x1}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = gettid() ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8, 0xfffffffffffffff9, 0x301f, 0x7, 0xa, 0x0, 0x0, 0x2}}) getpeername$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r3, 0xfffffffffffffc47) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000001580)=0x440000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000159, 0x0) 09:48:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000655}, 0x28) 09:48:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60102006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000656}, 0x28) [ 1594.887597][T22553] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1594.933053][T22558] IPVS: ftp: loaded support on port[0] = 21 [ 1594.994377][T22553] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1595.588599][T22558] IPVS: ftp: loaded support on port[0] = 21 [ 1596.790234][ C1] net_ratelimit: 22 callbacks suppressed [ 1596.790242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1596.801741][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1597.109595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1597.115831][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:25 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:48:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x21, 0x3, 0x4}}, 0x14) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x2c, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 09:48:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000657}, 0x28) 09:48:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60103006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:25 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'yam0\x00', 0x8000}) r1 = epoll_create1(0x0) fcntl$setflags(r0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x80, 0x6, 0x20, 0x3}, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x301801, 0x0) timerfd_gettime(r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) shutdown(r0, 0x2) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 09:48:25 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40100, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x7df60214, &(0x7f00000000c0)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000001c0)='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') setsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f0000000000)=0x1, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1597.519183][T22578] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1597.568509][T22582] IPVS: ftp: loaded support on port[0] = 21 [ 1597.648183][T22578] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1597.671031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1597.676825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1598.389601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.395605][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1598.469618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.475685][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:48:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60104006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000658}, 0x28) 09:48:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1f) [ 1598.946800][T22695] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x101, 0x2, 0x2, 0x3, 0x0}, &(0x7f00000000c0)=0x10) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2c24f893a164769c87cb77e4f0fa8cc8335effbe1426cfbd5a371f7a677e5d4f01c6ac2ce83a0d073e6cdc47fc8650fcf2120444cebb7a3552c603d070104774f91170b9e9a1daa62a60e5919a9a7d8c54dea1667f844ebdf50a633157f77a7a0fcc8e3be0c2bbc1d090da36aa17638ac654f30e20f16ec442330b06d3c00ebf7f5a99c2a0a236674829c235bc6474dd22e545ce0111084f0c32890da20067297277c41378ba57f881fd1f19369ff954a654a5f2fcb5bb07d4aee679d55be89503d1a7208ba714590e", 0xc9}, {&(0x7f00000003c0)="1e16c0612bc6147c3065f4c3fb5d8f0cb8c29a16f2d47ce1a781aa3358f3bc79734b8ba55a2e02cc2850df02ecffefe20a3727d24460276794b470e58246668488f8b4c2baddb7b2501017b078bb4ea1cb8c8c00e1e761c61829b3296222a676738e649ca69df8150fe53c2e2d726a440a9570c88658f97c6a8ad5866246b01d85eede76677a9900e3f0902f3e308830fd4ae4a4494f7ccf1ac2d916ca02ca7080ebcb302008e6a89285c45f8dc3cefc43ab356a3862abb18a2c4e192aece2056ce939bf4e0994ffd16b9122fd2aea6080fc59601575f7e3952740b16f3cb248943dd18d10b451672e3aa491d540db42655840a38d4a30ca8770d604", 0xfc}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001701000004000000000017010000820000000e000000df664e17f231cecf1d64342f9b8d000000000000180000000000000017010000030000000000000000000000180000000000000017010000040000000400000000000000400000000000000017010000020000002b000000b3b0a280ba20f6b5d994134d54f0fc0c49654ff9079243db7c10b20e46b8e453d30e2763a9b359a15eeb7b00"], 0xb0, 0x40000}, 0x40000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x3, 0x7ff, 0x4905, 0x1, 0x6}, &(0x7f00000001c0)=0x14) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000005c0)={{0x1000200000, 0x527d, 0x2000000000004, 0x30000000000000, 0x8, 0x7b}, 0x7ff, 0x3, 0x7}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) close(r3) 09:48:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000659}, 0x28) [ 1599.015994][T22701] IPVS: ftp: loaded support on port[0] = 21 [ 1599.115001][T22695] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1599.674471][T22701] IPVS: ftp: loaded support on port[0] = 21 09:48:29 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:48:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000042001fff00d36af4edf8c2171b000000000080e201400eb7"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x7}, 0x10) 09:48:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60105006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065a}, 0x28) 09:48:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:48:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x100000000000000) r3 = gettid() r4 = dup2(r0, r2) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000180)="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") kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000000)={r2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000000}) 09:48:29 executing program 4: socket$inet6(0xa, 0x6, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+30000}, {0x77359400}}) [ 1601.487705][T22718] IPVS: ftp: loaded support on port[0] = 21 [ 1601.515385][T22723] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:29 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8200, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYPTR64, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="a4e483b07a8574f99186732c82a18dfbe3b39f0d14cab58f1ee9aa01e5c99727f6302d70463839f0ba6cbf265e98365a3fb035c2b4d3afc9952b569884685a5f97a280cbefe1d506ea591e5f2b89338d122b540e0fa80ea17084ac3e41eea5cc1a6cc260178ef984ae0b78fa7304574a36950cb559cba59f8ca4ec1c8e0bb510b3283ff2012b8eb536a30bb315c35038fa01bdf509b15b8c0c809a06b80516be8714264eaa1426b78f1ea797ef4dec71742561678b53799fc6d33c56649855a74e999a1aa87907a2b05c64e23647563b9c9ddec4ed8490dce1794463aa52943bee2835d00a71e35589ee92b6", @ANYRESOCT=0x0, @ANYRES16, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRESDEC, @ANYPTR, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="c3dfdc76b17a8ebc4824902ca54f77f05c6d98147ecce904751fabfc428d2c4ac70300587dad4058ee15395ef281748da14de50154448826"], @ANYRES64, @ANYRES64, @ANYRESHEX]], 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000015) 09:48:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065b}, 0x28) [ 1601.549420][T22729] IPVS: ftp: loaded support on port[0] = 21 09:48:29 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '&&\x00\x93>lu\xfb\xf9\x06\xf6R\xe8t\xae*\xc0\xd4u\xaa)\xa0;H\xd4\xd6 P\xcba}\xc0K\x8e='}, 0x29) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '&&\x00\x93>lu\xfb\xf9\x06\xf6R\xe8t\xae*\xc0\xd4u\xaa)\xa0;H\xd4\xd6 P\xcba}\xc0K\x8e='}, 0x28) [ 1601.626495][T22723] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004c00)=[{0xffffffffffffffff}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:48:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60106006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1601.829602][ C1] net_ratelimit: 18 callbacks suppressed [ 1601.829608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.841114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.861956][T22849] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1601.956942][T22849] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1602.270847][T22718] IPVS: ftp: loaded support on port[0] = 21 [ 1602.549645][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1602.555654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1602.629622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1602.635613][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1602.641594][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1602.647501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1603.029552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1603.035479][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:48:32 executing program 1: r0 = socket(0x11, 0x2, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000005c0)={'lo\x00', {0x2, 0x0, @loopback}}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x40400) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/222) 09:48:32 executing program 4: mknod$loop(0x0, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x670, 0x428, 0x338, 0x428, 0x338, 0x0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}, {{@ipv6={@rand_addr="1a69a333e47c09105e0519f740542ead", @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'veth0\x00', 'bond0\x00', {}, {}, 0x6, 0x9, 0x5, 0x2}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr="c114f6679a2a3aa3e016c95c8d73734e", @ipv6=@mcast1, 0x1a, 0x19, 0x5d}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@broadcast, 0x15, 0x6, 0x1}}}, {{@ipv6={@empty, @ipv4={[], [], @remote}, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xff, 0xff, 0xffffff00, 0xffffffff], 'bond0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2, 0x6, 0x7, 0x10}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x796ca88dd58a94d5, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'irlan0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x2f, 0x5, 0x1, 0x60}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x6, 0x4, 0x1, [0x3, 0x1, 0x600, 0x0, 0x100000000, 0x80, 0xfffffffffffffffe, 0x1, 0x7, 0x20, 0xf0e9, 0x8, 0x9, 0x100000001, 0x5, 0x6dc], 0xf}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2cf24cf9, @ipv4=@multicast1, 0x4e20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = msgget$private(0x0, 0x200) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x4e21, @local}}) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/9) epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r1) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000200)) 09:48:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065c}, 0x28) 09:48:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x7ff) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0xff, @multicast1, 0x4e24, 0x4, 'none\x00', 0x10, 0x9, 0x72}, 0x2c) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x26, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x408000) symlinkat(&(0x7f0000000380)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x25f0301ab07ab2e7, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3d7d}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x381}}], 0x6fdaec, 0x22, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e22, @loopback}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x64, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 'vlan0\x00'}) 09:48:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60107006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) [ 1604.460036][T22858] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1604.461609][T22863] IPVS: ftp: loaded support on port[0] = 21 [ 1604.476620][T22862] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 09:48:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065d}, 0x28) [ 1604.555690][T22871] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 1604.595689][T22858] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:32 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) fsync(r0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6}) ptrace$setregset(0x4205, r2, 0x201, 0x0) ioctl$int_in(r5, 0x546f, &(0x7f0000000200)=0xe3b) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='syzkaller1\x00', 0x10) ptrace$setregset(0x4205, r2, 0x4, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) io_setup(0x20, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x0, 0xf, 0x2, 0x0, 0x368}, r2, 0x2, r3, 0x1) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x80000000000005, 0x200fffd) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x20000002007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 09:48:32 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 09:48:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60108006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) membarrier(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x330}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000580)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2, 0x1}, 0x20) 09:48:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065e}, 0x28) 09:48:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) geteuid() mknod(&(0x7f0000000180)='./file0\x00', 0x8123, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x0, 0x0, 0x40000100], [0xc2]}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:ping_exec_t:s0\x00', 0x21, 0x0) [ 1604.865482][T22985] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000065f}, 0x28) 09:48:32 executing program 4: socket$inet(0x2, 0x80007, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) 09:48:32 executing program 5: request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000080)='*\x00', 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x40100, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x2, 0x94, 0x2, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000800)={r3, 0xffff}, &(0x7f0000000500)=0x8) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e23, 0xffffffffffffffff, @empty, 0x2000000000}, 0x1c) r4 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x7, 0x80001) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x957, 0x80000) listen(r1, 0x200000000002) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000380)={'ah\x00'}, &(0x7f00000003c0)=0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0}, &(0x7f0000000300)=0xfffffffffffffebc) ioctl$TCSETAW(r5, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r8 = dup(r1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={r7, 0x2}, &(0x7f0000000480)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000005c0)={0x2, 0x0, {0x3, 0x0, 0x0, 0x3, 0x4}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 09:48:32 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x23000602) setresuid(0x0, 0x0, 0x0) r4 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) setregid(0x0, r1) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r3) [ 1605.012801][T22985] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1605.357935][T22863] IPVS: ftp: loaded support on port[0] = 21 09:48:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:48:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000660}, 0x28) 09:48:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000440)={0x0, "3230475a2a973067474395c24c94bc949800a4d44e3f85817cb45a1862ea5735", 0x2, 0xb9, 0x3f, 0x2, 0x12, 0x2, 0x1, 0x848}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003980)=[{{0x0, 0xfffffffffffffd9e, &(0x7f00000002c0), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x6a3, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x8000, 0x1, 0x7, 0x0, 0x401]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x4, 0x80000001, 0xb48, 0x100000001, 0x0, 0x8, 0x2004, 0x1, 0x8001, 0x851, 0x63e4, 0x2, 0x1, 0x13a, 0x3, 0x7ff, 0x40, 0x5, 0x5, 0xcb, 0xfffffffffffffe01, 0x7f, 0x3, 0x7ff, 0xfffffffffffffc00, 0x1f, 0x7fff, 0x0, 0x9, 0x2, 0x1, 0x0, 0x3, 0x1, 0xfffffffffffffff7, 0x800, 0x0, 0x9, 0xc6be6280b5dfdb86, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x33a88499, 0x100, 0x7, 0x401, 0x2, 0x88a6}, 0x0, 0xf, r3, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000002c0)=""/206, &(0x7f0000000000)=0xce) socket$inet(0x2, 0xe, 0x6) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bind$ax25(r4, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea") ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:48:33 executing program 1: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000200)=0xfd55) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) r3 = geteuid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000007c0)) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000780)=[0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0xee00, 0x0]) r9 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x4, r6}, {0x8, 0x0, r7}, {0x8, 0x3, r8}, {0x8, 0x6}, {0x8, 0x7, r9}], {0x10, 0x3}, {0x20, 0x4}}, 0x64, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1168, 0x0, 0x40, 0x0, 0x8000}, &(0x7f0000000100)=0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000880)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r11, &(0x7f0000000900)={0x9, 0x108, 0xfa00, {r13, 0x20, "4f2cec", "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"}}, 0x110) ioctl$EVIOCGREP(r12, 0x40047459, &(0x7f0000000340)=""/174) pread64(r10, 0x0, 0xd2, 0x0) 09:48:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60109006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/mcfilter6\x00\xea\xd3B}\x8c\x01\xf0\xa2\xa9\x9e\xcesefL\xe8\x96\xc6\x9cF\xe0\x99\xb6J&\x14\xee\xc9_\xd5\xc9\x994\xd7?x\xf6dp\x04|\xb0yw\x9f2\xbf\xb9\xc2w\x90}\x05\x00\x00\x00\x84\xea\xaa\x89\xd3z\x15%\x17\x80+f\x90\x01\xbcYOP\x9e\xcc\xdcn\x12/\a\xb7\xcds\x82\xf2\x16T(\b\x1ee\xac\x8e\xd4\xf2\x1bV\xa4b\xd4J_!\x8e\xb3Z\xcc\xf0\x11\x91.\xac\t\xb3QES\xcc]\xd2\xa9\xb9\x91U0N CE') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xffffffffffffffd3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040)=0xc89, 0x6c2a1f6a380dd874) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:48:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000661}, 0x28) [ 1605.736291][T23218] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1605.763208][T23231] IPVS: ftp: loaded support on port[0] = 21 09:48:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) fcntl$lock(r1, 0xfffffffffffffffc, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900154001000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 1605.865002][T23218] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x8926, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/105, &(0x7f0000000140)=0x69) 09:48:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x10000001, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) 09:48:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6010a006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000662}, 0x28) [ 1605.996220][T23338] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1606.077861][T23349] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1606.126986][T23351] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1606.247891][T23351] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1606.473896][T23231] IPVS: ftp: loaded support on port[0] = 21 09:48:34 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:48:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x7ff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xfffffffffffffff9, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) recvfrom$rxrpc(r1, &(0x7f0000000500)=""/181, 0xb5, 0x40000041, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x4b564d04, 0x10000000800002c1, 0x0, 0x20000000000000], [0xc1]}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000400)={0x4, 0x7, 0x4, 0x10e010, {0x77359400}, {0x0, 0xc, 0x80000000, 0x4, 0xffff, 0x2, "22b2bdf7"}, 0xfffffffffffffffe, 0x4, @fd=r5, 0x4}) r8 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x2}, [{0x2, 0x4, r6}, {0x2, 0x1, r7}], {0x4, 0x2}, [{0x8, 0x2, r8}], {0x10, 0x1}, {0x20, 0x1}}, 0x3c, 0x1) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000005c0)=""/210) 09:48:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r1, 0x8108551b, &(0x7f0000000100)) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/181, 0xb5}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/114, 0x72}], 0x5) 09:48:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) fcntl$lock(r1, 0xfffffffffffffffc, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900154001000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:48:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000663}, 0x28) 09:48:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6010c006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:34 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7ff, 0x9, 0xff, 0x200}, {0x3, 0x61a93b1f, 0x9, 0x20000000000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:48:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000664}, 0x28) [ 1606.761154][T23467] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1606.783388][T23465] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1606.783883][T23471] IPVS: ftp: loaded support on port[0] = 21 [ 1606.867588][T23467] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1606.900061][ T26] audit: type=1326 audit(1552124914.732:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 09:48:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) fcntl$lock(r1, 0xfffffffffffffffc, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900154001000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:48:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60123006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:34 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsync(r0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) [ 1607.019385][ T26] audit: type=1326 audit(1552124914.772:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 1607.095924][T23484] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1607.124180][T23486] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 09:48:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000665}, 0x28) [ 1607.138494][ T26] audit: type=1326 audit(1552124914.782:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 [ 1607.189543][ C1] net_ratelimit: 22 callbacks suppressed [ 1607.189551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.201104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.239443][ T26] audit: type=1326 audit(1552124914.782:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x457f29 code=0x50000 [ 1607.307186][T23484] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1607.319431][ T26] audit: type=1326 audit(1552124914.792:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 [ 1607.410607][ T26] audit: type=1326 audit(1552124914.792:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 1607.450764][ T26] audit: type=1326 audit(1552124914.802:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 1607.491538][ T26] audit: type=1326 audit(1552124914.812:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 1607.514507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.520443][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.582619][ T26] audit: type=1326 audit(1552124914.822:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 [ 1607.618898][ T26] audit: type=1326 audit(1552124914.822:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 1607.720145][T23471] IPVS: ftp: loaded support on port[0] = 21 09:48:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:48:35 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='./file1/file0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x80, 0x0) readlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/91, 0x5b) lchown(&(0x7f0000000040)='./file0/file1/file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x2c400, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000380)) 09:48:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x800000004, 0x4, 0x400a94, 0x0, 0xffffffffffffffff, 0x41c, [0x7, 0x0, 0x0, 0x0, 0x320]}, 0x2c) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, "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", 0x1000}, 0x1006) 09:48:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000080000000000000000000000000000000000000000000a04e7b41d62679a2000000000000000000000000000000000000000000000000a5b66c70311353e074d994bd401e80d8000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x1}, 0x20) 09:48:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6012d006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000666}, 0x28) [ 1607.913210][T23599] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x4}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x0, @local, 0x9}, @in6={0xa, 0x4e22, 0x8000, @loopback, 0x9}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}], 0xb0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@dstopts={0x2c, 0x1, [], [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) unshare(0x8000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000040)="1107eb98c041dfe9ffc85deffea8f40000000000", 0x14) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1000000003c) fcntl$setstatus(r2, 0x4, 0x42803) 09:48:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000667}, 0x28) [ 1607.991996][T23629] IPVS: ftp: loaded support on port[0] = 21 [ 1608.004087][T23599] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:35 executing program 1: pipe(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001680)=0x14, 0x80800) fstat(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001740)={{{@in=@local, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x5e, r2, r3}, {0x10001, 0x1, 0x48, 0x7ff, 0x8, 0x3f, 0xfffffffffffff801, 0x6}, {0x0, 0xd2, 0x5, 0x5}, 0x7, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x4d4, 0x7e}, 0x2, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0x2, 0x800000000000000, 0x1000}}, 0xe8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) write$FUSE_POLL(r5, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x7}}, 0xfffffffffffffdfb) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) bind$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x2, @local}}, 0x1e) [ 1608.069575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1608.075490][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:48:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60148006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000668}, 0x28) [ 1608.137762][T23712] overlayfs: filesystem on './file0' not supported as upperdir 09:48:36 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='./file1/file0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x80, 0x0) readlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/91, 0x5b) lchown(&(0x7f0000000040)='./file0/file1/file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x2c400, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000380)) [ 1608.278405][T23801] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1608.441669][T23801] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1608.789584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1608.795589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1608.869569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1608.875554][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1609.031220][T23682] IPVS: ftp: loaded support on port[0] = 21 [ 1612.229561][ C1] net_ratelimit: 18 callbacks suppressed [ 1612.229570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1612.241168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1612.949837][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1612.955837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1613.029587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1613.035548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1613.041528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1613.047424][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:48:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6014c006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000106000000002f000000000000002d010cc56203f9f8a75d6823e24d3a6bac9d26e659350702141cbf5e9458d99bd2dd4bf8a09650826144472c2919151d8053f6fdf42be2f2b57e4f5ef0edec0efac43bcf28a25f9c56201b4869acff7d87e73d7870c03d9145713f10f91a3eabed2ebf4b02d019d4d6b349cb9b705398ab22c5f680c3e47561aa9b1260190efdb57193fc446c823b221319f67ffc837ef221b28c9593254cb56c8ef00460af7de226109f0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000b0000000000"], 0x3c}}, 0x0) 09:48:40 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000200)) geteuid() stat(0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) getgid() getegid() getegid() stat(0x0, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="b5447b7aaa5ecc541ae42e13a29eaa8acab7dd54068345bf122da29c0a44f896463bd479ae13793369ccb8a864d42887edefb89b511ac51f06d4cb052b2cd7f3758a2c72c46d2adac86880b470e822c6d7fbdadccbd30b52c8d3adeaba8264", 0x5f) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r1) 09:48:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000669}, 0x28) 09:48:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000000180), 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x5be, 0x4) sendmsg(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1}, 0x0) [ 1613.128921][T23847] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1613.162643][T23849] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:41 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xffffffffffffff58) splice(r0, 0x0, r1, 0x0, 0x3fffffffffff, 0x0) 09:48:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066a}, 0x28) 09:48:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffff7fffffffff, 0x4) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x800442d2, &(0x7f0000000000)) [ 1613.215473][T23852] IPVS: ftp: loaded support on port[0] = 21 09:48:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000180)=@raw=[@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) [ 1613.282988][T23849] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:41 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x0) capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x2000}) close(r1) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x4, 0x0, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @empty, 0x6, 0x80000000, 0x0, 0x500}) bind$can_raw(r0, 0x0, 0x4861707d) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) 09:48:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60160006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1613.429825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1613.435677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1613.515012][T23970] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1613.598180][T23970] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:48:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066b}, 0x28) 09:48:41 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000680)={0x2, 0x3ff, 0x20af8, 0x0, 0x0, [], [], [], 0x8, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000540)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x11e, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 09:48:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x42) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) 09:48:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60168006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1613.975680][T23979] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:41 executing program 1: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x20001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) r2 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x4, 0x20000) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newtclass={0xb4, 0x28, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, r1, {0x6, 0x7}, {0x1, 0xffff}, {0xb, 0x10}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x88, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x9}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x2c, 0x3, "4b2f4104b886978b548f6052f7db1f588da50f7a24e7d3d207c3eb717ee563554323af16635fcdeb"}, @TCA_ATM_HDR={0x40, 0x3, "fba7ccb676f15e8bfece8d07961964a4694bf17952aa7a599a8d2c6981483730b757f6f41def15e5a398424d45e47c4b279cf0465f39d2cab6"}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000000000000"], 0xa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x640000, 0x0) 09:48:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066c}, 0x28) [ 1614.111357][T23979] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6016c006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:42 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2c000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, {0x10d9, 0x2, 0x1, 0x80000001}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x9) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:48:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066d}, 0x28) [ 1614.386267][T24201] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1614.485218][T24201] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socket$packet(0x11, 0x3, 0x300) sendmsg$inet_sctp(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="8ba7ac1d3808c296997d0cd3ad3b8ba6b42d5a872cb7409038e9fad254ef77546690d81343eb93adde85138e", 0x2c}], 0x1}, 0x0) 09:48:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\'!]\x00') ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000000000000003618"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x1}, 0xfffffffffffffe94) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) 09:48:42 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000400)={0x0, @bt={0x1, 0xfffffffffffffffc, 0x1, 0x2, 0xc3, 0x0, 0x8001, 0x3, 0x10000, 0x6, 0xb7, 0x8, 0x80000001, 0x1, 0xf, 0x9}}) timer_create(0x2, &(0x7f0000000000)={0x0, 0x18, 0x1, @thr={&(0x7f0000000200)="1537adc1963b51a4f228fb5c2f3c28d719836f1285ff42ea001b88b224d71e146ca85cf0edbef863fabb02d4f127001a219815161b4f5a9b5e8e89", &(0x7f0000000240)="67bf5b141d2bb6fe636237c161a61ba9d7139fdfb09d83dcc803b42c205f6cb95199e47c08e28658112d1b849474d51e9dac635082bb89a3b74f19124f93d872fb6e9ceb420cc365b1c8f6d1b71cdd6320a877a206a0eb73aed2ba7af7f58ffe29cdcf989f9453fa7fc1b40ca19f08a5323c4839f0ac5f7a4a843103090cf51b59ff3bd9b9cc05a801660b4bfb23c64318c2a33d40430c4ee380327173a2a1d282fc8cec074ce4a91a873204a1d28ed43e1ea65db7ec1ec861f49ed383fc4964edaa306e56e27997f92ae3617a121931400152db65624045b5a2f89d39460c42ccdf93820d9acda214b567b6be256404dc3c27b8a2ffe2be4d40"}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000380)={0x0, 0x800}) ptrace$getsig(0x4202, r2, 0x1000, &(0x7f0000000180)) 09:48:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066e}, 0x28) 09:48:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60174006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:48:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000066f}, 0x28) [ 1615.193591][T24215] IPVS: ftp: loaded support on port[0] = 21 [ 1615.204692][T24218] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:43 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x4000000000004) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x7ff, 0x5, 0x1a0, 0x1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x7ff, 0x7, 0x3, 0x2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x40, 0x0) 09:48:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000006, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000200)=0xc) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xfffffffffffffff7) setresuid(r3, 0xfffe, 0xffffffffffffffff) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000100)={0x34, 0x3, 0x0, {0x0, 0x13, 0x0, 'ppp1/$/,eth0{\\wlan0'}}, 0x34) ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), 0x0) r5 = socket$inet(0x2, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x80000000108) mount$overlay(0x400000, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='upperdir=./ile0,lowerdir=./file0,workdir=./file1']) 09:48:43 executing program 5: socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'securityvmnet1{]'}, {0x20, 'vmnet1X}ppp1security)ppp1'}], 0xa, "661500e3a5fd846d10cd696e8c9f6655fe26f69b0b26744e20b9194c07d21da8aabb395eb947fb8635ad9d9f819468080788721461f2f38388ef2bee06474da086d665143921a7ae68c1"}, 0x80) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000340)={0xe8, 0xfffffffffffffffe, 0x6, [{0x1, 0x30d3, 0x0, 0x1000}, {0x0, 0xff, 0x19, 0x7, 'vmnet1X}ppp1security)ppp1'}, {0x4, 0x179, 0x0, 0x5}, {0x1, 0x3ff, 0x10, 0xffffffff, 'securityvmnet1{]'}, {0x2, 0x1827, 0x10, 0x17, 'posix_acl_access'}, {0x3, 0x3ff, 0x3, 0x1e, '%:^'}]}, 0xe8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 1615.323149][T24218] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000670}, 0x28) 09:48:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6017a006c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) getpeername$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@default, @rose, @rose, @netrom, @default, @remote, @remote, @netrom]}, &(0x7f0000000180)=0x48) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x5}) 09:48:43 executing program 5: sysfs$2(0x2, 0x932, &(0x7f0000000000)=""/19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:48:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0x8, 0x7c7, 0x10000}, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xbf) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xa, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1615.490832][T24338] ptrace attach of "/root/syz-executor.1"[7579] was attempted by "/root/syz-executor.1"[24338] 09:48:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000671}, 0x28) [ 1615.554843][T24374] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x1d, 0x400000000000107, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x41007701, 0x0) [ 1615.627047][T24374] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1615.747919][T24461] *** Guest State *** [ 1615.795409][T24461] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1615.834792][T24461] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1615.848602][T24461] CR3 = 0x0000000000000000 [ 1615.857102][T24461] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 1615.867874][T24461] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1615.919406][T24461] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1615.967625][T24461] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1615.999626][T24461] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1616.015055][T24461] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 1616.041521][T24461] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1616.069137][T24461] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1616.085786][T24461] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1616.107609][T24215] IPVS: ftp: loaded support on port[0] = 21 [ 1616.110776][T24461] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1616.154185][T24461] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1616.199627][T24461] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1616.229549][T24461] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1616.259545][T24461] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1616.281960][T24461] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1616.300981][T24461] Interruptibility = 00000000 ActivityState = 00000000 [ 1616.314018][T24461] *** Host State *** [ 1616.322393][T24461] RIP = 0xffffffff811b3d90 RSP = 0xffff88805473f8e0 [ 1616.335770][T24461] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1616.350737][T24461] FSBase=00007fb866254700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1616.369202][T24461] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1616.382704][T24461] CR0=0000000080050033 CR3=0000000094fcd000 CR4=00000000001426f0 [ 1616.399636][T24461] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1616.415996][T24461] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1616.429607][T24461] *** Control State *** [ 1616.438334][T24461] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1616.454775][T24461] EntryControls=0000d1ff ExitControls=002fefff 09:48:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:48:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000672}, 0x28) 09:48:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100036c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400000052000200000000800000df2500000000"], 0x1}}, 0x4) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) clock_gettime(0x0, &(0x7f0000000200)) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xffffffff, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000240)) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000480)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0xbe9, 0x10000, 0x0, 0x1, 0x7, 0x8001, 0x6, 0x400, 0x0, 0xcf, 0x10001, 0x10800000, 0x9, 0x0, 0x1, 0x4}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000600)) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000100)={0x0, 0x989680}) 09:48:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x20000000000009, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000001440)={{0x8, 0x0, 0x1, 0x4, 'syz1\x00', 0x1ff}, 0x5, 0x9, 0x8, 0x0, 0x0, 0x8, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xc3a4, 0xffff, 0xe1]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000100)={0x4, "16939593e98a95309e02159581ec781a80569ea1e49febc0d0e84bebd7b9c197", 0x2, 0x1}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = gettid() ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8, 0xfffffffffffffff9, 0x301f, 0x7, 0xa, 0x0, 0x0, 0x2}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r3, 0xfffffffffffffc47) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000001580)=0x440000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000159, 0x0) [ 1616.467710][T24461] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1616.480665][T24461] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 1616.488287][T24461] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 1616.573518][T24578] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1616.589278][T24577] IPVS: ftp: loaded support on port[0] = 21 [ 1616.607787][T24461] reason=80000021 qualification=0000000000000000 [ 1616.664771][T24461] IDTVectoring: info=00000000 errcode=00000000 09:48:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000673}, 0x28) [ 1616.707727][T24461] TSC Offset = 0xfffffc9c4236a332 09:48:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4008ae6a, &(0x7f0000000000)={0x0, 0x80000001}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, r2}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000140)={0x3, 0x7fffffff, [{0x100000000, 0x0, 0x6}, {0x6, 0x0, 0x8}, {0x0, 0x0, 0x3}]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0xd76, 0x413c7dce, 0xf950, 0x4, 0x2, 0xf9a, 0xfffffffffffffffe, 0x8], 0x9, 0x30000000000, 0x1, 0x167c, 0x4, 0x4, {0xffff, 0x7, 0x400, 0xfc, 0xa38, 0x800, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x3d, 0x6, 0x0, 0x8eba, "122a0f7abedefc0a919eeeef5545ad875661ef31f68c932d430968e699939063"}}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0x0, 0xc609, 0x0, 0xffffffffffffffff}) [ 1616.728895][T24578] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1616.741410][T24461] EPT pointer = 0x000000008ee3201e 09:48:44 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = gettid() r2 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe2(&(0x7f0000000040), 0x4000) ptrace(0x4206, r1) tkill(r2, 0x9) 09:48:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000240)=0x1ff, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000003c0)=ANY=[], 0x0) mmap$binder(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x17, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0x4, 0x3f, "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", 0xd1, 0x6, 0xfffffffffffffffa, 0x4, 0x6, 0x0, 0x30, 0x1}, r1}}, 0x128) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 09:48:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60110046c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000674}, 0x28) 09:48:44 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00004b5000/0x2000)=nil, 0x2000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xfffffffffffffffd, 0x3, 0xb52a, 0x2, 0x0, 0x5}) [ 1617.014897][T24728] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1617.150818][T24728] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1617.265031][T24577] IPVS: ftp: loaded support on port[0] = 21 09:48:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:48:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000675}, 0x28) 09:48:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00'}, 0x30) sched_setaffinity(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000440)={{0x3f, 0x7ff}, {0x7, 0x7}, 0x1000, 0x1, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={r5, r6}) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x10001, 0x7fffffff}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)={r7, 0x43, "d0d57c634783556b4e19ea5b0160e9827f168e381713b0c6fcbed3538f6ea535033c22f728059bc55e87e73b901a84af3df04f26d8de061b4c39795f7b7ac76eb8f2d5"}, &(0x7f0000000580)=0x4b) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000280)={'bcsf0\x00', 0x400}) r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0xffffa888, 0x3, 0x0, 0x0, 0x0, @random="16b29a3288a8"}, 0x80, 0x0}, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd, 0x0, 0x0, 0x100a0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) 09:48:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000622000/0x3000)=nil, 0x3000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) exit(0x0) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 09:48:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001000), &(0x7f0000001040)=0x4) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000100), &(0x7f0000000380)=0x4) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x0, 0x48, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0xffffffffffffffff}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x1007}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000680)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r2, 0x2}}, 0x18) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) close(r1) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000b00)=[{{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/171, 0xab}, 0xa1}, {{&(0x7f0000000840)=@xdp, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/116, 0x74}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/80, 0x50}], 0x3, &(0x7f0000000ac0)=""/39, 0x27}, 0x6}], 0x2, 0x40000000, &(0x7f0000000bc0)={r3, r4+30000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000740)={0x0, 0x5, 0x9a, 0x4}, &(0x7f0000000e40)=0x10) getsockname$ax25(r0, &(0x7f0000000f40)={{0x3, @netrom}, [@bcast, @bcast, @rose, @netrom, @null, @bcast, @rose, @bcast]}, &(0x7f0000000fc0)=0x48) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000e80)=@assoc_value={r7, 0x4}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e21, 0x7, 0x4e23, 0x3, 0x0, 0x80, 0x20, 0x32, r5, r6}, {0x3, 0x8, 0x1, 0x7, 0xfffffffffffffff7, 0x3, 0x4c99, 0x959e}, {0x1, 0x79, 0xffffffffffffff71, 0x10f5}, 0x5, 0x0, 0x3, 0x0, 0x2, 0x3}, {{@in6=@ipv4={[], [], @remote}, 0x4d4, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x34ff, 0x0, 0x1, 0x1ec0000000000000, 0x1, 0x4, 0x8}}, 0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000ec0)={0x4, 0x2}) r9 = getpgrp(r8) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x10001, 0x9f90, 0x80, 0x3, 0x0, 0x2, 0x3440, 0x6, 0x800000, 0x0, 0x400, 0x5fe, 0x10000, 0x5, 0x10001, 0xce, 0x81, 0xe1f1, 0xd48, 0x401, 0x100000000, 0x200, 0x470, 0x3f, 0xffffffff, 0xfffffffffffffffc, 0x101, 0x200, 0x0, 0x7, 0x6, 0x8, 0x1, 0x4588, 0x5, 0x8, 0x0, 0x9, 0x6, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0xd0fe, 0x800, 0xd, 0x1, 0x6, 0x5718}, r9, 0xe, r0, 0x1) 09:48:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100056c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000676}, 0x28) [ 1617.589527][ C1] net_ratelimit: 22 callbacks suppressed [ 1617.589535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.601183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1617.618735][T24816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001400008912, &(0x7f0000000180)) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2d7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000380)="267e357ea4551bfec261c3e1d3109ea9cf311f206127d0a35045b0769e3d10eb5632d095fa71a1801bc603a69a32ac59dd408f16576fc3d02630a8ad91300a077e39851ac2b906e5c4f30f89d3806134ecbbb95a4dbb56a7c3a36fd1783ca35bef400fbabe7dbe97d17015ce6e8ec844c8bcd35e984e7ec9d4de4f3ca3802fe10ae9556aaf132a5325528d86d2a6d9b55b198c66a0a5b94b038dccec714c1e50f4be0495895b112e0b805b30b667f9c13127f25707f6c308263a1501ad6a8fc1b118df0b6bdd7cd29704b0ce47bb073f050900fc30adde4cafdfa9", 0xdb) io_setup(0x0, &(0x7f0000000180)) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x5, 0x8000, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x800, 0xc, 0x5e4, 0x100, 0x0, 0x2, 0x0, 0x1a99, 0xfffffffffffff79b, 0x0, 0x7, 0xe7c6, 0xfc00, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8001, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1f, 0x81, 0x10000, 0x3ff, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x5}, 0x2000, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x7, r1, 0x3) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, 0x0) getsockname$packet(r1, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000023c0)=0x14) accept4$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002440)=0x14, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000027c0)={&(0x7f00000002c0), 0xc, &(0x7f0000002780)={&(0x7f0000002480)={0x170, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x7, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1617.676884][T24825] IPVS: ftp: loaded support on port[0] = 21 09:48:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lseek(r0, 0x0, 0x4) 09:48:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000677}, 0x28) [ 1617.717516][T24816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100066c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1617.924015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.930302][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x0) [ 1618.024860][T24842] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1618.168415][T24842] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1618.275314][T24834] overlayfs: './file0' not a directory [ 1618.469595][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1618.475407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1618.631323][T24825] IPVS: ftp: loaded support on port[0] = 21 09:48:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:48:46 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x40, 0x2}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x10000}, &(0x7f0000000280)=0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x410080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x4, 0x6, 0x1}) r3 = socket(0x17, 0x3, 0x65) write(r3, &(0x7f0000000080)="2400000020002551071c0165ff00fc020200000000100f000ee1000c08000b0003000000", 0x24) 09:48:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000678}, 0x28) [ 1619.039383][T24856] IPVS: ftp: loaded support on port[0] = 21 [ 1619.204323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.210714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1619.269653][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.275683][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:47 executing program 1: mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000009, 0x852c5a8fcfb0f431, 0xffffffffffffff9c, 0x0) 09:48:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100076c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x74000a, 0x8}) 09:48:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000679}, 0x28) 09:48:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) [ 1619.673635][T24963] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1619.673662][T24967] usb usb5: usbfs: process 24967 (syz-executor.5) did not claim interface 0 before use 09:48:47 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x500, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8020000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00-a\xb6\xdf\xa0\xe4L\x0f\xa9\xc5\xf7\xf7]\x82\xf1 \xd6\xb8d\xf3\xd2\xf6\xf7nf\x02\xe7\x84_\xb3\xbb\xc8\x80\xbd\xd3K\x17\xaf\x106}\r\xed\xa6G\xad\x03Ye\xf5&I\xc0b\x93\xd8\xcfq\xb0XT\x11\xc9\xd3\x95k\xc0\xdaP\xfd uV1/eK\xfe\xf3\x9d/\r\xe0`') setns(r2, 0x0) clone(0x10262100, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r1, r1) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000180)=""/157, &(0x7f00000000c0)=0x9d) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000840)=ANY=[]) socket$inet6(0xa, 0x805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000640)) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) [ 1619.727282][T24856] IPVS: ftp: loaded support on port[0] = 21 09:48:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067a}, 0x28) [ 1619.791032][T24963] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1619.836644][T24977] IPVS: length: 157 != 1023207928 [ 1619.851985][T24978] usb usb5: usbfs: process 24978 (syz-executor.5) did not claim interface 0 before use 09:48:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100096c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000180)) mq_open(&(0x7f00000001c0)='vmnet0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 1620.011063][T25076] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1620.153210][T25076] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:48:49 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/197) 09:48:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067b}, 0x28) 09:48:49 executing program 1: syz_open_dev$video(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\b', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000000c0)={[{@journal_checksum='j%urnal_checksum'}]}) 09:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x80005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x7f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0xfffffffffffffeb0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ftruncate(r2, 0xa48204) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) pread64(r3, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) 09:48:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000a6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1622.140514][T25099] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1622.179005][T25170] IPVS: ftp: loaded support on port[0] = 21 09:48:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\x00', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2021, &(0x7f0000000680)={0x2, 0x800, @rand_addr=0x1ff}, 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getpgid(0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$BLKRRPART(r0, 0x125f, 0x0) 09:48:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067c}, 0x28) 09:48:50 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip_mr_cache\x00') syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='mounts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000580)={0x3ff}, 0x0, 0x0) [ 1622.268752][T25099] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1622.343861][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 1622.343873][ T26] audit: type=1804 audit(1552124930.182:373): pid=25097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/file0/file0/root/syzkaller-testdir680019096/syzkaller.cwIvze/2401/bus" dev="sda1" ino=17105 res=1 09:48:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067d}, 0x28) 09:48:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x558f8710, 0x0, 0x0, 0x0, 0x0) 09:48:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa0, &(0x7f0000000040)="77fd2de76be60dcb4a086e4b0feada6cec0789d8d6d1dcd41837db02105e365498e18a2230") [ 1622.493594][ T26] audit: type=1800 audit(1552124930.222:374): pid=25097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17105 res=0 [ 1622.629995][ C1] net_ratelimit: 18 callbacks suppressed [ 1622.630042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.636321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.670377][T25324] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1623.005928][T25170] IPVS: ftp: loaded support on port[0] = 21 [ 1623.045041][ T26] audit: type=1804 audit(1552124930.882:375): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/file0/file0/file0/file0/root/syzkaller-testdir680019096/syzkaller.cwIvze/2401/bus" dev="sda1" ino=17105 res=1 [ 1623.120938][ T26] audit: type=1804 audit(1552124930.912:376): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/file0/file0/root/syzkaller-testdir680019096/syzkaller.cwIvze/2401/bus" dev="sda1" ino=17105 res=1 [ 1623.238000][ T26] audit: type=1800 audit(1552124930.912:377): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17105 res=0 09:48:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:48:51 executing program 1: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000000)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x5, 0x0) 09:48:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000c6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067e}, 0x28) 09:48:51 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) ustat(0x2, &(0x7f00000000c0)) 09:48:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080001b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x9}) [ 1623.349561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.355517][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.429590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.435626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.441629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.447636][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, &(0x7f0000000b00)=""/11, 0xb, 0x0, 0x0, 0x0) 09:48:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="ff"], 0x1) [ 1623.473432][T25346] IPVS: ftp: loaded support on port[0] = 21 [ 1623.480788][T25341] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000067f}, 0x28) 09:48:51 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x1, 0x1}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) uname(&(0x7f0000000080)=""/13) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x14) 09:48:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1623.608885][T25341] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601210f6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1623.800450][T25464] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1623.829558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.835341][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.905958][T25464] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1624.157494][T25346] IPVS: ftp: loaded support on port[0] = 21 09:48:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:48:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60104106c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 09:48:52 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) write(r1, &(0x7f0000000340), 0xffbf076c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) 09:48:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 09:48:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000680}, 0x28) 09:48:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa4, &(0x7f0000000040)) 09:48:52 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x32) set_thread_area(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x40046109, &(0x7f0000000300)) prctl$PR_SET_ENDIAN(0x14, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x2, 0x0, 0x1}}, 0x80) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fcntl$getownex(r1, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffffffff0001}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x5, 0x100) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) close(r0) [ 1624.528861][T25476] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000681}, 0x28) 09:48:52 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) close(r0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, r1}, 0xc) [ 1624.621113][T25529] IPVS: ftp: loaded support on port[0] = 21 [ 1624.653585][T25476] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000682}, 0x28) 09:48:52 executing program 5: [ 1625.274218][T25529] IPVS: ftp: loaded support on port[0] = 21 09:48:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:48:53 executing program 4: 09:48:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60120106c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:53 executing program 5: 09:48:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000683}, 0x28) 09:48:53 executing program 1: 09:48:53 executing program 1: 09:48:53 executing program 5: 09:48:53 executing program 4: 09:48:53 executing program 1: [ 1625.558520][T25710] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1625.574569][T25715] IPVS: ftp: loaded support on port[0] = 21 09:48:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000684}, 0x28) [ 1625.661813][T25710] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:53 executing program 4: [ 1626.164098][T25715] IPVS: ftp: loaded support on port[0] = 21 [ 1627.989584][ C1] net_ratelimit: 22 callbacks suppressed [ 1627.989595][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.001149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.309646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.315656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.869591][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.875424][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:48:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:48:57 executing program 5: 09:48:57 executing program 1: 09:48:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601001f6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000685}, 0x28) 09:48:57 executing program 4: 09:48:57 executing program 4: 09:48:57 executing program 1: [ 1629.484591][T25730] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:57 executing program 5: 09:48:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000686}, 0x28) [ 1629.589570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1629.595605][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1629.615245][T25737] IPVS: ftp: loaded support on port[0] = 21 09:48:57 executing program 5: [ 1629.661763][T25730] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1629.669622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1629.677502][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:48:57 executing program 4: [ 1630.286646][T25737] IPVS: ftp: loaded support on port[0] = 21 09:48:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x01\x00'}, &(0x7f0000000140)=0x54) 09:48:58 executing program 1: 09:48:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100206c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) 09:48:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000687}, 0x28) 09:48:58 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x394e78b8) 09:48:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'uueue0\b\"\xf1W\xca\xb8\xf4\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x3, 0x0, 0x80000001}}) 09:48:58 executing program 4: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f00000018c0)=@pppoe={0x18, 0x0, {0x1, @empty, 'veth0_to_team\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000001b00)=[{0x18, 0x0, 0x0, "be77dc"}], 0x18}}], 0x1, 0x40000) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x101001) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x1f4, 0xd}, 0x98) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) [ 1630.610440][T25757] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000688}, 0x28) [ 1630.670968][T25761] IPVS: ftp: loaded support on port[0] = 21 [ 1630.711838][T25757] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60110206c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:58 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 09:48:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000689}, 0x28) [ 1630.952865][T25876] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1631.059632][T25876] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1631.437765][T25761] IPVS: ftp: loaded support on port[0] = 21 09:48:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6010f216c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:48:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068a}, 0x28) 09:48:59 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:48:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:48:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001400008912, &(0x7f0000000180)) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2d7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000380)="267e357ea4551bfec261c3e1d3109ea9cf311f206127d0a35045b0769e3d10eb5632d095fa71a1801bc603a69a32ac59dd408f16576fc3d02630a8ad91300a077e39851ac2b906e5c4f30f89d3806134ecbbb95a4dbb56a7c3a36fd1783ca35bef400fbabe7dbe97d17015ce6e8ec844c8bcd35e984e7ec9d4de4f3ca3802fe10ae9556aaf132a5325528d86d2a6d9b55b198c66a0a5b94b038dccec714c1e50f4be0495895b112e0b805b30b667f9c13127f25707f6c308263a1501ad6a8fc1b118df0b6bdd7cd29704b0ce47bb073f050900fc30adde4cafdfa9", 0xdb) io_setup(0x0, &(0x7f0000000180)) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x5, 0x8000, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x800, 0xc, 0x5e4, 0x100, 0x0, 0x2, 0x0, 0x1a99, 0xfffffffffffff79b, 0x0, 0x7, 0xe7c6, 0xfc00, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8001, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1f, 0x81, 0x10000, 0x3ff, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x5}, 0x2000, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x7, r1, 0x3) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, 0x0) getsockname$packet(r1, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000023c0)=0x14) accept4$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002440)=0x14, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000027c0)={&(0x7f00000002c0), 0xc, &(0x7f0000002780)={&(0x7f0000002480)={0x170, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x7, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1631.736095][T25993] IPVS: ftp: loaded support on port[0] = 21 [ 1631.759915][T25994] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1631.769855][T25996] IPVS: ftp: loaded support on port[0] = 21 09:48:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068b}, 0x28) [ 1631.817652][T26025] IPVS: ftp: loaded support on port[0] = 21 [ 1631.835645][T25994] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:48:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100236c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:48:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068c}, 0x28) [ 1632.049161][T25992] overlayfs: failed to resolve './file1': -2 [ 1632.140417][T26108] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001400008912, &(0x7f0000000180)) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2d7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000380)="267e357ea4551bfec261c3e1d3109ea9cf311f206127d0a35045b0769e3d10eb5632d095fa71a1801bc603a69a32ac59dd408f16576fc3d02630a8ad91300a077e39851ac2b906e5c4f30f89d3806134ecbbb95a4dbb56a7c3a36fd1783ca35bef400fbabe7dbe97d17015ce6e8ec844c8bcd35e984e7ec9d4de4f3ca3802fe10ae9556aaf132a5325528d86d2a6d9b55b198c66a0a5b94b038dccec714c1e50f4be0495895b112e0b805b30b667f9c13127f25707f6c308263a1501ad6a8fc1b118df0b6bdd7cd29704b0ce47bb073f050900fc30adde4cafdfa9", 0xdb) io_setup(0x0, &(0x7f0000000180)) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x5, 0x8000, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x800, 0xc, 0x5e4, 0x100, 0x0, 0x2, 0x0, 0x1a99, 0xfffffffffffff79b, 0x0, 0x7, 0xe7c6, 0xfc00, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8001, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1f, 0x81, 0x10000, 0x3ff, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x5}, 0x2000, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x7, r1, 0x3) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, 0x0) getsockname$packet(r1, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000023c0)=0x14) accept4$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002440)=0x14, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000027c0)={&(0x7f00000002c0), 0xc, &(0x7f0000002780)={&(0x7f0000002480)={0x170, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x108, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x7, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1632.217633][T26108] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068d}, 0x28) 09:49:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601002d6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068e}, 0x28) [ 1632.495579][T26120] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1632.611476][T26120] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1632.860884][T26025] IPVS: ftp: loaded support on port[0] = 21 09:49:00 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x01\x00'}, &(0x7f0000000140)=0x54) 09:49:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000068f}, 0x28) [ 1633.029554][ C1] net_ratelimit: 18 callbacks suppressed [ 1633.029560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.041048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1633.055619][T26133] IPVS: ftp: loaded support on port[0] = 21 [ 1633.749608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.755609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1633.829617][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.835599][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1633.841666][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.847595][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1634.229549][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1634.235407][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:03 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:49:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601003f6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000690}, 0x28) 09:49:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x220a00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xbe6f) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r2, 0x0, 0xc478, 0x5) fallocate(r2, 0x0, 0x0, 0x4005ef0) write$P9_ROPEN(r2, &(0x7f00000000c0)={0x18}, 0xff9c) fallocate(r2, 0x3, 0x0, 0x8001) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18}, 0xff9c) fallocate(r1, 0x3, 0x0, 0x8001) 09:49:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:49:03 executing program 5: pipe2$9p(0x0, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x12000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = socket$isdn(0x22, 0x3, 0x34) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4009, 0x10000, 0x7, 0x4}) [ 1635.534107][T26142] IPVS: ftp: loaded support on port[0] = 21 [ 1635.571601][T26145] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000691}, 0x28) 09:49:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x9) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000000)) 09:49:03 executing program 4: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000e80)=0xe8) geteuid() r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0x100000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:49:03 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x82}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100400000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x8) fstat(r1, &(0x7f0000000100)) gettid() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400400, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000180)=0x1) timer_create(0x8, &(0x7f0000000000)={0x0, 0x20}, &(0x7f00000000c0)) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0xffffffffffffffff) [ 1635.695823][T26145] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1635.713930][T26153] IPVS: ftp: loaded support on port[0] = 21 09:49:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100406c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000692}, 0x28) [ 1635.919882][T26271] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1636.028120][T26271] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1636.337691][T26142] IPVS: ftp: loaded support on port[0] = 21 09:49:06 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:49:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54", 0xe) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x2, 0x8001, 0x7fff, 0x1f, 0x0, 0x859, 0x400, 0x6, 0x4, 0x80000001, 0x77bc, 0x1, 0x3, 0x3, 0x3ff, 0xe7, 0x1, 0x3, 0x100000000, 0x0, 0x5, 0x3, 0x80, 0xfffffffffffff5e9, 0x4, 0xfffffffffffff1d1, 0x7f, 0x7, 0x7ff, 0x71, 0x6, 0x1, 0x80000001, 0x101, 0x1ff, 0xfff, 0x0, 0x80000001, 0x4, @perf_config_ext={0x10001, 0x7ff}, 0x840, 0x5, 0x80, 0xb, 0x3, 0x7, 0x7fff}, r4, 0x2, r1, 0x4) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000008c0)) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x40}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x338d, 0x2, 0x0, 0x1}, 0x2c) 09:49:06 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$input_event(r1, &(0x7f0000000180)={{r2, r3/1000+30000}, 0x1f, 0x3, 0x7}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') sendfile(r0, r4, &(0x7f0000000240)=0x983, 0x4) 09:49:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000693}, 0x28) 09:49:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100486c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) [ 1638.361622][T26282] IPVS: ftp: loaded support on port[0] = 21 [ 1638.369000][T26284] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1638.389523][ C1] net_ratelimit: 22 callbacks suppressed [ 1638.389530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.401128][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000694}, 0x28) [ 1638.456907][T26284] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1638.490417][T26294] IPVS: ftp: loaded support on port[0] = 21 09:49:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @multicast1}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x0, 0x3, 0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x10}, @jmp={0x5, 0x7446fbd7, 0xc, 0x6, 0x2, 0x0, 0xffffffffffffffff}, @map={0x18, 0x3, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, @generic={0xe30, 0x57b2, 0x2, 0x100, 0x3}, @jmp={0x5, 0x81, 0x6, 0x7, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @jmp={0x5, 0x981, 0xf, 0xe, 0xf, 0x10, 0x10}, @call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000200)='GPL\x00', 0x450, 0x0, 0x0, 0x41f00, 0x0, [], r2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x400000028, 0x7fff, 0x3f}, 0xe) write$9p(r3, &(0x7f0000000000)="37dce9523f282dc6872696057a04b92b7fbc75e7c1f2f9c176473f62cad956d954600a37f234fb52e029635c5b46f8144c0b57ac0f307fa7011efd3ef9900944c1b6ea7265b98361155647b8eb805794bc620720dfa37c6af55c2ecb420e17cb4cace68c513cdb65fbca8b5c71b8610d04f4df68a878c9511fefae20ef93a4e692a345504d334fd7650f1145f171805b38ada686810d551b5ce1433d22b7e47de699cc79183baf5a0bf2f2afb2ef7570183b014de06906708fe0417f161dd3035fdcd5b6d1be37159949e040ee972a874dd95ad9d4a0b1c885b375d46aedc4cc49fee5286aedd1a253a54dc2", 0xec) 09:49:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601004c6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000695}, 0x28) [ 1638.709587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.715600][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1638.726239][T26402] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1638.868010][T26402] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000696}, 0x28) 09:49:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100606c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1639.164788][T26415] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1639.269607][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1639.275475][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1639.305183][T26415] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1639.371631][T26282] IPVS: ftp: loaded support on port[0] = 21 [ 1639.989583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1639.995725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1640.069599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1640.075663][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8800, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000080)=""/32, &(0x7f0000000100)=0x20) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x32, 0x2}], 0x18) 09:49:09 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x7}, 0xf) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r1, 0x86, "58f9a87169d7528c79a61211bfd2476142d0a6233923dff290630e0a52ad29c394c0dd099235ff56d0831e16d9c10e4f3a7dcf6ad7b0f636ddc3319b8e17f97b4030c94eacd42d7b82a762d3c4cb0901d07a452407c99641eba15399ce7f66d3d0bad2fd1acee8dd0fefa9e8290da253aa1527dcb50aebaa13aa6be7346b205eb8727f4fbc2a"}, &(0x7f00000002c0)=0x8e) r4 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x2) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000100)={0x1, 0x0, "4e79811df122f7384186083dd7dac7e201d01eb7f310c021"}) 09:49:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000697}, 0x28) 09:49:09 executing program 4: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x81, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02020009100000e09e8400000000000000000002001300020000000000000000002af305000600000000000a000000000000000000000000000000000000000000000000000000028184430000000002000100000000000000000200000028a70005000500000000000a000000000000001e170000000000000000040000000017000000000000000026c7f06cdfd28843bf505e7c80e10b0e3504a632066c769f99f3"], 0x80}}, 0x0) fcntl$getown(r2, 0x9) r3 = getpgrp(0xffffffffffffffff) getuid() r4 = syz_open_procfs(r3, &(0x7f0000000300)='\x00\x14\xcb\xda\x97\xeb\\,\xf2 ') unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0) preadv(r4, &(0x7f0000000480), 0x1000000000000064, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) keyctl$clear(0xe, r0) 09:49:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100686c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) [ 1641.515685][T26426] IPVS: ftp: loaded support on port[0] = 21 [ 1641.538765][T26427] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1641.605013][T26427] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000698}, 0x28) 09:49:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) r1 = dup3(r0, r0, 0x80000) getpeername$packet(r1, &(0x7f0000000040), &(0x7f0000000180)=0x14) close(r0) 09:49:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601006c6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {}, {}, {0x2, 0x0, @multicast1}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, 0x0, 0x4, 0x7, 0x800}) r1 = msgget(0x3, 0x400) msgctl$IPC_RMID(r1, 0x0) 09:49:09 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x509102, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x6, [0xfffffffffffffffe, 0x8, 0x100000000, 0x5b, 0x9, 0x3]}, &(0x7f0000000640)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/123) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r5, 0x1000000000016) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) accept4(r6, &(0x7f0000000200)=@rc, &(0x7f0000000040)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000300)}, &(0x7f00000002c0)=0x10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) add_key(&(0x7f0000000500)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="9f7c2e33ed75b4de9a4de362", 0xc, 0xfffffffffffffffa) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) 09:49:09 executing program 4: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000500)) ioctl$RTC_VL_CLR(r0, 0x7014) fchdir(r0) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb01001800000000000000240000003c0000000000000067c4ce1d41cbe5aa428d5a9ea050c2ceb7770189c9ee58d95c908cb9db427303000000"], 0x0, 0x3e}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1641.865004][T26552] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000699}, 0x28) [ 1641.969711][T26602] 9pnet_virtio: no channels available for device ./file1 09:49:09 executing program 1: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000140)) [ 1642.017529][T26552] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069a}, 0x28) 09:49:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100746c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x8) sendto$llc(r2, &(0x7f00000000c0)="5dc6fa0cc7e550b47c7a4f679b302977cfa8022049c65264107873d3e87e1058286ef9fe7245105d34baba8a137d95093892b9015e5bcdbba7125304c29ce05d30683f0bdeb8908e062a52bacd816cf11afc547ec8ca", 0x56, 0x8000, &(0x7f0000000140)={0x1a, 0x8, 0x0, 0x9, 0x3934, 0x9, @random="b17a2d2c426d"}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000200)={0x18d1cd, &(0x7f0000000180)=[{}]}) [ 1642.272969][T26748] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1642.431207][T26748] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1642.535400][T26426] IPVS: ftp: loaded support on port[0] = 21 [ 1642.766356][T26602] 9pnet_virtio: no channels available for device ./file1 09:49:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:49:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069b}, 0x28) 09:49:10 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x30f6d7dc}], 0x1, 0x0) 09:49:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601007a6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:10 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x4) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYPTR], 0x6) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="c5"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200001, 0x0) 09:49:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x440004, 0x1, 0x0, 0x1}, 0xffffffffffffff93) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0}, 0x20) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x80) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0xad, "44a22c4df431035e65d58f2c6549b4eb79f097dbe43d0920d0b6fd9758e21a01f8c1a7fdcf974c6f353584a502e70673d877828f7d8a31969870983fa57e14f959620dcfddd4f2bc596cb0de4d00e901edf3f26da5497fdf703570e657d25a110a85bc5d0cf3582ac8bbc7034bcbfdf54c7e3f8f6de9a0b465f49822cced877b06c210659190b4b0c3a5c39ee9dc52cc9b85509750dbe2e572e53e0bead52cc9dafaadd3782eed519e7bac7f82"}, 0xb3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) write$UHID_CREATE(r2, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000080)=""/219, 0xdb, 0x9, 0xffffffffffff3dc5, 0x935, 0x1, 0x8001}, 0x120) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, 0x0, &(0x7f0000001200)}, 0xffffffffffffff26) 09:49:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069c}, 0x28) 09:49:10 executing program 4: r0 = socket$inet6(0xa, 0x60000000000003, 0xbf) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c070000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="e0030f000a000200aaaaaaaaaaaa0000"], 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x4, 0x401, 0x0, 0x1, 0x4, 0x0, 0xffff, 0x0, 0x2, 0x80000000, 0x40, 0x6, 0x2, 0x2, 0x1c, 0x10}}) prctl$PR_SVE_GET_VL(0x33, 0x3825) [ 1642.914391][T26792] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000070001006cea04d5e3020a2d06000001"], &(0x7f0000000280)=0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x1}) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, 0x0, 0x0, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x4048001) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000140)}, 0x8000) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x0, @broadcast}}) r3 = memfd_create(&(0x7f0000001b40)='t\bnu\x00\x00\x00\x7f\x00\x00\x8c\x00\x10\x00\x00\x00\x00\x00\x00N\x1c\xc3\xfe\xc3.\x12\x1e\xcc\xf2\xd8\xd5l\x04~K8\xff\xe1S\xfa\xc1\xbb\x8bx\x9e\v\x83\xf6\xb2q[\xfd\xd8\x8b\x1d7\xcc\xe9\x82\xe8Y\xda\xec\x02sh5\x8d\x90J\xd0v\tu@\x13\x94\xd3\xe2\x8d\xec\x914\xcaKy\xe9K\x9cP\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xff\x96\xec\xf8\xcaJH\xef\xfc\n.}\x0fnvI\x83\xa5\xfc\xd3\xe4(\xa7&\xab\xd2\xd5\x90\x87\xea\xddO\x1f\xff\x00\x00\x00\xdd\xb1\xc6\xae\x0f\xb6\xfcEq\xc3\xe6p\x95\xc7x\x91\x9c\xf4\x10W\xfd\xea\xb3|\xa1\xb0M\x06C\xf1\xb5\xc3\x8a\xaf\x1b\x98\xc9c6\x13\xa6\x94\x14', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) accept4(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) [ 1643.009356][T26801] IPVS: ftp: loaded support on port[0] = 21 [ 1643.027213][T26792] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:10 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x100000000}, 0x28, 0x2) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007090000000000000076776c616e306c6f658de908000000"], 0x1c) r1 = inotify_init1(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2a) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x100000020000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x2000, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000100)={@random="e1284abef1b2", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "10a67c", 0x15, 0x806, 0x0, @empty, @rand_addr="7b2052c776becd6abb08b65623de696c", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"ed"}}}}}}}, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 09:49:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069d}, 0x28) 09:49:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e6010fff6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1643.303981][T27020] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1643.372902][T27020] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1643.429559][ C1] net_ratelimit: 18 callbacks suppressed [ 1643.429567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.441074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1643.647071][T26801] IPVS: ftp: loaded support on port[0] = 21 09:49:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:49:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) 09:49:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069e}, 0x28) 09:49:11 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x383d) getitimer(0x0, &(0x7f0000000180)) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) renameat(r1, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0xfffffffffffffe44) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) 09:49:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x2}) signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) 09:49:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100000a000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000069f}, 0x28) 09:49:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffc}) r2 = syz_open_pts(r0, 0x5) r3 = dup3(r2, r0, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) socket$pptp(0x18, 0x1, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000e20a000000000000ff00000000000000194f564b00000000060000000000000000000000000000000000008000000000bf0b000000cbf8013076e8ecf088c0bc5539c3580000000800000000000000a4020000000000ff7f000000000000000000000014000000000000ba0b0000000000000500000000000000150000000000"]) write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) getuid() 09:49:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x40800) connect$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x8, 0x6, 0x83c6, 0x4, 0x5, 0x8000}, 0x7f}, 0xa) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x100000000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) pkey_alloc(0x0, 0x3) fallocate(r2, 0x2040000000003, 0x0, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @empty}}) [ 1643.847024][T27035] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1643.896595][T27048] IPVS: ftp: loaded support on port[0] = 21 09:49:11 executing program 1: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="735fa4d21db279735f66696c65733d6e6f2c650296737967"]) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x40000) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3f, 0x100) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') [ 1643.945202][T27035] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x14, 0x4, 0xfffffffd}) fcntl$setstatus(r2, 0x4, 0x2000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x7fff) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 09:49:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a0}, 0x28) [ 1644.150553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1644.156696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1644.229592][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1644.235690][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1644.241686][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1644.247692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1644.569418][T27048] IPVS: ftp: loaded support on port[0] = 21 [ 1644.629550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1644.635403][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:49:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x35, "054f515b2ac33b633d20031566508bf9ccb04c52cf7cb2763d5f8b0cdf55266143e28dd20799a4aa2c60d90a7c68f023399bb75501"}, &(0x7f0000000080)=0x3d) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x14}, &(0x7f0000000140)=0x8) 09:49:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000020000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a1}, 0x28) 09:49:12 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="ffb48b9ab7145bd4b58980f551e36973d8a396a3fce36cecddfc7ea4abafb3223e55ea8e8b76a5315658a00ab2d14a03f52dd56a4518ea0d62bb61b5e93eb5a985986d705e626dd3581d3b5188e9e69ddf614906cb30ddaa45b6a27d17130a0cdf85eb68b5b6bdb404b182d2ffffeda3f6bd94a03560590c02b9ae0dc38fc8ec952c90ab90b93c826b76809e06f73aabc1a333552e33108de37884ce4a7843777cf70feff1302c5c41d5e05ca33549eba08aa2167b38cbe39eb15f3793987cbfd931b32985b40c39522c01fb78939157c2a3e2bdbb005e48a7266c216b0e2e7e32fbd3347b0e3a81cb91f04fb05c1b2739b0f1171af5", 0xf6}, {&(0x7f0000000140)="2988a73bd4a3e8be78165f106aca42ba43a8bec8b1637fbc", 0x18}], 0x2, 0x9) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:49:12 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1) [ 1644.874028][T27270] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1644.877103][T27274] IPVS: ftp: loaded support on port[0] = 21 09:49:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a2}, 0x28) 09:49:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") seccomp(0x4, 0x40000000, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCNXCL(r1, 0x540d) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffff00000000, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[], 0x215) syz_execute_func(&(0x7f0000000140)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f351162f610f610cd0464add864f1326e0f72d600") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) 09:49:12 executing program 4: syslog(0x8, &(0x7f00000000c0)=""/19, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1ff, 0x400c00) [ 1645.051024][T27270] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000380)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000200)) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 09:49:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000023000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a3}, 0x28) [ 1645.318446][T27446] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1645.415298][T27446] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:49:13 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xf0940, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000040)={0x0, 0x4, 0x0, [], &(0x7f0000000000)={0x4, 0x0, [], @p_u8=0x0}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x490000, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000200)=""/58) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x81, 0x4) 09:49:13 executing program 5: syz_emit_ethernet(0xffffffffffffffc5, &(0x7f00000002c0)={@local, @broadcast, [{[], {0x8100, 0x1, 0x200000800, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x7ffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x40) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x5) 09:49:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a4}, 0x28) 09:49:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000025000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:13 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=""/182, &(0x7f0000000380)=[{0x100000000, 0xfe, 0x7ff, &(0x7f0000000180)=""/254}, {0x0, 0x0, 0x8, &(0x7f00000002c0)}, {0x7, 0x0, 0x9, &(0x7f0000000300)}, {0x7, 0x2e, 0xef7, &(0x7f0000000340)=""/46}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 1645.941467][T27511] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x100000000401, 0x0) 09:49:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a5}, 0x28) [ 1646.039170][T27511] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:13 executing program 4: r0 = add_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)='F', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={0x0, r0}, &(0x7f00000005c0)=""/189, 0xbd, &(0x7f00000006c0)={&(0x7f0000000680)={'rmd128\x00'}}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x40000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r3, 0x1}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x7}, 0x28, 0x3) sendfile(r1, r2, &(0x7f0000000040), 0x81) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000001c0)=""/62) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) [ 1648.789559][ C1] net_ratelimit: 22 callbacks suppressed [ 1648.789568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1648.801350][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.109636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.116066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.669542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.675456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1650.389576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1650.395559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1650.469560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1650.475476][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) sendto$inet(r0, &(0x7f00000001c0)="6e402f13ed3f9128b8ebef77c0fa3061b9eaab12950c00747c591d282395656b317d64f1adf6592080ee3190ba8f17293a46de91ab1a212f30cecabd070c1086e135f9cb36f0bfbb23465c98dcee44414ff30679ead1dedd95b0ab3b053497baaadccedc819405e49fe017780f233b0a45e1f60be24b0b30aa603b8de0a366cf246743d1c3186ed694b8081920e9f9b1e85e605f99752ee4c375076d01ebc5d9b60c3aea1f5ae0da4a1b0789284d7cebd1f0a5d38785b224e54f3218a7c9c2ab5458193adf41e21e152a91241c8c0cf204234bc64dbcf89a91e13ee75662f55e51943d7e59", 0xe5, 0x880, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="f300000029020003000000d8020000000800000000000000b70e0000000000000107002e2f66696c6530000000000004000000000000000101000000000000b007002e2f66696c65306b040000000400000000000000d3060000000000000207002e2f66696c6530000000000006000000000000000900000000000000d70d002e2f66696c65302f66696c6530040100000005000000000000006d0d0000000000004a10002e2f66696c65302f2e2e2f66696c65308103000000050000000000000001800000000000000707002e2f66696c6530ac010000000308000000000000ff000000000000000007002e2f66696c6530"], 0xf3) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000300)=0xffffffffffffffff) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2e0003d3abe201079929344d00000100000041398aed59f730da7a413b5f41e297b2e61ab175ce8b472bafc7c681"], 0x0) fcntl$dupfd(r1, 0x406, r0) 09:49:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a6}, 0x28) 09:49:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002a000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:19 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x123400, 0x0) perf_event_open(0x0, 0x0, 0x4000000003, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/snmp6\x00') write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0xfffffffffffffff8}, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0x0, "4f20d157de673dd5eface4ed0723ec3e6a2f19f0c435421c1f74bfc0485666bb", 0x1000, 0x7fffffff, 0x7, 0x2, 0x7}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:49:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x142, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000240)={0x70, 0x6, 0xa, 0x8, 0x3, 0x81}) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x3f, 0x6, 0x5, 0x8e3, 0x8, 0x401, 0x31, 0x9, r3}, 0x20) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x3, 0x40000) 09:49:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:49:19 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x123400, 0x0) perf_event_open(0x0, 0x0, 0x4000000003, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/snmp6\x00') write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0xfffffffffffffff8}, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0x0, "4f20d157de673dd5eface4ed0723ec3e6a2f19f0c435421c1f74bfc0485666bb", 0x1000, 0x7fffffff, 0x7, 0x2, 0x7}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1651.728581][T27549] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a7}, 0x28) 09:49:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x200, 0xa000) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}}, 0x48084) close(r0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400842, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x21, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = geteuid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="74726142e71d4a087e4313706f72743d3078303030303030303030303030346532312c74696d656f75743d3078303030303030303130303030303030312c74696d656f75743d3078303030303030303030303030383030302c72713d3078303030303030303030303030383030302c73713d3078303030303030303030303030303030362c7569643d", @ANYRESDEC=r4, @ANYBLOB=',\x00']) [ 1651.855177][T27549] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00\x00\x00?\x00', @ifru_data=&(0x7f0000000000)="df6c10d83ef4c0738f53f6e6374ab7a9302fb0be0d83d0dac92cb3f0b9f3d58e"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x5, @empty, 0x8000}, @ib={0x1b, 0x3ff, 0x1, {"05152411495a1d5fcec72c7a2dbf33c7"}, 0xffffffff, 0x8, 0x4}}}, 0x118) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r0, 0x401, 0xfa, "de78916a6f56541ad14fce3d49f115c5f3629c71563f6d43a9f8b95d6cecf146971b66ceed500f956760c254333dcd4b7ea29956666e00eaf7d3019b0997a209e904442fe609bf7ec6c551af4039b8ddc6a968916ccb0875a5f79014ff939e4a252cd9987afe1a2136b41e18b2786377c39c3818ecaa5d7189b238a262daa4103bdc10d268dc605d03a70789ad5a20dc019c7f40a7df99b81139"}) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000340)={@remote, @loopback}, &(0x7f0000000380)=0xc) ioctl$TCSBRK(r1, 0x5409, 0x7) 09:49:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002b000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a8}, 0x28) [ 1652.131924][T27620] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:20 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x8000000000200000}) 09:49:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200), 0x4) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000440)=""/107, 0x6b}], 0x5, &(0x7f0000000540)=""/251, 0xfb}, 0x40002040) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000680)={0x5, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x88) 09:49:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006a9}, 0x28) [ 1652.282632][T27620] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x200, 0xa000) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}}, 0x48084) close(r0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400842, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x21, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = geteuid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="74726142e71d4a087e4313706f72743d3078303030303030303030303030346532312c74696d656f75743d3078303030303030303130303030303030312c74696d656f75743d3078303030303030303030303030383030302c72713d3078303030303030303030303030383030302c73713d3078303030303030303030303030303030362c7569643d", @ANYRESDEC=r4, @ANYBLOB=',\x00']) 09:49:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002d000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1652.583790][T27816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1652.659317][T27816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:49:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006aa}, 0x28) 09:49:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000000000000007000000830b040000000000000000000000003661000000000000002038f5cfbce0beda0a2ce2415c2759d7a002c696bb5c70710c2ee1f004402a2d6db1abfeed1345b988e207b93e89c42c2d1b7b2fb1e77cf99ba3498c9f900960405db0127d24577deb84596a6c77686fa69977587a47b9d2a7"], 0x81}, 0x0) 09:49:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x200, 0xa000) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}}, 0x48084) close(r0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400842, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x21, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = geteuid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="74726142e71d4a087e4313706f72743d3078303030303030303030303030346532312c74696d656f75743d3078303030303030303130303030303030312c74696d656f75743d3078303030303030303030303030383030302c72713d3078303030303030303030303030383030302c73713d3078303030303030303030303030303030362c7569643d", @ANYRESDEC=r4, @ANYBLOB=',\x00']) 09:49:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002e000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ab}, 0x28) [ 1653.713351][T27826] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:21 executing program 5: lsetxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x3, 0x3, 0x2, 0x498, 0x55, "980c43452435fbeea48bc85633bf03cec7fef33b1f8fea6c74444252037c4817cc5a74fb1abcf5722c738790b5129131eb5425ba224e2b741041be4867b496a257fd1f6f826caacd1e3d15b09c67ec84f7bd447607"}, 0x5f, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x3, 0x6, 0x9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @generic={0xfffffffffffffff8, 0x40b7, 0x35, 0x670e, 0xffffffffb9492b6b}, @jmp={0x5, 0xb0a, 0xa, 0x5, 0x3, 0x30, 0xfffffffffffffffc}, @alu={0x4, 0x7, 0xc, 0x4, 0x8, 0x40, 0x14}, @alu={0x4, 0x2, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0x4}, @jmp={0x5, 0x7, 0xd, 0x7, 0x7, 0xfffffffffffffff6}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f0000000040)='syzkaller\x00', 0xff, 0xa8, &(0x7f0000000140)=""/168, 0x0, 0x1, [], r1, 0x5}, 0x48) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190a20ffff7f0000000002113b850e1de0974881000000fe58a2bc4a03049164643e6b000200de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x234080, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000740)={@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x1, 0x4, 0x1, 0x2}}, {&(0x7f0000000600)=""/214, 0xd6}, &(0x7f0000000700), 0x1}, 0xa0) r3 = getpgrp(0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) tgkill(r3, r4, 0x13) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x1, @bcast, @rose={'rose', 0x0}, 0x10000, 'syz0\x00', @bcast, 0x6, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000880)={{0x8, 0x20}, 'port0\x00', 0x80, 0x804, 0x3, 0x1, 0x0, 0x72, 0x6, 0x0, 0x2, 0x26145826}) 09:49:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1653.829541][ C1] net_ratelimit: 18 callbacks suppressed [ 1653.829549][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1653.835312][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80, 0x2) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0xdc66f9e35cce99a7, 0x0, 0x0}) [ 1653.895348][T27826] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:21 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000eefffff198601010008000000095000000000000001cf9336ffb828505c001a7f31129b3ea7e177f172082a054c8c549491c86dca112fc716fdcafcbf67647511b01e268782bb8d3996efffa834c0bd2f998ca7fc4cf68d8c7ef64000000000000000000c20262d3bb78378e"], &(0x7f0000000100)='GPL\x00'}, 0x48) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) 09:49:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ac}, 0x28) [ 1654.549631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.555610][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:22 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) [ 1654.629587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.635563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.641587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.647494][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') write$P9_RLOPEN(r0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, "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", 0x1000}, 0x1006) 09:49:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002f000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x408, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 09:49:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ad}, 0x28) 09:49:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1654.749740][T27963] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:22 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0xae8, 0xe6}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x348, 0x348, 0x258, 0xc0, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@local, @multicast2, 0xff, 0xffffffff, 'gre0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x1}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x11}}}, {{@uncond, 0x0, 0x98, 0xd8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0xc7, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e21}}}, {{@ip={@broadcast, @local, 0xffffffff, 0x0, 'hsr0\x00', 'rose0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffffffffffd0, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffffff, 'ifb0\x00', 'irlan0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x7007b94547e25cf4}, 0x0, 0xf0, 0x120, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x280, 0x420, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x100000000, 0x74, @rand_addr=0x40, 0x4e22}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="31000000000000001200000000000000"]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) exit(0x100000000) 09:49:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ae}, 0x28) 09:49:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)=0x1) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1ff, 0x200) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x5) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) close(r1) [ 1654.881926][T27963] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000030000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1655.029550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.035401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.116198][T27988] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1655.203511][T27988] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:49:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) r1 = dup(r0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x7b) read$FUSE(r1, &(0x7f00000001c0), 0x1000) write$FUSE_ATTR(r1, &(0x7f0000000040)={0xffffffffffffff09}, 0xfddf) 09:49:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006af}, 0x28) 09:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100004c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffffffffffe, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/8, &(0x7f00000000c0)=0x385) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1, 0x5, 0x8, 0x1000}, {0x7, 0x5b5b6d21, 0x1, 0xffffffff}, {0xff, 0x0, 0x4, 0x59}, {0x9, 0x6, 0x913}, {0x698, 0x81, 0x7fffffff, 0x8}, {0x0, 0x9, 0x1, 0x7}, {0x2, 0xfff, 0x8001, 0x2}, {0x3000000000000000, 0xff, 0x400, 0x200}]}, 0x10) r2 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000002c0), &(0x7f00000001c0)=0x4) 09:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1655.960738][T28004] IPVS: length: 901 != 8 [ 1655.968584][T27999] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1655.993634][T28004] IPVS: length: 901 != 8 09:49:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b0}, 0x28) 09:49:23 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127", 0x75, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r1, 0x0, 0x0, r2) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r3 = syz_open_dev$amidi(0x0, 0xffffffffffffffff, 0x420040) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000700)={0x9c, 0x1, 0xffffffff, 0x6, 0x8000}, 0xc) r4 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffff9c, 0xab05) sched_setscheduler(r4, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000900)={&(0x7f0000000340), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x81) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@isdn={0x22, 0x5, 0x9, 0xe5, 0x7f}, 0x80, &(0x7f0000000e80)=[{0x0}], 0x1}, 0x40000) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') fsetxattr(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1f492884248569d9778882738ae51d443fb03ad1ed6b90d05830aef1878a70c1232562bd7ad3faa951b1f31501fc3a8a559a3f0a4f5d23d497d8f45cb58aff2d66c85acd9fc3197f6221d949b2f4819393cffe1e4286f9cea6ea3bc5c71f5f02f229509c1f28608357655e63704185d02d4320729e61b5b1461aa3776c8d16fc351cbdfce883194dfec07eb8c1cc5cc58ee4e2e0e0b17fb745e33236e42fa217fa20dea9841a0000000000000000000000000000", @ANYRES32, @ANYRESHEX=r6, @ANYPTR, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16]], @ANYRESHEX], 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1656.072453][T27999] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:23 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b1}, 0x28) 09:49:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100026c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1656.316590][T28018] overlayfs: failed to resolve './file1': -2 [ 1656.367149][T28024] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1656.436280][T28018] overlayfs: failed to resolve './file1': -2 [ 1656.493288][T28024] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:49:24 executing program 5: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000000c0)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000086}, 0x33b, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff04462019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x8) openat$cgroup_subtree(r3, &(0x7f0000000480)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000280), 0xc, 0x0}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:49:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b2}, 0x28) 09:49:24 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000c40)='/dev/dsp#\x00', 0x800, 0x408000) recvfrom$ax25(r0, &(0x7f0000000d00)=""/79, 0x4f, 0x100, 0x0, 0x0) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000000) inotify_rm_watch(r0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm_plock\x00', 0x6a8843, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x81, 0x40000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x44040, 0x0) shutdown(r2, 0x0) 09:49:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100036c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1656.898393][T28041] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:24 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1656.953092][T28041] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100046c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1657.038542][ T26] audit: type=1804 audit(1552124964.872:378): pid=28052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir679616394/syzkaller.udaIpm/1975/file0" dev="sda1" ino=17494 res=1 09:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1657.233392][T28057] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b3}, 0x28) 09:49:25 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={r1, 0x3}) io_setup(0x100, &(0x7f0000000280)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40240, 0x0) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xd, 0x2, r0, &(0x7f00000002c0)="4a10d509d7e00bfa8959ec889cd8139ada20a853ec673d8cd1874db5e9bf2e95e25a504d95c0c2587ade38a96c422d20a6a6db687c278ca5c20fa6325fafadcf7fcfd53f11e1706825b264702f085386c890a22748f807361990a3798642766cf6f8ba08c0a7eefabca2aca006c7a0da9afa231a35a3f21172b8615a37c6aaf645228136c16f9da22262229fa48751af90f92ab2febd00e5ada389bbd7fa78470760be9888c7ca91e3c8a51d8f291c7ab637b61cb20529a7cfcb073e3a704e9b2d594f82ab985b09b1ae66614a102bb1415ae61a4c9dd9cf938c2a8ade4ab2470d43b27dc6a48ad8e803ad5e", 0xec, 0x7, 0x0, 0x3, r3}, &(0x7f0000000440)) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x42) fcntl$setsig(r0, 0xa, 0x22) write$UHID_CREATE2(r4, &(0x7f0000000140)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x00', 0xfffffffffffffcef, 0x3f, 0x4, 0x6, 0x100000000, 0x5b, "f75f440ce219edb21f5019fabc4548e76f02ed8bb487bb8b886ce4a221606c0c4b7665fe1b588f"}, 0x13f) [ 1657.313080][T28057] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1657.746059][ T26] audit: type=1804 audit(1552124965.582:379): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir679616394/syzkaller.udaIpm/1975/file0" dev="sda1" ino=17494 res=1 [ 1657.818115][ T26] audit: type=1804 audit(1552124965.612:380): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir679616394/syzkaller.udaIpm/1975/file0" dev="sda1" ino=17494 res=1 09:49:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:49:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100056c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x5, 0x690, [0x0, 0x20000b40, 0x200014b0, 0x200017e8], 0x0, &(0x7f00000002c0), &(0x7f0000000b40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001d00000000000000239d76657468305f746f5f62726964676500697036677265300000000000000000006e7230000000000000000000000000007465616d300000000000000000000000aaaaaaaaaabbff00ff00ff00aaaaaaaaaa2b0000ff00ffff000070000000e8000000380100004e464c4f470000000000000000000000000000000000000000000000000000005000000000000000170000005700060000000000aa7a2fbada6a0a2eb059434d33aac8db80b4a642616bc907497ca1adf97b4fa67d93cbc87ec29d74689e5a96d0e4d4d77a3d138e00b35b273522b1691f30c8f1000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a31000000000000000000000000000000000000000000000001ffff0000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff02000000150000000400000000116272696467655f736c6176655f300000697036677265746170300000000000007465616d5f736c6176655f30000000006e723000000000000000000000000000ffffffffffffff0000ffff00780c78477c9eff00000000ff0000e000000058010000880100007261746565737400000000000000000000000000000000000000000000000000480000000000000076657468315f746f5f6873720000000069703665727370616e30000000000000180001000080000003000000000200000008000000000000040000000000000005000000000000006e666c6f6700000000000000000000000000000000000000000000000000000050000000000000005900000036040000000000008af1bd507ff935ae8b9d0c0e3ff7e3da147a3c0f2abc23d59de949382d08e87e59f7c6403f1203255b013030952fd68b54860104a27707243d76d8e6ed6c9a8200000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000100000000000000110000000400000099ee6e657464657673696d30000000000000657200000000006263736830000000000000000000000076657468305f746f5f626f6e6400000000000000000000ffff00ffffaaaaaaaaaaaa00ffffff00ff0000e001000010020000400300006c696d6974000000000000000000000000000000000000000000000020000000000000000400000001000000000000000000000001040000800000000100000000000000636f6d6d656e740000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000002000000073797374656d5f753a6f626a6563745f723a66697865645f6469736b5f6465766963655f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x704) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, &(0x7f00000003c0)=0x54) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8040) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000680)=""/227) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000300)={0x0, 0x1ff}) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7, 0x10}, &(0x7f0000000580)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, &(0x7f0000000380)) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000340)) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="0002009338ec77e7a05d895b2d02"], 0x1) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000280)=0x4) fcntl$notify(r0, 0x402, 0x22) 09:49:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b4}, 0x28) 09:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:26 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x5fff, 0x8001) fallocate(r0, 0x3, 0x43, 0xfff9) [ 1658.240129][T28082] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:26 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x3ffffe, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="400000050000000000000000000000"], &(0x7f0000000180)=0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="6cff5aefef9573d47772e3ff2d3ff2e1e9f6e1472e6b12d0a8eed7e418fa1eed91ae5c18bfb1b04640a28db3f4ff45ac8a30e7", 0x33) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0xc07}, &(0x7f0000000240)=0x8) accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000140)=0x2, 0x4) 09:49:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b5}, 0x28) [ 1658.333581][T28082] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100066c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x5, 0x690, [0x0, 0x20000b40, 0x200014b0, 0x200017e8], 0x0, &(0x7f00000002c0), &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, 0x704) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, &(0x7f00000003c0)=0x54) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8040) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000680)=""/227) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000300)={0x0, 0x1ff}) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7, 0x10}, &(0x7f0000000580)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, &(0x7f0000000380)) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000340)) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="0002009338ec77e7a05d895b2d02"], 0x1) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r2, r3, 0x0, 0x102000002) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000280)=0x4) fcntl$notify(r0, 0x402, 0x22) [ 1658.614385][T28106] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1658.772188][T28106] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1659.189577][ C1] net_ratelimit: 22 callbacks suppressed [ 1659.189585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.201064][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:49:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b6}, 0x28) 09:49:27 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x3ffffe, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="400000050000000000000000000000"], &(0x7f0000000180)=0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="6cff5aefef9573d47772e3ff2d3ff2e1e9f6e1472e6b12d0a8eed7e418fa1eed91ae5c18bfb1b04640a28db3f4ff45ac8a30e7", 0x33) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0xc07}, &(0x7f0000000240)=0x8) accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000140)=0x2, 0x4) 09:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="66b9800000c00f326635002000000f306736660f5ca20e40000066b9800000c00f326635008000000f306636650f226266b9800000c00f326635000400000f300f0f6d0097660f38dcc90f01d1660fe2495d0f01cb", 0x55}], 0x1, 0x8, &(0x7f0000000300)=[@cr0={0x0, 0xa0040000}, @cr0={0x0, 0x20000000}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x16) r5 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x2003, 0x8001) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000100)="b53ceb6d737bb0f24142b44d7f01ffa66611f7fe28828027ec63c84e67c9ed230504e2f9694468f447751ba367fe2197e3490ee751213b1189a0f35a39b6db0f3ac352686fac31e19e8053f67fc636a6677bcee98c359580238f667cc3c43f08c8e9a855477cac407b45f1e47ed5534d1a17c54f3a2bff43e0faf6bd6627eb668193c16b63e0ce7dcf4ed14b040037e5625f68ec472e5933c591cb26d9470befc63266cb116aea6afce16a3bcfe83375a166b1cf2f9938e87b07ec26f5ca30680eae3c3f"}, 0x10) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc) close(r4) 09:49:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100076c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b7}, 0x28) [ 1659.411965][T28126] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x18b039832fccdc5c) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x101}, 0x18}}, 0x0) 09:49:27 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 1659.501723][T28126] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1659.509668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.517297][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100086c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b8}, 0x28) [ 1659.779339][T28146] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1659.860996][T28146] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1660.069611][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1660.075493][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:28 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x401, 0x95, 0x8, 0x6, 0x3, 0x6, 0x3, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x7, 0xf1, 0x80000000, 0x9c}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x5}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x3, @broadcast}}, 0x1e) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000040)=0xf51e) 09:49:28 executing program 4: write$vnet(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/125, 0x7d, 0x0}}, 0x68) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000002c0)=ANY=[@ANYBLOB="59703e40680f3cfa"]) 09:49:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006b9}, 0x28) 09:49:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100096c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1660.450809][T28157] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:28 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='net\xe2\xe6\x01zB\x00') exit(0x0) accept(r1, 0x0, &(0x7f0000000040)) utimensat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 09:49:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ba}, 0x28) [ 1660.546294][T28157] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000a6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006bb}, 0x28) [ 1660.734575][T28180] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1660.789593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1660.795596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1660.808880][T28180] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1660.869599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1660.875579][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:49:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006bc}, 0x28) 09:49:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100236c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015003601000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) 09:49:29 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000100)=""/199, &(0x7f0000000040)=0xc7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x8, @tick=0x2, 0x6, {0x5, 0x8}, 0x9, 0x0, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x37) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@local, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) 09:49:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x620000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)={0x0}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/keycreate\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={@remote, 0x66, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x9c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04630440030000000e630c40010000000400000000000000066304400200000000634040030000000000000000000000000000000000000011000000000000000000000028000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="e0"], @ANYBLOB="010000000000000000000000000000001a00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f630c400000000000000000000000000c63000008631040", @ANYRES64=r1, @ANYBLOB="030000000000000005630440030000000563044001000000"], 0x25, 0x0, &(0x7f0000000280)="34238aaec433a5e286ea71620be6732e872c84c138f598af0702e3620a060e5a234184ab3f"}) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="820000000001c71801552df0b959d963d8fd000000000000000069e129944764d598c525f8180e47c5d06665971fdfda4fbafc3cfefea51fcb88d963455f948b15c802266e2f3c75ba3589177856d876338e915f64f89c6f3b0273359d7cb271dcc5cc943ebfa4eeaf63868efac1e36bbfe575f607b18f9d5a000000000000000000"], 0x301080) msgget$private(0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000480)={{0x6, 0xe20}, 'port1\x00', 0x1, 0x40000, 0x5, 0x4, 0x8, 0x1, 0x4, 0x0, 0x1, 0x2}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(r3, 0x544e, &(0x7f0000000040)=0x3) 09:49:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006bd}, 0x28) 09:49:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1661.542285][T28296] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1661.628385][T28296] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x200, 0xfffffffffffff521, 0x4, 0xb, 0x2f34}, 0x14) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x2) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000003c0)={{0x2, 0x7, 0x4, 0x100, 'syz0\x00', 0x2}, 0x4, 0x202, 0x140, r0, 0x6, 0xffff, 'syz0\x00', &(0x7f0000000340)=['eth0bdevbdevbdevppp0/-\'vmnet0]vboxnet1)\x00', '/dev/snd/seq\x00', 'eth', '/dev/vga_arbiter\x00', 'eth', 'mime_type++(^\x00'], 0x5a, [], [0x81, 0x7, 0x0, 0x400]}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x1c, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'bond_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet(0x2, 0x800, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r4, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) splice(r3, &(0x7f0000000500), r1, &(0x7f0000000540), 0x2, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000002c0)=0x7) 09:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601002d6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:29 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x8100) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000700), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000300)='fdinfo/3\x00') write$binfmt_script(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="2321202e2f66696c653020ab2320202f6465762f6472692f636172642300200a0a6fd04ed8560ad66eb0abf01e937aee246e94394e31af8591831d1ebf5120b7b52610521497203a60ac0a3e3629c6eafc83c657eb9b1687d74f0297f253cc4db58998158c3c371daf0b2a5436fc2ffb1e7d71b214b1d5c2c281f4ca4886d7d2aeda39845f2ce975e973e61ea98ab65788ec23cd74629bd5786e81133354248748c4f40f895dc9cf6a25cf130cd0813fe669d1eb7bd19ae2de2d44"], 0xbb) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000680)=0x7) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=[&(0x7f00000000c0)='/dev/media#\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='%]mime_type\x00', &(0x7f0000000340)='fdinfo/3\x00', &(0x7f0000000380)='fdinfo/3\x00', &(0x7f00000003c0)='ppp1vmnet1-^GPL-\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='/dev/media#\x00', &(0x7f0000000480)='%eth0})nodev:\x00'], &(0x7f0000000640)=[&(0x7f0000000540)='/dev/media#\x00', &(0x7f0000000580)='eth0\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='bdev-mime_typewlan1:eth0\x00'], 0x1100) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4000000080000003) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000a80)={&(0x7f0000fff000/0x1000)=nil, 0x1, 0x3, 0x42, &(0x7f0000ffb000/0x3000)=nil, 0x6}) write$UHID_CREATE(r1, &(0x7f0000000900)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000800)=""/202, 0xca, 0x9, 0x2000000000000c0, 0x7fffffff, 0x5, 0x10000}, 0x120) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000000)={0x200, 0x6, 0x7fff, 0x0, 0x7}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000a40)={0x3, 0x0, [{}, {}, {}]}) syz_open_dev$dri(&(0x7f00000006c0)='/dev/dri/card#\x00', 0x1000, 0x10000) ioctl$TIOCNXCL(r3, 0x540d) [ 1661.870291][T28321] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1662.010106][T28321] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:49:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006be}, 0x28) 09:49:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r2, 0x701, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="f3d9be9e3662e78ed2a7033c47a2e601"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x9}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1000}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 09:49:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x88, 0x4, {"a56fb7fdd35a7fedb574ca28582e8f1276db3de6e910c41dcdfee1de39672b145cf176c2e1ce3b7930629301a28faceaa42e62e80e22838812e65f64301f7b007bed7b732c2bb80243834bc0253780ea6962dbd701dba9d179af2e99198475d4b1f4de48b11d181be1da66e0996d90"}}, {0x0, "80fa44e4d97af8c200f102a32342feb1e5d4a1c63524c7ae34b12509c3b41a198a5b06ad02c35426ee751001015efc493d8a7506b3adf8ababb75976bb5d50a02924258e21a7a95f851ef3a83e50246a209eb90351a59e95951592c4ffa649f09628d3c11190aec5f9849b979eb1e831b961006676cfbbab2cf90a68095c648158eafce93f8a18987de4b57526359c44381d4f9dd87d10793f9e264d2b6cb30814728882b5daa2bb2da5df9738d4c413"}}, &(0x7f0000000000)=""/98, 0x13a, 0x62}, 0x20) 09:49:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100486c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9e85648e237cc2d511004869c0bc6d05849b124733ccbc4c49a15d5ccca420aa45", 0x21) [ 1662.521710][T28336] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006bf}, 0x28) [ 1662.617235][T28336] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:30 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 09:49:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601004c6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1662.863626][T28387] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1662.962324][T28387] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:49:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c0}, 0x28) 09:49:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfffffffffffffffe, {0x0, 0x0, 0x0, 0x3, 0x40000, 0x4}, 0x2, 0x400000000000003}, 0xff) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 09:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100606c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:31 executing program 5: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffffd) r3 = open(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x1000}, 0x8) 09:49:31 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x3, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='Z\x00') 09:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1663.460806][T28475] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c1}, 0x28) [ 1663.591664][T28475] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:,640:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000009c0)) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000500)=[{&(0x7f0000000180)="a3c703429657556fee53147a48d6db5522978142256196b8eb08a3561615a0636e77a17483bace8ff1bfc7e0d058fddd25547838fb3d77a6efbf38b46b66fdc13a603cb7ffbc1bcd7004f3da097ab949bffc5c662a2234306dcc810e2a9a08b5685bc24428665d7bcedde057b985d033b1bcf1294f97e91410b57044d976379e1e32db70b17ecd30a6194e28aeb6d324750109e82903d37f540c063a84c4a095d4f79d8a75d638bb29690ad7f42d9ddb7aea382896eec7fcdc065596c8ab1e76384d", 0xc2, 0x1}, {&(0x7f0000000280)="3527f3b4c0a18e74a793693d429ddcceac45b8e8d900437a6049ad6c2f3e773f3388e3aa50c46aa3760d62cbc4a32420cc30f01c3b6ce77417202dafa3c4abd6c77ef5f9a61cd9c35bcf670431cb71bdc0b8f6056830ef40c0feb7d1bcb745abc4c6428d79fc2f35167bdebc26a0d01ec4c49a8460948c58584ce066bfc726bc8a97d4", 0x83}, {&(0x7f0000000340)="e8d29b331013455632b2dbe28e3b9f535858e44bd7f44b3b2b6eaadf6e5e69df6333f3c454bfa518046b5541c5001b94240469675b4fecc2c916b6fca8ed9da2bb0f9565275b811b39d1b28b322315a4e81716c7ae5b6a79e376b13bd8d5141d91ee0ca3fa447dc1477c1480bb1f6a7a65a7814e916362384bfe9e89ee8220fd6e31098ab2822846c333da3f92f6e1c1c98776d01d3107e3654d0a247847acd26308aed63c2fe9312bfd232e959f63be988043ab5356e1ebb42ffa748b6b3f203eb746e1", 0xc4, 0x2}, {&(0x7f0000000440)="235696f5ea861e6044c2b92f2ba521ab3c8d0a702a977dd4dd9b214b38af76fa45df0c81b2f61d531f62216184b52c073982966f9ecc7f80cff1a2e021cb3ed7c8063e99201957c1ee488b5b1b3287d57364d16000e91044edef2e0b60dc8fdd2180e3e124adf325b28c358ffd15e190a9b9fdfb580ccbf329a010bb52bf8a5016385fed5abd88809a590165fcd48290afe7984d38d81985e249", 0x9a, 0x1}], 0x40000, &(0x7f00000008c0)={[{@gid={'gid', 0x3d, r0}}, {@part={'part', 0x3d, 0x7fffffff}}, {@session={'session', 0x3d, 0xc03c}}, {@uid={'uid', 0x3d, r2}}, {@session={'session', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r3}}], [{@uid_gt={'uid>', r4}}, {@subj_type={'subj_type', 0x3d, '[d::]:,640:\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[d::]:,640:\x00'}}]}) 09:49:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100686c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1663.813195][T28497] libceph: parse_ips bad ip '[d::]:,640' [ 1663.843232][T28504] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1663.854806][T28503] libceph: parse_ips bad ip '[d::]:,640' [ 1663.963111][T28504] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1664.229585][ C1] net_ratelimit: 18 callbacks suppressed [ 1664.229593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.241085][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:49:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b0") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c2}, 0x28) 09:49:32 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6400, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000001600)=[{&(0x7f0000000080)={0x27, 0x0, 0x2, 0x5, 0x8, 0x100, "f09ca11e59b04512627856484ee79c873da40232986d43caeb8b1481a73f90c34b22c795721ba31db82ebc09b431bb845d0cc4f39c5f9f08c47e12e97627b9", 0x2a}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000100)="c074c63787c08d4c190123d52c59bc90ad9e5897afb0641fea87eba591bd655cd794f9b2732c784d6b67fb61ae6ed111a9296a026de7bcf3d18d799306cde11287aa9807f026e6c4be0201f0ae6004ff7d5af669afcd72da005e1f08fdac108bde40d199413536fad7d5204e7018c22c5d5dd56b93e487332cd0389bf8", 0x7d}, {&(0x7f0000000180)="ad62236b8ba8b456ca88bf3f9471b5edfe304cbcdc6bf83d3898819dbffd33093e915e0756360d1453320ddaa817e5f9384fb0f7991f48b011b60170c698c59176303ef2ccea112c8a98d084caa959688c36d7c5bdd8c758c98d58c9e84cd0d73bd76a36e5f75e559fe2453a9a8d0c582aff6a6bfa5851a4001d119526179d740bd8ab6f1c99dbbc7f6538303ba0027820a19691755e89938ab2213d2ced47041b08b98b1e8423c8f04b88d5b6d5aa548be2f5d641504df9304d8ba955d3205d46382680e3fe9075f1cde6865efaf6822242fd5792403d1e23ac5cbe782efa5d01e257cbec407c5a724e97f82282", 0xee}, {&(0x7f0000000280)="6445543320423516d5509c5b2d02467e5c6067e6c1b5f9199bd29c15af3fa0c4eb3c9254a7791ab5fe278adf6c938ec82e0f66a3844841b9587e17e69c7f0a62f45ce2027839cf17", 0x48}, {&(0x7f0000000300)="fada2fc50d5c667ffe112dae6e4608870423e3c67b96be481e", 0x19}, {&(0x7f0000000340)="ee5bfb39af0425616d85df687e681a7e189dc5df2cd4595a52dde0961f8103e5901682ad49589672d7f69b668615caa5e6d86367b06337ecc849759b0cbdb7346cc5789ba891e85060bc29d33677912101cd7d0dc8416fef43accc05ade61996e39368410372de5e86466752e20643ea59d055502767bd9784", 0x79}, {&(0x7f00000003c0)="221de78610558806b8e678b6f6e87985181f8c561f4781891735bfa7fb5a7a067b505f67e15ef328b587de66ed4216b880ac6ead9c1136fe0a2c3fab6fe85ece4fa3b58786922fd96af7c2c64b5cf22cb93a6c381db6eed6ebe36b11e9bf98bf33165f489fd8617bc3f6275e4b348e9e17387210a4385f2531bc068d23e3c8fa6385455a7fa7e1018fe71290289e0149f1d38afb01ad9a90aa65f22392b941bbd476a653179a3b84dc60de98ecb0e436cd2c9556179df12a", 0xb8}, {&(0x7f0000000480)="cec287ed3586cfc5db5ce8492a0076f5ae1d073b41861de941cd3d49424402f975873782e6abfed05aae599765599918abc6aee2b1fc0c3bb97829ce03ce0fca095ef0b262ab33aa43076a657c68c4dcc870", 0x52}, {&(0x7f0000000500)="51fdd967eb4886c4a6ba5e98588c79efe3a2b317094184ae775f3adbb0b5e5988a9f1950b36a33aafe60dc6949e2185709cea59ffa28ba8cd12b8a86e3956842cddf18", 0x43}, {&(0x7f0000000580)="188ed46079e40849b4846cf65990e479756704e5416df4408a84ffb070d19637d183fd534f70c29088c1bf596e89e5f4d4ba53340284e9834aaebb197e5ef55243f7b1ce88d67b653156f16aed3ffa293879fc3ef3ba52a120e53f1db75fab96b121205c6a408c4993e6af06", 0x6c}, {&(0x7f0000000600)="cbb7eb04f4f45f2b2907ec47b37d332264704e4de33c7045db505975b897d89cc876f947696367fa66a0004fc67de8f87338c33ab3f46a88a6440232fff1cbcffad7175c6582a2fffa57387775d9911c6bd216e0a0b1a411e5cb7c010932452c63e32f558f0abf54", 0x68}], 0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="900000000000000000000000f18e0000887cba937ea335fde41cab361ddcbf62b0b035fa5d4cb8fe6f5079e2f48fc30e860b4e8b60cd82cecca4f94c78d766038c9dc48d3dc76e4606d55f1852308a5f860bdcb93cb2d949266d2d070a9b1cf3dfe713df726d48529a5270a105f1252cadee7395d3336e91ea915ea20af6e9ff235d000000"], 0x90, 0x4000000}, {&(0x7f0000000800)={0x27, 0x0, 0x2, 0x4, 0x81, 0x400, "f3236b728c0dfdda0465ff356073650f4625412cffb499863759215f398df6213b217477f619948333f81523194be01b6ddd112ec8560869c1259c46ae3444", 0xb}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000880)="d28cd54fcfac4d265299eb4bff8276a528314f0492f6d6680cad37d0720e7ceba8e70792152c6a2db6a0b95cae26b2207a46e7e51d536312e02e0890c069d5cce2a7d057333ff64fa088391c517283a2198bd3e56ffd4671b26e571056b95c147bebd79f3df2ad06d0a5efb0cbbd63345de7e746031ecb3152d713cd013356a9c50a7119c308d68b1f796a17f6710ab3000e68589d", 0x95}, {&(0x7f0000000940)="fee0eaee87846b5104099fd6441d046f60046c70fc8e09910fc966b97d46fddca6048dabfc95ba82451dab8f6b9a8da2df85f1eb034f1efb17cebd36efca419d17ab1a3faec2beb1565f52f4e098412161922f56c52a355519718e5ad72aae548d172a75bed420ac29913a0e5f6d32d97790856f7399e9b3e3b5c94694abfca79b0a31c3e8c8f970ec9195b6fef896d7b7d22a1fc8e64740265bdb721bbc706c60b591852ca8feca7cdfc98ae518aa9c89560899ad2b3bebac82587569180b7250aaba7f49b555b2f7a896923af05df6d827320cf6dc08aa03623a5527baac408574dbec94e8689a513aa64af6b354c68f9f", 0xf2}, {&(0x7f0000000a40)="52ac389d54ce80a0ce5661ebd4df9413d4e4db274e25d82520ebb497f72d63c6ed87f8eec897dd9db3630a45c01cbfa187ee909ceb83a36b568f064a", 0x3c}], 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="38000000000000001101000000000000f45026f6dc287ccbe98a64915e5e5b2c2e754e243698c2e10fbeb02f6ecbf8951c00f8868ed23c00adde7fb741564c5f550b86fcdbba485476b5cf37e8e700f3a28cd2af0dcca4"], 0x38}, {&(0x7f0000000b00)={0x27, 0x0, 0x0, 0x7, 0x0, 0x8, "ffe9e843292e56dbd03dd39bbeca4920211acf261f8bd83a190b4faeebbfa3fcde5c643fa6bc8d8999819b280b9aeeedcd9a102a130eb4d34987a4c6a83d13", 0x15}, 0x60, &(0x7f0000000b80), 0x0, 0x0, 0x0, 0x41}, {&(0x7f0000000bc0)={0x27, 0x0, 0x1, 0x0, 0x4, 0x8000, "134708e2e13920c49d5ac634f497304f7b121e8edf6eac01bf961df6ea24f131069676fe66fa3495d56c919d23ee08831d220103e4c568d4cf4ab934b03470", 0x2b}, 0x60, &(0x7f0000001040)=[{&(0x7f0000000c40)="88e2dd5da10dcc9dc24da4daf1bf25d43f0ba15f671c68e6db7dda51e301ae5251590d1864d6a8a2e9c6ebaf94f44c733a59998970f415", 0x37}, {&(0x7f0000000c80)="74d31ba88acccfb85d025b2b6016080b2600c47febdef570223df0a1d3687317b8a67a19f89778e7e9eedb6d8d07d1777a221aff24195b7b9d7e04b0ead851f8cdf29a7ee63cde2699c69e", 0x4b}, {&(0x7f0000000d00)="9af72c4a38737ce6adc11829351cd7", 0xf}, {&(0x7f0000000d40)="c341c867d21d5dda673efedd82fb3048107afeab201fe9103ccf2fc08b61b3ee0b6c7d100cf1ff481873c4fd32121184c2abc405dc48f64f8bfd31dd7bb7fecb1138e3151aca096da0a5a43ae65c496ea7fd8d6e86336269c556faff6025cc05661f1b8f8f7c8b3fa98c2105d1e59f0d861dcd283a16fd17826c6fde5f79d560a2725a918d7c362ae081f37bf04dc203cbff2a08229a07e8513b7c2ac3309ad88e828c32", 0xa4}, {&(0x7f0000000e00)="8019b648127b0329ff36f77787ff19d2198d699ba245e9b071e3231ec233d806e9c14933ccca4f345ca11c38e47753c4a65d381211054fe9e1362a5189ca1cae787b950493832783be5af9366971f89552d6c891f94f3619f02b409b89c60d84f9c5b7ad8093d7e7afe7ec6f1e42a35b3176260848fea415006e2f06d6", 0x7d}, {&(0x7f0000000e80)="38bf278fd2bc6abe172eb2280b9aa5739a70240db2eb00ac21afd6b978d925d09a15343a44f03cc5764ee4", 0x2b}, {&(0x7f0000000ec0)="592716a9965fa6fa41da2db554261580df9d0778bcfb157228d65e115b6f9c2277de6c7d7a16344cd9c78147a6e16b82004bf2aeb2bcebf07e07b5ce4e741928ab72204fd1b2f911664b29fdff940074b3372bd65abe994dc5337f9ef6575b7d61e52eb4899fc417374fa083687d39be87fcaf772e7667400837544bd4e2439672e4a84828659bb3a5cc0eae841ee736c9add1bfc10ebbb3ef15d490cb1f9efc05764701ec8a1a2be772f79275a1c03640b1f35531f4f11057413ff0f0bf8768bb7ea736b55880e906ee9f55", 0xcc}, {&(0x7f0000000fc0)="b6bb8b441f5194954fcf1b8f22892f2aef42b5c8b6c3d87aaa0e628b0ac9300e4878cc0d600fed7dc285f8d96ce749355f86e7e9c44b501142b7e088b8164b332229348f54a874e2a12b89eaa8b30046356af0d9d7a77d86772517e1ca8e6c7b8d21bff7df427748", 0x68}], 0x8, &(0x7f00000010c0)={0x60, 0x116, 0x6, "d7efe09037a3ee4a19edb2648fe4311913c6f30c99565bd4f2268a6e1a34d71cfd81d1591fbf1aca9a9eb986e6d708a08fbad58e70a9b645d5be5191b84fbc9e7e1ce70cd5e01568d9c7a66570bfcd9d"}, 0x60, 0x4000000}, {&(0x7f0000001140)={0x27, 0x0, 0x2, 0x1, 0x8001, 0xffff, "55e6a9ee09fca0da085a3e5cf0d439dac0c924630eb2f35f6ea43ff0698222cf1e6390bc8e467ebc7a62e87c32629ae539b152ba7412f9479dba305ebb565b", 0x28}, 0x60, &(0x7f0000001500)=[{&(0x7f00000011c0)="a2d5f1093db3db75241907711043e37fada071cce4e92966c87528358dd67e5baab65cf07286b72bf81aae89e68160a2af01667a3af0353d4694f29a062101bc301bedf56249f37f0c60e58485e48414660b2a248174686598fd4db730e80b47c2aa269907da30898a464ca0effad2de95ba7de6cb479578dbf50d56a85db6751e09d00adb4971388d7ba0bc14b89bae4d31d9d2fd54e8cb37283cc08e1c32edec96dc36b5bd349ea696a3d901f4b9698858cbd538961fcd679aae787b2935a93a199d0e153d6df66a12", 0xca}, {&(0x7f00000012c0)="28d6b8d26dd3571442111515f9455249654417ed68560535c89b2d1215db757c47694b21a98aed1689fa0e411dd9120fffbde5bb1de9d5824213245f32260168e2b8d11fd4c9e31995f51b6614d98fd9cbc18bb663f8f1b6ebd7c9bc297c90eb4862c27afc4af24042a2474e8149d8792837295972d9e0244853c1480fc401e27eed0e1c3f096bb7e841cdecf4aa1be40ccb6dd8b25b3c663854f11eae4880da5a1d9b9c6b1e083b32641b313e4793d559eaabb53d37045df05f77", 0xbb}, {&(0x7f0000001380)="88e4c91cad556180195139a7fc6499285f708d09729e2dc11075ec9e01b8e98ccba4bf3546b4e0a2758c119227c53104be0ed811b6eb59b1ea945361b96b2020945084c9c46310a80db8cc8342b4bba3249277c655d4b97aa9382aaaeaddbb5fb612", 0x62}, {&(0x7f0000001400)="402a0caceeab7132", 0x8}, {&(0x7f0000001440)="1bf6bbf868585d955cd864529e655e1ba1628a854de3051beff3d729bd13682fc7dc713df62e10a903bdd95e197e75c7ccee4870007b20e51bc1d44e67854a70fa4d65aa4a3fad5fe4d779f3f501c294431f17e3678715c934815115104689426608c04990e40e48471f935e65e7f465ba5ec88b780d4a7e3f25909e1d6746e3d65758b5c852f85b918ff25e5c36dfc82d1536fc99ad1cb771f5932ea60b350568a9", 0xa2}], 0x5, &(0x7f0000001580)={0x80, 0x1ff, 0x101, "7dc8524385de5236ff06a0bcb4b007f8f0da7aa950bd9a1c6e12d2f3b8e0b7a67068407d3229cb3daf7977c9f206f9e8cd341b84562a0411be5577b7dd2e261486ad8b77fd20f5e212197cedd34404ef9f1d60c269234a18c9dfc5a410af2480c12332cef3f831b93914d696ca9733"}, 0x80, 0x20000840}], 0x5, 0x2004c8c0) accept4$vsock_stream(r1, &(0x7f0000000b80)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001740)={0x7, 0x2, 0x2, 0x8, 0x0, 0x0, 0x6, 0x200, 0x7, 0x1}, 0xb) 09:49:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601006c6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:32 executing program 5: sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1013686a1fcd6186730dc79471d0f84f614989c68429e089e720f133a5543bf57002c48d527c4cf06c0e4d13bb7b1e69461bfe2f74025772dd0544b208ca60be391f120714a1630dd8faccd573aa5387abec4fd3f07f88acf8306fb94cd538d197abc72a4d2d80d335c3429f21a6a7288c2c7d57a630691e09c360b02f40d23a7bbe176cd4b7172e36f0c1748d14ad3d07c3c8429126a772355db7a35fe6183f2d107970fd1d20f619f55143afdcff6c222766797113c97d338ca42aaa4abd456c79c4c1e4cfbec9245abdd06e884a4d2c55ed5608baea509c7a62681e6daf586129b2c00f2c6f62f498801d9cf0d5d8dd38b1286d31a86423980ee13253c5c62554ac6a9c7c03c51432e009ebced010d5b2dd8e2d005979069c31175ce0972ded72bd5bf7752d35d71b8ee5a8feda1dc6b79faf25e1c0bf5157def6465f851147db17cdc82eb1951b49a6c2fd1f333f5965505b468cfbaa2a3df10dc826d4cb295926a75e08d3d04a0c828c8910db6b469bb4102923398e3729d80d27c13b7faa61e10ab462535282d1ec6193b9330adbdfdd6a"], 0xffffffffffffff83) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x602, 0x100}) [ 1664.362845][T28517] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:32 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000240), 0x0}, 0x18) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) 09:49:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b0") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:32 executing program 5: sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xffffffffffffff83) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x602, 0x100}) [ 1664.630474][T28517] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b0") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x20000) write$P9_RREMOVE(r2, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) clock_nanosleep(0x9, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8100, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000080)={0xffffffffffffff27, 0x9d, 0x7, 0x3, 0x5, 0x1}) 09:49:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100746c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1664.949586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.955643][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.029620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.035726][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.041747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.047664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.069438][T28541] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1665.167414][T28541] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1665.429519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.435341][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:33 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0xe8, 0x800, 0x7, 0x1, 0x200, 0xf34}) r1 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) close(r1) 09:49:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c3}, 0x28) 09:49:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) connect(r1, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) getpeername(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x80) getpgrp(0x0) r2 = fcntl$getown(r0, 0x9) getpgrp(r2) r3 = gettid() getpgid(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/snapshot\x00'}, 0x10) fstat(r1, &(0x7f0000000600)) getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000d7c62a826c88cb8eac5455a7c0ddd2cde6ac604e1f2b25dbbde839e738116e591d12c28d66ccbae02d5b57196b0b7aaa026ac546cf62889262b8d18d3ff133220a895d231a08001bc2e1ccf77e2baf41f20251bfa5e8548aa08802005a0adae04065a41edbe696f8247798ef969efc3a16451706b456d8395756213213a4459c078ba37f003b9a8d85a236f6e250ef84ba1c4d48e41e87647601d54326", @ANYRES32=0x0, @ANYBLOB="000000190000000008000d000000000008001b00000000002d3a418d7288f620cf62c122fd097963dfa5b7ddc3d75939b4e66bd5bb7d2dd0591f8d948b43dfb69afff83687844625d7b1d419cea12a0af9990ec2c4ca45886fc4a0182a491af636b7c81eded3cc9a9e9cbfa173a83a110eaa22e3bade49ae7aac40185c7d93a032b1b2773c39899b196231000000000000000000000000000000"], 0x30}}, 0x0) 09:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, 0x0, 0x0) 09:49:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:49:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601007a6c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, 0x0, 0x0) [ 1665.792472][T28656] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1665.827836][T28654] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000100)={0x3, 0xfff}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c4}, 0x28) [ 1665.876547][T28656] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1665.898235][T28663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000075000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:33 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10000) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x8, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x404, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffff8001, 0x1, 0xb9c, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket$inet6(0xa, 0x80000, 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f00000003c0)) openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x10040, 0x0) accept$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) getcwd(&(0x7f0000000000)=""/251, 0xfb) 09:49:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c5}, 0x28) 09:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, 0x0, 0x0) [ 1666.122983][T28747] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000100)={0x3, 0xfff}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c6}, 0x28) 09:49:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x40096102, 0x0) [ 1666.255933][T28747] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:49:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000100)={0x3, 0xfff}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100000a000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) 09:49:36 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$P9_RLERROR(r0, &(0x7f0000000240)={0x19, 0x7, 0x1, {0x10, '/dev/input/mice\x00'}}, 0x19) connect$x25(r1, &(0x7f0000000280)={0x9, @null=' \x00'}, 0x12) r3 = add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="4092ba06de8b14bdfca419bc46c53907d5b5cb43", 0x14, 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0x4000000) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x800, 0x0) fcntl$setpipe(r1, 0x407, 0x7fe00000000000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80000001) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000003c0)={r1}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"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"}) fcntl$notify(r0, 0x402, 0x20) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000880)=0x1f, 0x4) r5 = syz_open_dev$adsp(&(0x7f00000008c0)='/dev/adsp#\x00', 0x8d5, 0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr="b55eac75259acdec407e0159e003b3db", 0x72}}, 0x9ce2, 0x8, 0x10001, 0x7, 0x20}, &(0x7f00000009c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={r6, 0x29}, &(0x7f0000000a40)=0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a80)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000ac0)={[], 0x1ff, 0x8001, 0xcdd, 0x1, 0x1000, r7}) connect$rose(r0, &(0x7f0000000b40)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000b80), &(0x7f0000000bc0)=0x30) accept4$rose(r4, &(0x7f0000000c00)=@short={0xb, @dev, @rose, 0x1, @rose}, &(0x7f0000000c40)=0x1c, 0x80000) utimensat(r5, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={{0x77359400}, {0x0, 0x7530}}, 0x100) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000d40)={0x1, 0x10, 0xfa00, {&(0x7f0000000d00), r2}}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:49:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c7}, 0x28) 09:49:36 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0xffffffffffffffe1) r1 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mlockall(0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) accept$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, r1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xffffffdf, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0xfffffffffffffcf3}], 0x1, 0x0, 0x2}, 0x40010020) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'eql\x00', {0x2, 0x4e20, @local}}) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 09:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) [ 1668.873979][T28910] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c8}, 0x28) [ 1668.974010][T28910] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000100)={0x3, 0xfff}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000023000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006c9}, 0x28) [ 1669.170395][T28930] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1669.263856][T28930] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1669.589579][ C1] net_ratelimit: 22 callbacks suppressed [ 1669.589586][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.601147][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:49:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) 09:49:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ca}, 0x28) 09:49:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000025000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="68317970f297"}, 0x383) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0xffffffffffffff7b, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) [ 1669.909590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.915655][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006cb}, 0x28) 09:49:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 1669.962880][T28945] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1670.085814][T28945] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 09:49:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006cc}, 0x28) 09:49:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002a000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1670.336484][T28969] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1670.436238][T28969] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1670.469734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.475620][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:49:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006cd}, 0x28) 09:49:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f128291a41d88b070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) fchown(r2, 0xee01, 0x0) fcntl$setlease(r2, 0x400, 0x0) 09:49:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 09:49:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002b000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe8000000000000000"], 0x0) 09:49:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ce}, 0x28) [ 1670.960100][T29080] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:38 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x4e23}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @broadcast}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0xb2, 0x244}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000800)='/dev/dmmidi#\x00', 0x3, 0x20000) geteuid() prctl$PR_SET_SECUREBITS(0x1c, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) connect$bt_rfcomm(r1, &(0x7f0000000b80)={0x1f, {0x6, 0x20, 0x5, 0x117912bd, 0x4, 0x8}, 0xf7}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(r0, &(0x7f0000000200), &(0x7f0000000380)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fallocate(r0, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r2 = socket$inet6(0xa, 0x80001, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x290) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000000c0)) [ 1671.070814][T29080] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002d000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1671.189566][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.195689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1671.269588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.275842][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1671.322428][T29106] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1671.396978][T29106] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:39 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:49:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006cf}, 0x28) 09:49:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe8000000000000000"], 0x0) 09:49:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:39 executing program 4: r0 = socket$inet(0x10, 0x4000000000003, 0x80000000c) socketpair(0x8, 0x80804, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000340)={&(0x7f0000000140)=@can={0x1d, 0x0}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/83, 0x53}], 0x1, &(0x7f0000000240)=""/244, 0xf4}, 0x142) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2400000005011f001cfffd946fa2830020200a006000010006e70000000064a204040800", 0x24}], 0x1}, 0x0) 09:49:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002e000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe8000000000000000"], 0x0) [ 1671.888467][T29116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1671.903682][T29115] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d0}, 0x28) [ 1671.952437][T29125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#! ./file0 ppp0(proc#vboxnet'], 0x1c) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "bcd254f02e0eadcd428200e7c1783289f501d43eb9e0ef676ffa6c184e4e6e2a0dab3a24e8fc5a04ad"}, 0x34) [ 1672.030301][T29115] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d1}, 0x28) 09:49:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100002f000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1672.287969][T29241] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1672.338887][T29241] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:49:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe800000000000000000000000710000000000000000000000"], 0x0) 09:49:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d2}, 0x28) 09:49:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000030000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:40 executing program 4: r0 = socket$kcm(0x2, 0xfbfffffffffffffc, 0x73) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 09:49:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9dc2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x2000, &(0x7f000000d000/0x2000)=nil}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8200, 0x0) sendto$unix(r3, &(0x7f0000000140)="6d13f92ba7b072f5bed6dd938c03b41c58c4709337c6da5f2a0836a91abe27af6f2fed7931e27dd0196f811798fb01888f963d2982e5427626c76f75f3d15f28e8cef827bbdd0a62b9fc70aaf36e8ea06242a354c72d0c83fa4a2bcd48e0fc96717304f541f7bc93c419255d7caee25ef686f7a87a96239fdff8e68eecf2cddcc18e9f3a2d7d59799762b2e67affdfeb7e150f9939eb7a07807a10121f9ef16c6c1625f44d969b67d59a5d7f3d7e98ff916f53a132cf836b16836519c0ac891a090e56", 0xc3, 0x8040, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002040)={0x0, 0x3, "ab8c34"}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x10002, 0x0, [0xe52, 0x7f, 0x3ff, 0x9, 0x7ff, 0x8, 0x26e1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1672.928375][T29252] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe800000000000000000000000710000000000000000000000"], 0x0) 09:49:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d3}, 0x28) 09:49:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe800000000000000000000000710000000000000000000000"], 0x0) [ 1673.068400][T29252] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d4}, 0x28) 09:49:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:49:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) open$dir(&(0x7f0000000040)='./file0\x00', 0x800c0, 0x8) fcntl$setstatus(r1, 0x4, 0x1042805) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x100) 09:49:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100004c000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a"], 0x0) 09:49:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d5}, 0x28) 09:49:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1673.795166][T29285] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d6}, 0x28) 09:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a"], 0x0) [ 1673.914829][T29285] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e601000075000000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a"], 0x0) [ 1674.181375][T29408] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1674.322249][T29408] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1674.629552][ C1] net_ratelimit: 18 callbacks suppressed [ 1674.629560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.641029][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:49:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d7}, 0x28) 09:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800"], 0x0) 09:49:42 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000000010000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000be000000000000ff0f000000000000000000"], 0x2a) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f0000000700)=ANY=[@ANYBLOB="2f8065762f90552092964673085753c749fec600eef3e041ef4d136e358e2709d45eb35bead4419f7207571ccb66c7565f0b26542c005b484056e13783af300532ee41fdaa5ec5ce2b055a5b56ee62b6f2cabddd2078c3c79c8f799bb627337d4f073e43"], 0x0, &(0x7f00000004c0)='nfsd\x00', 0x2000023, &(0x7f00000006c0)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000940)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09a944bc03f33827c69c3fbb70d4b5fba995326c48ced38769a4d61db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189fa963bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f9138e41508afeea"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e98b2b85bb8df6694a"], 0x0, 0x0, 0x80000, 0x0) r2 = dup2(r0, r1) ioctl$TCSBRKP(r1, 0x5425, 0xfffffffffffffff7) write$FUSE_OPEN(r0, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0xfffffffffffffd1e) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) listen(r2, 0xb6a) ioctl$int_out(r1, 0xfffffff7fffffffe, &(0x7f00000002c0)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000780)={{r3, r4/1000+30000}, {0x0, 0x7530}}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) 09:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800"], 0x0) 09:49:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d8}, 0x28) [ 1674.914593][T29422] EXT4-fs (loop3): bad geometry: first data block 1 is beyond end of filesystem (1) 09:49:42 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1674.981007][T29430] tmpfs: No value for mount option '6Œƒ\' [ 1675.014097][T29422] EXT4-fs (loop3): bad geometry: first data block 1 is beyond end of filesystem (1) 09:49:42 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120023000100e1ffffff000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d0000000000"], 0x28}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x170, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfd3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xbd59420a5b9965b6, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1c}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 09:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800"], 0x0) [ 1675.349553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.355610][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.429572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.435494][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.441461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.447343][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:49:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000000070000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006d9}, 0x28) 09:49:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x6) r2 = socket(0x0, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'vxcan1\x00', 0x1820}) bind$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_extract_tcp_res(&(0x7f0000000000), 0x20, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x100) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 09:49:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a099078000000"], 0x0) 09:49:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1675.815985][T29455] EXT4-fs (loop3): bad geometry: first data block 7 is beyond end of filesystem (1) [ 1675.829548][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.835377][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006da}, 0x28) [ 1675.977257][T29455] EXT4-fs (loop3): bad geometry: first data block 7 is beyond end of filesystem (1) 09:49:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a099078000000"], 0x0) 09:49:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101001, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000240)=""/172) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="0f01df66b89c008ed064460fbaed00440f0864640f019b0e0000000f01c948b85bbf0000000000000f23d00f21f835100000050f23f866430f38802572000000f3409066baf80cb8c818db80ef66bafc0cb800000000ef"}], 0x1, 0x0, 0x0, 0xfffffffffffffff8) arch_prctl$ARCH_GET_CPUID(0x1011) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000180)={0x20, 0xfffffffffffffffd, 0x100, 0x7, 0x7, 0x81}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:49:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000000090000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1676.246154][T29581] EXT4-fs (loop3): bad geometry: first data block 9 is beyond end of filesystem (1) [ 1676.365214][T29581] EXT4-fs (loop3): bad geometry: first data block 9 is beyond end of filesystem (1) 09:49:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:49:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006db}, 0x28) 09:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a099078000000"], 0x0) 09:49:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:46 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000100)="083b66a338d8684b998a63c01f8a19e41b19e821eb66623a9ea5ca042859e29bb497af4d44804791cc3eced1bb3cc53f77c7349135c8fc34514984c7a02987a4422ae33e6b93", 0x46, 0x6, &(0x7f0000000180)={r1, r2+10000000}) socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/17, 0x0, 0x1000, 0x3f}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0xffffffffffffff80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 09:49:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0000000a0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006dc}, 0x28) [ 1678.589009][T29593] EXT4-fs (loop3): bad geometry: first data block 10 is beyond end of filesystem (1) 09:49:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'uueue0\b\"\xf1W\xca\xb8\xf4\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x3}}) 09:49:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006dd}, 0x28) [ 1678.725716][T29593] EXT4-fs (loop3): bad geometry: first data block 10 is beyond end of filesystem (1) 09:49:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c020000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1678.921444][T29717] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1679.004650][T29717] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:49:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'uueue0\b\"\xf1W\xca\xb8\xf4\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc02c5341, &(0x7f00000000c0)) 09:49:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006de}, 0x28) [ 1679.990211][ C1] net_ratelimit: 22 callbacks suppressed [ 1679.990219][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.001711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.309640][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.315775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.869580][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.875431][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1681.589568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.595626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1681.669595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.675555][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:51 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip_mr_cache\x00') syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000580)={0x3ff}, 0x0, 0x0) 09:49:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c030000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006df}, 0x28) 09:49:51 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000073b000/0x4000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 09:49:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:49:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1683.791894][T29845] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setparam(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x0, [0x2]}, 0x2c) 09:49:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e0}, 0x28) [ 1683.867948][T29845] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r0 = memfd_create(&(0x7f0000000400)='\x00', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2021, &(0x7f0000000680)={0x2, 0x800, @rand_addr=0x1ff}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) getpgid(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00', 0x10000}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 09:49:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c040000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e1}, 0x28) [ 1684.056172][T29964] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 09:49:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e2}, 0x28) [ 1684.189374][T29964] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:52 executing program 4: 09:49:52 executing program 4: 09:49:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c050000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e3}, 0x28) 09:49:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:52 executing program 1: 09:49:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:49:52 executing program 4: 09:49:52 executing program 1: [ 1684.904467][T30090] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e4}, 0x28) [ 1685.029543][ C1] net_ratelimit: 18 callbacks suppressed [ 1685.029551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.041221][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:52 executing program 1: 09:49:52 executing program 4: [ 1685.071562][T30090] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c060000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:53 executing program 1: 09:49:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e5}, 0x28) 09:49:53 executing program 4: [ 1685.341233][T30111] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1685.465623][T30111] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1685.749628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.755596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1685.829617][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.835591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1685.841623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.847576][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:49:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:49:54 executing program 1: 09:49:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:54 executing program 4: 09:49:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e6}, 0x28) 09:49:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c070000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1686.229541][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.235375][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:54 executing program 4: 09:49:54 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa7) lseek(r0, 0x0, 0x0) [ 1686.309008][T30123] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e7}, 0x28) 09:49:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 09:49:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) [ 1686.438461][T30123] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c080000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1686.670661][T30244] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1686.791493][T30244] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e8}, 0x28) 09:49:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'uueue0\b\"\xf1W\xca\xb8\xf4\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc05c5340, &(0x7f00000000c0)) 09:49:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 09:49:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0xfe03) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000000c0)="64ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3193e66430f3a0ce397") clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x175) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 09:49:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c090000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) [ 1687.231388][T30272] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006e9}, 0x28) 09:49:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 09:49:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x400, 0x1}, 0xe) [ 1687.295306][T30272] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0a0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:55 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:49:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1687.608695][T30379] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ea}, 0x28) [ 1687.772664][T30379] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:56 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0c0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1688.294177][T30495] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1688.405383][T30495] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1690.389573][ C1] net_ratelimit: 22 callbacks suppressed [ 1690.389582][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.401235][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.709594][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.715553][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1691.269558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1691.275368][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:49:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:49:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006eb}, 0x28) 09:49:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:49:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:49:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c230000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:59 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:49:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1691.429353][T30507] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ec}, 0x28) 09:49:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1691.562312][T30507] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:49:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ed}, 0x28) 09:49:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c2d0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:49:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1691.799034][T30630] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1691.902166][T30630] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1691.989558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1691.995750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1692.069565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1692.075607][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:00 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:50:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ee}, 0x28) 09:50:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c480000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1692.523028][T30639] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1692.624387][T30639] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:02 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:50:02 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0xf000, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ef}, 0x28) 09:50:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c4c0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) [ 1695.148414][T30663] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x20000141, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1695.208235][T30661] FAULT_INJECTION: forcing a failure. [ 1695.208235][T30661] name failslab, interval 1, probability 0, space 0, times 0 09:50:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f0}, 0x28) [ 1695.250589][T30663] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1695.289872][T30661] CPU: 0 PID: 30661 Comm: syz-executor.5 Not tainted 5.0.0-next-20190306 #4 [ 1695.298650][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1695.308691][T30661] Call Trace: [ 1695.311984][T30661] dump_stack+0x172/0x1f0 [ 1695.316330][T30661] should_fail.cold+0xa/0x15 [ 1695.320925][T30661] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1695.326733][T30661] ? ___might_sleep+0x163/0x280 [ 1695.331578][T30661] __should_failslab+0x121/0x190 [ 1695.336612][T30661] should_failslab+0x9/0x14 [ 1695.341112][T30661] __kmalloc_track_caller+0x2d8/0x740 [ 1695.346491][T30661] ? msr_io+0xf6/0x2e0 [ 1695.350557][T30661] memdup_user+0x26/0xb0 [ 1695.354793][T30661] msr_io+0xf6/0x2e0 [ 1695.358682][T30661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1695.364920][T30661] ? kvm_set_msr+0x380/0x380 [ 1695.369502][T30661] ? emulator_set_hflags+0xa0/0xa0 [ 1695.374639][T30661] ? lock_acquire+0x16f/0x3f0 [ 1695.374654][T30661] ? kvm_arch_vcpu_ioctl+0x1363/0x2fc0 [ 1695.374674][T30661] kvm_arch_vcpu_ioctl+0x13b5/0x2fc0 [ 1695.390114][T30661] ? kvm_arch_vcpu_ioctl+0x1363/0x2fc0 [ 1695.395575][T30661] ? kvm_arch_vcpu_put+0x460/0x460 [ 1695.400689][T30661] ? mark_held_locks+0xf0/0xf0 [ 1695.405443][T30661] ? perf_trace_lock+0x510/0x510 [ 1695.410370][T30661] ? is_bpf_text_address+0xac/0x170 [ 1695.410385][T30661] ? find_held_lock+0x35/0x130 [ 1695.410406][T30661] ? lock_acquire+0x16f/0x3f0 [ 1695.410421][T30661] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 1695.410447][T30661] ? __mutex_lock+0x3cd/0x1310 [ 1695.410465][T30661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1695.429548][ C1] net_ratelimit: 18 callbacks suppressed [ 1695.429555][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.429848][T30661] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 1695.434751][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1695.440983][T30661] ? mutex_trylock+0x1e0/0x1e0 [ 1695.440997][T30661] ? _parse_integer+0x139/0x190 [ 1695.441015][T30661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1695.452313][T30661] ? _kstrtoull+0x14c/0x200 [ 1695.452326][T30661] ? _parse_integer+0x190/0x190 [ 1695.452342][T30661] ? __lock_acquire+0x548/0x3fb0 [ 1695.452367][T30661] kvm_vcpu_ioctl+0x8f6/0xfa0 [ 1695.452382][T30661] ? kvm_vcpu_block+0xce0/0xce0 [ 1695.452396][T30661] ? tomoyo_path_number_perm+0x263/0x520 [ 1695.452414][T30661] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1695.462938][T30661] ? __fget+0x35a/0x550 [ 1695.462959][T30661] ? kvm_vcpu_block+0xce0/0xce0 [ 1695.462977][T30661] do_vfs_ioctl+0xd6e/0x1390 [ 1695.462995][T30661] ? ioctl_preallocate+0x210/0x210 [ 1695.463007][T30661] ? __fget+0x381/0x550 [ 1695.463026][T30661] ? ksys_dup3+0x3e0/0x3e0 [ 1695.463038][T30661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1695.463049][T30661] ? fput_many+0x12c/0x1a0 [ 1695.463070][T30661] ? tomoyo_file_ioctl+0x23/0x30 [ 1695.488165][T30661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1695.488183][T30661] ? security_file_ioctl+0x93/0xc0 [ 1695.488200][T30661] ksys_ioctl+0xab/0xd0 [ 1695.488217][T30661] __x64_sys_ioctl+0x73/0xb0 [ 1695.488238][T30661] do_syscall_64+0x103/0x610 [ 1695.536886][T30661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1695.536898][T30661] RIP: 0033:0x457f29 [ 1695.536911][T30661] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1695.536918][T30661] RSP: 002b:00007fb866295c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.536931][T30661] RAX: ffffffffffffffda RBX: 00007fb866295c90 RCX: 0000000000457f29 [ 1695.536943][T30661] RDX: 0000000020000000 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 1695.568251][T30661] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1695.568259][T30661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8662966d4 09:50:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c600000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1695.568267][T30661] R13: 00000000004c0ab0 R14: 00000000004d28c8 R15: 0000000000000006 [ 1695.734774][T30728] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x7ffff000, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:03 executing program 5 (fault-call:4 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f1}, 0x28) [ 1695.824867][T30728] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000480)) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x0, 0x4004400}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x1e}, 0x5da}}, 0x101, 0x6, 0x80000000, 0x5}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r5, 0x8}, &(0x7f0000000180)=0x8) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @dev={0xfe, 0x80, [], 0xa}, 0x80000000, 0x7f, 0x1, 0x100, 0x6, 0x1000101, r7}) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setuid(0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000004c0)=""/209) r9 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r9, 0xd, &(0x7f00000005c0)=""/137) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:50:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c680000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6002209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1696.149514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.155559][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f2}, 0x28) [ 1696.221084][T30789] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1696.239583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.245587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1696.251571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.257437][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1696.377846][T30789] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1696.629525][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.635361][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1700.789562][ C1] net_ratelimit: 22 callbacks suppressed [ 1700.789571][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.801068][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:50:08 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$rxrpc(0x21, 0x2, 0x0) r3 = dup2(r2, r0) sendmsg$kcm(r3, &(0x7f0000001580)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="a1ddb5ee062e05456608a7847457676b2d32d72b715d98de29ad9e58d0f5ee60941f0d1c7065008f85c544c9409548ae48f068f683d83a0ae53997d892c577cfbd98bd89ac129c5be4adeb71c438d659eeed75da46caa6136f89df4e002571619e49cb8591b01e9a57a893ca346d3ffaa0ac9138530cecb0cb2336ad4c8f86aa6e19c5276e003dc5f53b606cf39e0637ae13a337c44fe1dcf250979b169404f011c7d4a60c57f833e041c9344ccfb2ae9cd7fef43a532a5be2102f2b48fb8844adb8757e1780c2be7bc49fa14dd6a3fac5f3bc543b1b735aba963fd141fdbb5242", 0xe1}], 0x1, &(0x7f0000000280)=[{0xc8, 0x105, 0x1, "f93232a368068e1082e3525f628e188463e9b3ff06f79a3c23faa08b286692ef83a960075adf0aad1fe8ae3941645039140298533557e2a494c563851aac157e2e868641f39eb0f4d6119e8b538594b3d260cc15c4091404fe6acbe3cdc7bfc46c330bcc89030d15610e35ac1308718a6027bf3f0499df0f8882fd7159162c45a75c2481ca72996aba67f68d1153c1b21f62fb25c8e4ebd1c39abfd9a4cb04511ab114d055bceebf84b504a7a781d27dfcddb374d07ca8"}, {0x1010, 0x10f, 0x5, "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"}, {0xf8, 0x198, 0x7, "cbccf5e16fd77e6a8bbb3bd06de273da19b4b26145dd1db39d02f8e5d0c27396371863df7bb021017c8dac72c8888b21b3fa86b0d35c82b107d23e6e0c5a96c68c8933722bc9fc6cfd4e8da10ca527a38b9c85d145a2781a5c55ed441fb086a5d0e43ba6e934b5cb552cacb8808adecaf24cf34fd56dffe3015cb5980970584b29f5aa32e6829af3f88f17e6a1a781e25739e16c097f7ffbc1f8816dade0ec181e881fe3ec15d2e44e24c44ca34b788a95ad71e4ea27ecac7209006cbf9ee79d147b2a4a92f358937f01d970bc9133ce4c29e1762bd98497d4b8db3a886667afd5729ca644f554d9"}, {0x78, 0xff, 0x5, "8cf2f072e81f79f310d382ad01fa8d351a97fcdffbc062e7bd595f3a3616d6733c278af0facef9c606af52ff65ca93f9b1452ad0632d9ceed30a22859d0703f1a30ad142944b7ca8ee6b3c90ed3f9076126f085b98782bc9e3c3e78a88d3e1b36122ff9b2b"}, {0x88, 0x19f, 0xa4, "bb60bb190875253f07175fee95ffd3228f3b523be5c2eaeb7eca429989e8d698acecefe130e21a18ce0df558b058fe00ae940dfe66422889ae053a481632ad2fd20b1db25fad36c4d4f5e98b65001dd7f04f9c8b38942e010daa34b01fc92b1d75eb6886ec74cf5e2b95b10cf0cee3b090d425b977"}, {0x28, 0x11b, 0x1f, "17b2990d4477eaf908a9b1b9e63e0a0843ae8618af"}], 0x12f8}, 0x8804) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e3, 0x0) 09:50:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f3}, 0x28) 09:50:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c6c0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x2, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1701.059390][T30910] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600d209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f4}, 0x28) [ 1701.110593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.116757][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x6, &(0x7f000079bffc), &(0x7f0000000000)=0x4) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000002c0)=""/158) accept$inet6(r2, 0x0, &(0x7f0000000140)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@canfd={{0x3, 0x3, 0x7}, 0x2a, 0x2, 0x0, 0x0, "1d558419be9b804cf11e886d87b5daad57709faea84291d71996a7a82df5259103d0bc94f2e9d9c0936ffdbd11ee46e8b29d4f7751747b844490b7e0e7578b73"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 09:50:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5421, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1701.245817][T30910] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:09 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x408101, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000100)={0xccd1, "c5daf1e89c17f275893efe73f72e89f8aaea1df917e80326858d8046231b4d0f", 0x2, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x4002) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x8) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) socket(0x3, 0x5, 0xbe) 09:50:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f5}, 0x28) [ 1701.669570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.675442][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:50:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f6}, 0x28) 09:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c740000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200800, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000018ffff000000005a09907800000000"], 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) dup3(r0, r0, 0x80000) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000180)="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") 09:50:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='GPLvmnet1)cpuset\x00', 0xffffffffffffffff) add_key(&(0x7f0000000180)='.5\x11\x18\xe4\xc5\xb7\xaa\x8adead\x00', 0x0, 0x0, 0xfffffe79, r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4139aa82c9acaba1aab8f4e0c56000030000000001000019078ac1414bbac14140005049078000000004500000000"], 0x0) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x1, @loopback}}, 0x1e) getpid() capset(&(0x7f0000000200)={0x200f1526}, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x1) 09:50:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5450, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1702.391807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1702.397769][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 1702.479615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1702.479954][T31153] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1702.485582][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f7}, 0x28) 09:50:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x20000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) [ 1702.635280][T31153] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5451, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c7a0000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:10 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1702.876168][T31373] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1702.998618][T31373] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:50:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f8}, 0x28) 09:50:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x459232fe, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x9) 09:50:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x600600, 0x0) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x7f, 0x101000) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000001, 0xa4000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000140)={[{0x3, 0x9, 0x1, 0x4, 0xa07b5b4, 0x100000001, 0x7, 0x40, 0xffffffffd1f4b508, 0x1359, 0x7, 0x7, 0x5}, {0xa43, 0xa96e, 0x7fffffff, 0x6, 0xff, 0x5, 0x3, 0x6, 0x7fff, 0x0, 0x0, 0xfff, 0x36}, {0x616a90ea, 0x10001, 0x0, 0xe50c, 0x81, 0x100, 0x8, 0x3, 0x0, 0x12, 0xfffffffffffffffb, 0x3, 0xffffffff}], 0x800}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000107000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x1, 0x8201) pread64(0xffffffffffffffff, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00'}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000500)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), 0x0) getegid() dup2(r0, r3) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000280)={{0x2, 0x4e20, @multicast1}, {0x7, @remote}, 0x8, {0x2, 0x0, @empty}, 'ip6gre0\x00'}) shmat(0x0, &(0x7f0000107000/0x4000)=nil, 0x4000) 09:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000300190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5452, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1703.441771][T31386] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffeffffffff86ddb388209c00042f00fea100000000000000000000007100fffffffffffffffb000000ffff000000005a09907800000000"], 0x0) 09:50:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006f9}, 0x28) 09:50:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5460, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:11 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) [ 1703.561004][T31386] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:11 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffeffffffff86dd6001209c00042f00feff030000000000000000000079000000000000ffff000000005a09907800000000"], 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x987, 0xe705}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000180)=0x4) ioctl(r0, 0x1, &(0x7f00000001c0)="2bfe4e1b7dbffbf648bd77fd3cd6a15647c7b4e2b4abd61d509512b578105de27d0e7ac390e5223871aa8586a1d3d7fa5d057d575a7a57b4b822") 09:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c100400190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1703.769513][T31540] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1703.872376][T31540] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x01\x00'}, &(0x7f0000000140)=0x54) 09:50:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006fa}, 0x28) 09:50:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae80, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x6a07705986e0d5e5) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:50:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000500190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) pwrite64(r0, &(0x7f0000000000)="f19a3d03ca15e84c02000000000000f378fe0e9911d80a9781f3a8", 0x1b, 0x0) 09:50:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006fb}, 0x28) [ 1704.512390][T31631] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xd5, "e7390ce632e32d5ead026027273b06f2982a8cabb18e2c6addbcea04ada589c7f439364b3557c9b55d288321759cdac796758cd2e31953a58abd4433a8429977a55f60f1a6f55b7d432ef1cb2e07a27120f04a6cf4120ae7bdd91d80d9f83cd5846b28933f5c8e9962657d781c3d13038def253c45bc75222936c4440b0b50239cd2bc6d40a8916595b8c1aabb6cfdc8ea9b364778ee8d3022ff19cff536912c69a5da00eea95978a9205d9301b8c3dd5e8fb465f300099940c8d21ad0185e881e55eec3c3438f468a4910c0e59eee509757f55e3e"}, &(0x7f0000000040)=0xf9) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) 09:50:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xae9a, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1704.635527][T31631] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006fc}, 0x28) 09:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000600190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1704.887261][T31758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1704.985418][T31758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:50:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfff, 0x24a00) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @loopback, 0x1, 0x8001, 0x80, 0x0, 0xff, 0x10000, r2}) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea2, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006fd}, 0x28) [ 1705.829539][ C1] net_ratelimit: 18 callbacks suppressed [ 1705.829546][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.841154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1706.549661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.555616][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1706.629592][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.635665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1706.641634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.647706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1707.029528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1707.035377][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:16 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:50:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000700190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006fe}, 0x28) 09:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 09:50:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea3, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x10) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000180)="d67d73255e7837426f6204cc1289d801ecf5bc3adad420e1be96ea03eb502e31a099275f48024daf305c60cdb1cd0d42190c968683860660d418afcb39a46eac6b381ba897b8ff2b9323168215132e96922853f522ca759f83802608d9160eeda316dc0f46150800490559aa3903f88e68fafe5a51beb039608293a4e996c8cce209f60a3d0d048032983a6efada348f0d514067bc46566a619d948468b84f22f5c812946dbeede706840d737d1d19a4764dae9349572d4e6342", 0xba) [ 1708.267823][T31785] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x40000000000006ff}, 0x28) [ 1708.349848][T31785] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 09:50:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaead, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000900190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000700}, 0x28) [ 1708.610592][T31908] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstatfs(r0, &(0x7f0000000080)=""/140) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x7, 0x80000000000000, 0x8, 0x0, 0x0, [{r1, 0x0, 0x7}, {r0, 0x0, 0x9}, {r1, 0x0, 0xfffffffffffffffa}, {r1}, {r0, 0x0, 0xfff}, {r1, 0x0, 0x7ff}, {r1, 0x0, 0x401}, {r0, 0x0, 0x7}]}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 09:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001640)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000001700)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x100000000}}}, &(0x7f0000001600)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000001740)={0x5, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000001780)={r4, 0x22}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000013c0)=0xe8) r6 = getgid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001280)='fuse\x00', 0x20, &(0x7f0000001ac0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x5}}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@obj_user={'obj_user', 0x3d, '/dev/dlm_plock\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/dlm_plock\x00'}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dlm_plock\x00'}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, '/dev/dlm_plock\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000017c0)={0x0, 0x0, {0x34, 0x1d, 0x7, 0x1, 0x8, 0x1f, 0x4, 0x31}}) r7 = add_key(&(0x7f0000001800)='id_resolver\x00', &(0x7f0000001840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000001880)='asymmetric\x00', 0x0) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaeb7, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000701}, 0x28) [ 1708.736893][T31908] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000a00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1708.966389][T31941] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1709.095139][T31941] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:50:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0) 09:50:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x40049409, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000702}, 0x28) 09:50:17 executing program 1: r0 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x46, 0x20000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000300)=""/23, &(0x7f0000000340)=0x17) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/135, 0x87) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x1, 0x7ff, [{0xb19b, 0x0, 0x5}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x8, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) accept$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x0) 09:50:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x6}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="1649d97e328a9ecb3cda02c3d16f28aa47e500afa9ac181bbabe10a65a1b562eaf4dca", 0x23, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000480)=@keyring={'key_or_keyring:', r2}) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) r3 = semget$private(0x0, 0x4, 0x0) semop(r3, &(0x7f00000000c0)=[{0x1, 0xcc, 0x1000}], 0x1) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x9, 0x4081) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xffff, 0x80) dup(r0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x400101, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000540)) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000200)={0x266, 0x401}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x3f) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x119040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1000}}, 0x20) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 09:50:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x400000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32314d54, 0x8, 0x2, 0x3, @discrete={0x4, 0x7}}) recvmsg(r0, &(0x7f0000000700)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/157, 0x9d}], 0x8, &(0x7f0000000680)=""/121, 0x79}, 0x10000) socket$inet_smc(0x2b, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000740)=""/239, &(0x7f0000000840)=0xef) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa2aaaaaaaffffffffffff8600fe80000000000000000000000071000000000000ffff000000005a099078000000000000000000000000"], 0x0) [ 1709.432379][T32040] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000703}, 0x28) [ 1709.542826][T32040] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c210f00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000704}, 0x28) [ 1709.826976][T32165] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1709.927996][T32165] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:50:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x20000) open(0x0, 0x0, 0x98) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000400)={0x100000, "232be8811df87a14b07c2a0e1a1a0b8ac732ad41cdfe3adb15c254e6c97ed747", 0x3a0, 0x0, 0x940}) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x102) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9208, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00\x04\x00\x00\x00\x00\x00Jk\x00'}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0x55f, 0x0, 0x8}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x0, 0x5, 0x3, 0xc18}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000840)={r5, 0xfe, "e9d4a3fd41a13489fabaf44546ac860f657efb164de3c07f1204c91b60b66fc868961f2f31cdb7de0bcef44a50ca45f7a402fc97cad072d0e21e55db0846227a80460ea49293033fee9f886ea498e317b938299f8db7b5c0a5532c3b5d580b771e912f1fd2e4423418f271f6affa4e89344490337b5d3d4440d63ddd6a5397ef28bd00cbc16375a461667f8865a8f9abc7bd957acb388c08302e2d15b8791bdcc1ba80a6f3af4c295f0349e27b3646bc559391920fb2512dcda182d552b0f1deeb73f98e6b37bd19a59ca3c0b72d713c46e1b5e4df8789a61d58f47ce84e333cf871a2cc5529d417a9da22203612344d4ac10dd8caf492971c22233a35fc"}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x6}) time(&(0x7f0000000780)) syz_mount_image$gfs2(&(0x7f00000007c0)='gfs2\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000705}, 0x28) 09:50:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c041000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x82dc, 0x40043) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000180)=""/170, &(0x7f0000000100)=0xaa) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x1, 0x2}) [ 1710.786994][T32178] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae99, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1711.509787][ C0] net_ratelimit: 22 callbacks suppressed [ 1711.509796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.521684][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000706}, 0x28) [ 1712.554162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.560076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1712.562092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.571695][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c201000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x8, 0xff}) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe0000000000000000000071040000000000000000f7fffffeff000000005a099078000000000000891e821982291ad4e3b45d0b"], 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiesmplate\x00\xbc9\xc4!h\r\x14S\x8b%\x86q\xd8\x12t\xa2\x8f\xeb\x964\xaa8\x85\x8d2\vk_Q:\nw*\xd1\xbf\x14\x03\x00\x8aQ\xe5\xe8\xdc\xf0\xbb\"\x1b\x02S\xb1\x8a\xba\xda\xfb\xbcT\xb2\x01*\xbe\xc7\x99\xe9\x01\xc9\xca\xb4\xe5\xf7\xb7\xe1E]L\b\x0f|\r\x15R\x88S\x17\xa9', 0x2, 0x0) [ 1712.799568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.805664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1712.843904][T32308] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1712.869625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.875649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1712.957215][T32308] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1716.709620][ C1] net_ratelimit: 16 callbacks suppressed [ 1716.709629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.721096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.726881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.732634][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000707}, 0x28) 09:50:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:50:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c001f00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1716.949557][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.955617][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae86, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1717.029595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.035647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1717.041648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.047544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1717.098177][T32327] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xcdf0, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x7, 'syz0\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)={0xfffffffffffff800, 0x2, 0x4, 0x1000000, {0x0, 0x7530}, {0x3, 0x9, 0x9, 0x4, 0x4, 0x7fff, "65a331a8"}, 0x1, 0x4, @planes=&(0x7f0000000200)={0x80000000, 0x0, @mem_offset=0xfff00000000000, 0x399d}, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") io_setup(0x82f1, &(0x7f00000000c0)=0x0) r4 = dup3(r2, r2, 0x80000) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1ff, r0, &(0x7f0000000100)="3f955e74af0145a0e650bebd972939e525ae47dc9d25c6f79dda25c37984863add528eb38faf4b4d0f44fc9bd6b0b5e0bd0841cb8c8684ab", 0x38, 0x5, 0x0, 0x1, r4}, &(0x7f00000001c0)) syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff080086dd6001209c00042f00fe80000000000000000000000071000000000000000000000b00ffff000000005a09907800000000777a24bbab3dfed7742514bc475609616c1d510531cc2e78dc62eb8d85fdd0c64e2e7dede9beb2de649f50cfb6b8c46fa4b78e1bc2839ed9d2bb80ed063ba82a491c5d60945c6514ad7880c7b242025993203a2eff69fee7bad162af6325f168e3956aecdca30c237e0aead12e555ead436987cdc5ec62d9fa70ecaf6194d7408c2a6e528109ddbbf0aa797bb10e677d74c36acd003cac"], 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 09:50:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000708}, 0x28) 09:50:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x8}, 0x2c) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x12) ioctl$RTC_UIE_OFF(r3, 0x7004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="00000100000000c2140700bf07eca236ebb9a0c42d330018140000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000000c0)=""/95) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000200)={0x0, 0x5, 0x2, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5}) [ 1717.214432][T32327] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae8a, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000709}, 0x28) 09:50:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x40) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4, &(0x7f00000000c0), 0x6, r2, 0x4}) r3 = dup2(r0, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000000)) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0xa0, 0x4) [ 1717.440377][T32405] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae90, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1717.554938][T32405] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:50:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070a}, 0x28) 09:50:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c102000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") prctl$PR_SET_MM(0x23, 0x20000000000007, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_emit_ethernet(0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="4167c295780eb9bf3355c0db10b7725b9f7eed2ca1daa53a9baa1efd069cf7e400c86eab1813257b36f882ea8e39bc62c91c10ad1d39de726b7b837b2af7a704491c749d1c70ef9bdcbaf08e247c40ac03b3b65a45fe7d3a4363524054e4ff144f99d05589adcf606f0cb170ca0d4d093ca3ec350bf769842b9ad1f5a4cb8cc51498982e65f4c6d9b453f0b17811f836126c932ee7849e1b450a0c5bdc831d877518c74e8e01d990fa59d23ae889d2e6c7feac82bd17f443503dc0b9bd9a67", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYPTR64, @ANYRESDEC=r0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0], @ANYRES16=r0], 0x0) 09:50:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:26 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x9, 0x14, [0x4, 0x46b, 0x3f, 0x3, 0x7]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote={[], 0x3}, 0x4004, 'caif0\x00'}) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070b}, 0x28) [ 1718.203619][T32477] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae9c, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1718.312537][T32477] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8e85) shutdown(r1, 0x1) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2) 09:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0f2100190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1718.539295][T32503] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1718.645288][T32503] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:50:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070c}, 0x28) 09:50:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)=',$\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1, 0xea, 0x7}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha1-ssse3\x00'}}, &(0x7f0000000240)="700d77414ee381a1a06a60ee4eb04603d73e4a0972305a4abd59fe2c55c37567e0ec449826fcbf27f44b9fc3fb737b590720b141f597aebb49b874b318a728cc518cb73a1460d760aa939def7218dee6e13ceb46ce8e0f5957e40ff4166fc18a28629470184ff2814d8cbf3c3d7d9bbd3239a2c2ad", &(0x7f00000002c0)=""/78) 09:50:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4020940d, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x1, 0x101, 0x0) 09:50:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002300190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:27 executing program 4: utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x2, @local, 0x6}}}, 0x84) [ 1719.301192][T32615] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070d}, 0x28) 09:50:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff06ffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x3, 0x3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_set$uid(0x3, r1, 0x1000) [ 1719.382331][T32615] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:27 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x19c02fbc89a69594, 0x70, 0x7ff, 0x799d66f9, 0xffffffffffffff29, 0x6, 0x0, 0xfffffffffffffff8, 0x10040, 0x0, 0x6, 0xb63, 0x2e, 0xec, 0x2, 0x4, 0x8, 0x8, 0x2, 0x12f, 0x4, 0x4, 0x9d3, 0xffff, 0x8, 0x5, 0x0, 0x0, 0x6, 0x6, 0xfffffffffffffffd, 0xc1, 0x5, 0x9, 0x9, 0x2b6, 0x6, 0x3, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x10, 0x5, 0x1, 0x7, 0x3815, 0x5, 0x100000001}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) write(r3, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 09:50:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070e}, 0x28) 09:50:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040ae9e, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:50:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x50601, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x3b) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002d00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000070f}, 0x28) 09:50:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040aea0, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x3ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x1, 0x0, 0x0, '['}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) getsockname$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) 09:50:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000710}, 0x28) 09:50:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x1c002) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x9) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000180)=""/224, &(0x7f0000000040)=0xe0) 09:50:28 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x1, 0x3, 0x2, 0x6, 0x2, 0x6}) [ 1720.168016][ T392] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2480, 0x0) r3 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000180)) setreuid(r3, r4) 09:50:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1720.291974][ T392] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000711}, 0x28) 09:50:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:50:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c003f00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x0) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r2}}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e20, @remote}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x900, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) 09:50:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffdf7ffefffffff0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$radio(0xfffffffffffffffd, 0x2, 0x2) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) 09:50:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000712}, 0x28) 09:50:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1720.964876][ T519] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1721.032180][ T519] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000713}, 0x28) 09:50:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4080aea2, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c004000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:29 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000280)=0xfffffffffffffffd) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x1000, 0xffffffffffffffff) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x8, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7, 0xd6c, 0x0, 0x4, 0x0, 0x6, 0x3, 0x4, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, 0x20, 0x3, 0x800, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x4004, 0x3ff, 0x8, 0xb, 0x0, 0x1f, 0x4}, 0x0, 0x0, r0, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00001a9c5489ad34"], 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000)=0x3, 0x808100000000) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 09:50:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') fcntl$getown(r0, 0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x6}, 'port1\x00', 0x80, 0x52, 0x4, 0x5, 0x3, 0x7ff, 0x0, 0x0, 0x2}) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffe23cfc6bef3034b96800000007100f0ffff0200000000000000ffff000000005a09907800000000"], 0x0) [ 1721.247619][ T646] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000714}, 0x28) [ 1721.348536][ T646] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1721.909586][ C0] net_ratelimit: 24 callbacks suppressed [ 1721.909594][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.915505][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:50:29 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], 0x0) 09:50:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4080aebf, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c004800190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000715}, 0x28) 09:50:29 executing program 1: lookup_dcookie(0x5, &(0x7f0000000100)=""/54, 0x36) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x400001) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x20000000000) 09:50:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(r0, 0x4, 0x4400) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0x8, 0x3}, @exit], &(0x7f0000000040)='GPL\x00', 0xffffffffffffff67, 0x1c, &(0x7f00000000c0)=""/28, 0x0, 0x0, [], 0x0, 0xf}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x50, &(0x7f0000000200)}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1722.120774][ T771] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000716}, 0x28) 09:50:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4090ae82, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x6, &(0x7f0000002e00)=ANY=[@ANYPTR=&(0x7f0000002cc0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="4d824c3f4b66d1141a8c5e48bc1cdfb26edce6e3aeeb18110d23220adce4fead95bb25f691acb8b938ec7c83013159955ec95fdaf0cb10df1526ba76ee6f40dd9f0ce81f1c5a577aab3a9a7f03a47265f47baa346ae8d5013f4ad8c94c867522227581948f53ac4924bbbc9bb202dc340711ef4869c542a7d408dfb719bce9b5eab71e63", @ANYBLOB="35feab443c131ef45708011aad28b110d630d6772d0076e2b20b3191651c3ab30873d6b20080bf08df412565e0a9285ef1b8a4b602e82a015c13bccaf76c421148f44dde936a38d354e3c0f83ff975439977f4d8", @ANYRESDEC=r0], @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYPTR=&(0x7f0000001980)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0]], 0x0) 09:50:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r1, 0x401) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@nfc={0x27, 0x0, 0x0, 0x6}, {&(0x7f0000000180)=""/5, 0x5}, &(0x7f00000001c0), 0x10}, 0xa0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) r2 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x400) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x7000, 0xd7, &(0x7f0000000500)=""/215}, {0xf000, 0xd4, &(0x7f0000000600)=""/212}]}) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000440)=0x9) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000480)=0x80, 0x4) r3 = socket(0x11, 0x80000, 0x4) recvfrom(r0, &(0x7f00000002c0)=""/14, 0xe, 0x100, &(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x1a00}, 0x80) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000004c0)) sendto$inet(r3, &(0x7f0000000080)="8a79a747a30ae7b73c38e284e3cb79a4e367e98a3d79715845be4838702a168c69daf76e78664a16988566a9743c5615ac0553daa9f9a91a6846cdb199e4e5cb8d0e1f25001cd38ac43e245bf02d64f1a7280304c9ad0a4990ee3eea5524498b997866de9062ca7c8896754da0e090bff700d8c48d38951427e618de117f3ab4c43953ce05a25070608fac77672c98720cedeff58d1f7419d05234288fcc9a40636ada00fdfff07999b9490d361db7174687ddfafe1d98f4f66abc297d74ae24ecbc00ff51165c1315", 0xc9, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) [ 1722.282381][ T771] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1f9b, 0x101001) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x1a8, 0x4) [ 1722.949617][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.955508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.961346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.967091][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:50:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000010000000000000ffff000000005a099078000000003fa6201e50a9330d175850a97b1f91b270c7f0a16f0a08de65931a45acc6af2d99fdd1abc1340da6eff1db53568d9f88db827cd06383eed7266e6020b980f44659f5829d6ac47c1c13e16ad68434d2c23e45f21237ed58a0c7"], 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 09:50:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000717}, 0x28) 09:50:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c004c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4138ae84, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:30 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_hsr\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x8000000939, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x48000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xc0000007, 0x5, 0x2, 0x2, 0x4, 0x1d, 0x5}, {0xc0000000, 0x5, 0x6, 0x9, 0x2, 0x100000001, 0xa09}]}) setsockopt$inet_int(r0, 0x0, 0x40000000000012, &(0x7f0000000180)=0xfffffffffffffffd, 0xf8) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xfcdf}], 0x1) [ 1723.101659][ T1005] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000718}, 0x28) 09:50:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x1ff, 0x0, 0x1b, "0ff2e95c3586aad56ddd908f7c160700e7a28cf18420f6962304778b8dd601c058b9d8ded3192991d059ff63202f23c40f84f9bca923a2e0739c41e7", 0x2f, "4fb4b78dc0b68815af3bdfe5a32fb15ca471d695b1b8d16b8be5c19df7b72727a891b9934538231b8f79ae2271dd7738c738922446b5aff39b282ea6", 0x8}) syz_emit_ethernet(0x2, &(0x7f0000001480)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) [ 1723.189588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.195622][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20000, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cc1ca36300f04c372628f47ea"], 0x1) [ 1723.247891][ T1005] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1723.279574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.285663][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4188aea7, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440800, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) 09:50:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000719}, 0x28) 09:50:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:50:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000940)) close(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x150) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x3010, 0x3) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2104000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x244, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7bb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xee5}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x698d}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @loopback, 0xeb}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4800000000}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x35e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) close(r1) 09:50:31 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x70, 0x2e, 0x100, 0x3, 0x5, 0x0, 0x3, 0x8208, 0x2, 0x4, 0x2, 0x3, 0x960c, 0x0, 0x4, 0x5, 0x0, 0x8, 0x200, 0x6, 0x2, 0xfb, 0x7, 0xd1, 0x2, 0x5, 0x8, 0x80, 0x1, 0x5, 0x20, 0x3, 0x2, 0x0, 0x6, 0x4, 0x7, 0x0, 0x100000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x40, 0x6, 0x9, 0x2, 0x0, 0x1, 0xdf}, 0xffffffffffffff9c, 0x10, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYPTR], @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r1]], 0x0) 09:50:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071a}, 0x28) 09:50:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x41a0ae8d, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1724.080569][ T1265] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000004c0)={r1, 0x8, &(0x7f00000003c0)=[0x8, 0x3ff, 0x1, 0xffffffff, 0x7ff, 0x3, 0xfffffffffffffffc, 0x20], &(0x7f0000000400)=[0x9, 0x8c8, 0xf647], 0x10, 0x1, 0x42, &(0x7f0000000440)=[0x800], &(0x7f0000000480)=[0x1, 0x2f6db40e, 0x6, 0x80000000]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000180)={0x3, 0x2, 0x80000001, 'queue0\x00', 0x6}) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071801000000000000000000000ffff000000005a09907800000000851ccd1382fd71f58092dbed4897531566ebedad846cee11d8d60eade19f6749b6040e022c3f5470f48919e4c3"], 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000540)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x0, 0x1, &(0x7f0000000100)='\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0x7, &(0x7f00000000c0)='queue0\x00', r5}, 0x30) 09:50:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071b}, 0x28) [ 1724.199899][ T1265] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4400ae8f, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000000180)=0x100000001, 0x404, 0x0) 09:50:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd60010000000000000000000080790000b5200000ff00000000000009243c592a5fc30f"], 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xb0, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x696c9f8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x96fc}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xda6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}]}, 0xb0}}, 0xc1) 09:50:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006800190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1724.406496][ T1394] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1724.522209][ T1394] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071c}, 0x28) 09:50:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x42) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:32 executing program 1: syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x1ff, 0x101) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x88000) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x14002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) r3 = accept4$ax25(r1, &(0x7f0000000180)={{0x3, @null}, [@default, @rose, @null, @netrom, @remote, @rose, @default, @rose]}, &(0x7f0000000200)=0x48, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x93, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getdents(r2, 0xfffffffffffffffd, 0xffffffffffffffef) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000002c0), 0x4) 09:50:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1725.101440][ T1508] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071d}, 0x28) 09:50:33 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getpeername$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x2) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000001c0)="5c1c282b65d8c7e2db090235288a01a7bac06c4db8cf3199eae88e25b7407739fb0748e0e34382daca5c64d32f57a30eb7b67cfabc5c4aa501f691cbf9aba45e6969fcae01a44e18fdfbd53639454a0f4d196dddf04bf033e03d31e22358418b2a7c33b4b033481cc8fc8d49a3add8ceaea26d") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x1a}, 0x8001}}, 0xba, 0x1}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0x3d4, @ipv4={[], [], @empty}, 0x4}}, 0x7ff, 0x7}, 0xfffffed0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r1, 0x0, 0x9, 0x3, 0x40, 0x7}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="f31d7732000000215553ca13cefdcc0223f2d1115716824ad9b71d9828af3b8777a1b773b69c7aa825cfa373f364e9b351e7d063eff2d5a864dcb0170b80d81cf7836ee0bf1bc3a3e57ac3a8a1095f00ae777100000000000000a1efbae8b964137c5f91e70e145709c9c90d302bc23023f290f0f84154e585aa4049bf85d7d2a3cbc2677ce4dd07490121af56f7d8f2cd6d58"], &(0x7f0000000180)=0x3a) 09:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8004ae98, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1725.211070][ T1508] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c007400190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071e}, 0x28) [ 1725.422481][ T1750] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1725.538909][ T1750] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:50:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c007a00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r0, 0xab09) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x4c3) 09:50:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffe6ffffffff86dd60e01c6b291ef2572c8000000000000000000000007100000000000000000000000026426d7a0ec1d4a707c72bbac342052eff26604f55700cee8d7800000000b5172f31b13c147278bbd847a12d106d3ed794813c5d96a51f1a2cdb3099"], 0x0) 09:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8040ae9f, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000071f}, 0x28) [ 1726.035096][ T1758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x2, 0x80000000000) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0x5, 0x101, 0x1, 0xfe, "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"}, 0x10a) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8040, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x1, 0x1}) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f00000000c0)=""/165, &(0x7f0000000000)=0xa5) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 09:50:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000720}, 0x28) 09:50:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8080aea1, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1726.160378][ T1758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:34 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0fff00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8090ae81, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1726.387154][ T1938] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1726.409253][ T1938] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1727.109632][ C1] net_ratelimit: 16 callbacks suppressed [ 1727.109639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.121203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.126984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.132768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.349613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.355696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.429582][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.435516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.441508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.447524][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:50:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000721}, 0x28) 09:50:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6401209c40042f00fe8000bb00000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0000002d0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8138ae83, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac91fa01cffffffffffff86dd6001768d9c11017c522f00fe80002081000000000000000071000000000000000000000000ffffa5e198b52f9beb31c1e0db9263000000005a099078ebffffff"], 0x0) [ 1729.460309][ T2006] EXT4-fs (loop3): bad geometry: first data block 45 is beyond end of filesystem (1) 09:50:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000722}, 0x28) 09:50:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8188aea6, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x111202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x1b}}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x400000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000000c0)=0x1000000101) [ 1729.610270][ T2006] EXT4-fs (loop3): bad geometry: first data block 45 is beyond end of filesystem (1) 09:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000000630000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000723}, 0x28) [ 1729.807452][ T2132] EXT4-fs (loop3): bad geometry: first data block 99 is beyond end of filesystem (1) [ 1729.893781][ T2132] EXT4-fs (loop3): bad geometry: first data block 99 is beyond end of filesystem (1) 09:50:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) [ 1732.309619][ C0] net_ratelimit: 24 callbacks suppressed [ 1732.309626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.321391][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:40 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") getsockname$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffffa3) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @empty}, @in=@local, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x5e, r1, r2}, {0x2263b69c, 0x0, 0x3ff, 0x4, 0x10c8, 0x4, 0x7, 0x400}, {0x9, 0x1, 0x4, 0x3f}, 0x1f, 0x0, 0x3, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x4d2, 0x3f}, 0xa, @in6=@local, 0x3507, 0x3, 0x0, 0x1, 0x7, 0x1, 0x3}}, 0xe8) syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a0990780000000052ca3bcae07b978993b81f60459eade18d6a4f2b88f84f8f75000000000000d8904b90bb193017ed5e3a2fdf5fc5952d68a3613dc80acc8bd93519f1e5a04742f0c0062e0d33907308bfa7960daade5c3457a3100cd0c7e2a4cb8b4a2dc6b581f5c89493fd39fdc471743b8cf8f6c466bdc02fb6732d8c855d209338d25c152f859d972da059c2bcc76872c4519b5e36fcd9b1599305080088b093be9f84a2d76c961c8a38fb43"], 0x0) 09:50:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x81a0ae8c, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c0000006a0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000724}, 0x28) 09:50:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) [ 1732.746397][ T2153] EXT4-fs (loop3): bad geometry: first data block 106 is beyond end of filesystem (1) 09:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff4f5845a84a970000961efde3"], 0x0) 09:50:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000725}, 0x28) [ 1732.843303][ T2153] EXT4-fs (loop3): bad geometry: first data block 106 is beyond end of filesystem (1) 09:50:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8400ae8e, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c05f5e0ff0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0xfffffffffffffbff) 09:50:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000726}, 0x28) [ 1733.097112][ T2276] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (1) [ 1733.215508][ T2276] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (1) [ 1733.349606][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.355457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.361299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.367060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.589590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.596502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.669613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.675632][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:44 executing program 1: r0 = syz_open_dev$cec(0x0, 0x2, 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/75) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) write$FUSE_STATFS(r0, 0x0, 0xfffffffffffffd5b) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000007c0)) eventfd(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$bt_bnep(0x1f, 0x3, 0x4) rseq(&(0x7f0000000080), 0x20, 0x1, 0x0) close(r1) 09:50:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff001000005a09907800000000"], 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getpeername$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0xe792fa6a352c7974) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) 09:50:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x9000aea4, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000727}, 0x28) 09:50:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000200190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1736.795385][ T2293] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1736.894675][ T2293] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x90400, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd00000000000000000000ffff00aad3f5fd05cb7334cff4a34bb29d34ac0000005a09907800000000"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 09:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0045878, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000728}, 0x28) 09:50:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000300190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:45 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_timedsend(r0, &(0x7f0000000000)="2461da3f7eae1369d1974fde7706c767c613721c6d0df84948a4ed59cb66e6f13996048a13fffc932520dee72d6500b50d3ea6043cb6abf6a29c1d7e82fd28f736db1c74a737b44ca5379b15586f1148dc931d0ea9305ea79a11", 0x5a, 0x7ff, &(0x7f0000000080)={0x0, 0x989680}) fcntl$setlease(r0, 0x400, 0x0) r1 = request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2, 0x0) [ 1737.302671][ T2410] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x6, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYPTR64, @ANYRESOCT=r0], 0x0) 09:50:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000729}, 0x28) 09:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0045878, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1737.418295][ T2410] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x20080000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd0774647d579258d, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x25, 0x3, 0x0, {0x1, 0x4, 0x0, 'bpf\x00'}}, 0x25) 09:50:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000400190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1737.509669][ C1] net_ratelimit: 16 callbacks suppressed [ 1737.509677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.521168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.521260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.521300][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80bd000000000000000000000071000000000000000000000000ffff000000005a099078000000"], 0x0) [ 1737.713298][ T2549] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1737.749614][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.755799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.783286][ T2549] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1737.829615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.835716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.841784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.847960][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:50:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072a}, 0x28) 09:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae91, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:46 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x200000, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000780)) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000007c0)={0x0, 0x7}, 0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)={0x1}) setxattr$security_smack_entry(0x0, &(0x7f0000000900)='security.SMACK64\x00', &(0x7f0000000940)='team0\x00', 0x6, 0x1) ioprio_set$pid(0x1, 0x0, 0xc3) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm_plock\x00', 0x2c4001, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xf, &(0x7f0000000680)="c31979e8c817261c10488c234f6ba821481e466ad13f9c178a93e71b87e085cb3a7349d61b1e01863878dd2057a0be2f2b074bffebdaa75d85ba6f7344c624ece0035ed4d3405c", 0x47) fallocate(r0, 0x20000000200004, 0x1, 0xffffffdffffffc00) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0xa1a80ebfc9a59709) write(r4, &(0x7f0000000980)="5692f87ec8c387eae35fe67769d4c3759cc831345f0a50b5a46f3d48bfb161ba02ab00e1c067c1b14277f526f33a1429d1cd61252d82709cc0cc0fb8dcaf9c5c3101aba52a1949a176561ce9d141ecb8ce14e798fe7b7e88b820a1e0d64c5873a3e7f03da85b4c6c8aea1c6d6d442f80056a31f0e58b1debb19bbeea5e45c8a13365ea62bed6de6364b8f3344bb966c812e1e6796cb8a14dcc034d94b176d309f804994499d61754bc4a98a6c1cd9a939e86c664", 0xb4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x200, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00'}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @multicast1}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000300)={0x0, 0x6, 0x5, [], &(0x7f0000000280)=0x3ff}) signalfd4(r4, 0x0, 0x0, 0x80804) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x4000000000000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 09:50:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000500190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1738.415210][ T2665] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaac35516b6250e6b4a4336756f0faaaaffffffff070000006001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008aec1, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072b}, 0x28) [ 1738.576756][ T2665] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000600190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800000000000, 0x400) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x20, 0x2, 0x1, 0x6c, 0xc, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 09:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc0189436, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1738.916786][ T2692] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1739.022133][ T2692] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072c}, 0x28) 09:50:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x80000001, 'syz0\x00'}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="3fcc858af238b4d0eb2375a4bd66189d378baefb82072b450203ee88b5c8d7a9e1cd08eec4329d1011969d8a19653f38", @ANYRESHEX=r0, @ANYPTR, @ANYRESDEC=r1, @ANYRES64=r0], 0x0) 09:50:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000700190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80001000, 0x200000) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) r5 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) syz_genetlink_get_family_id$team(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00'}) getpeername(r2, &(0x7f0000000680)=@xdp, &(0x7f0000000700)=0x80) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1}}}, &(0x7f0000000900)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x16, &(0x7f0000000b80)={@local}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c00)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004780)={'veth1_to_team\x00'}) accept(r2, &(0x7f00000047c0)=@xdp, &(0x7f0000004840)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004880)={{{@in6=@remote, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000004980)=0xe8) accept$packet(r0, &(0x7f0000004d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005000)={{{@in6, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000005100)=0xe8) getpeername$packet(r2, &(0x7f0000005140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005180)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000051c0)={{{@in=@multicast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f00000052c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000a00)={@mcast1}, &(0x7f0000005380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005480)={{{@in6, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000005580)=0xe8) getsockname$packet(r2, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005600)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005640)={'vcan0\x00'}) getsockname$packet(r2, &(0x7f00000056c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005700)=0x14) accept4$packet(r0, &(0x7f0000005780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000057c0)=0x14, 0x80000) clock_gettime(0x0, &(0x7f000000c480)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000c200)=[{{&(0x7f0000005800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005880)=""/65, 0x41}], 0x1, &(0x7f0000005940)=""/252, 0xfc, 0x10001}, 0x10001}, {{&(0x7f0000005a40)=@can, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005ac0)=""/242, 0xf2}, {&(0x7f0000005bc0)=""/202, 0xca}, {&(0x7f0000005cc0)=""/132, 0x84}], 0x3, &(0x7f0000005dc0)=""/118, 0x76}, 0x5}, {{&(0x7f0000005e40)=@rc, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005ec0)=""/36, 0x24}, {&(0x7f0000005f00)=""/168, 0xa8}, {&(0x7f0000005fc0)=""/214, 0xd6}], 0x3, &(0x7f0000006100)=""/4096, 0x1000, 0xed13}, 0x794}, {{&(0x7f0000007100)=@l2, 0x80, &(0x7f0000007340)=[{&(0x7f0000007180)=""/159, 0x9f}, {&(0x7f0000007240)=""/249, 0xf9}], 0x2, &(0x7f0000007380)=""/107, 0x6b, 0x5}, 0x7fff}, {{&(0x7f0000007400)=@l2, 0x80, &(0x7f0000008540)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/131, 0x83}], 0x2, &(0x7f0000008580)=""/90, 0x5a, 0x7fff}, 0x3}, {{0x0, 0x0, &(0x7f0000008940)=[{&(0x7f0000008600)=""/73, 0x49}, {&(0x7f0000008680)=""/223, 0xdf}, {&(0x7f0000008780)=""/240, 0xf0}, {&(0x7f0000008880)=""/191, 0xbf}], 0x4, &(0x7f0000008980)=""/87, 0x57, 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000009a80)=[{&(0x7f0000008a00)=""/114, 0x72}, {&(0x7f0000008a80)=""/4096, 0x1000}], 0x2, &(0x7f0000009ac0)=""/47, 0x2f, 0x1f}, 0x2}, {{&(0x7f0000009b00)=@l2, 0x80, &(0x7f0000009c40)=[{&(0x7f0000009b80)=""/133, 0x85}], 0x1, &(0x7f0000009c80)=""/103, 0x67}, 0x7fff}, {{&(0x7f0000009d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f000000aec0)=[{&(0x7f0000009d80)=""/4096, 0x1000}, {&(0x7f000000ad80)=""/182, 0xb6}, {&(0x7f000000ae40)=""/94, 0x5e}], 0x3, &(0x7f000000af00)=""/127, 0x7f, 0x10000}, 0x100}, {{&(0x7f000000af80)=@nfc, 0x80, &(0x7f000000c140)=[{&(0x7f000000b000)=""/248, 0xf8}, {&(0x7f000000b100)=""/4096, 0x1000}, {&(0x7f000000c100)=""/39, 0x27}], 0x3, &(0x7f000000c180)=""/88, 0x58, 0x7ff}, 0x1}], 0xa, 0x100, &(0x7f000000c4c0)={r7, r8+30000000}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000c500)={0x0, @empty, @multicast1}, &(0x7f000000c540)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f000000cf80)={@remote}, &(0x7f000000cfc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000d000)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f000000d100)=0xe8) accept$packet(r3, &(0x7f000000d6c0), &(0x7f000000d700)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000df40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000df00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000009c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) recvfrom$inet6(r2, &(0x7f0000000380)=""/216, 0xd8, 0x40000043, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r3, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff6, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x10001}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x20004e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x4, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) 09:50:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc018ae85, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072d}, 0x28) [ 1739.674593][ T2816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xfff, 0x44b5, 0x7}, &(0x7f0000000100)=0x10) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000012c0)=0x10000000000, 0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x3}}}, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf32(r0, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x400, 0x1000, 0xff, 0x4, 0xffff, 0x3, 0x3e, 0x2, 0x189, 0x38, 0x18e, 0x5, 0x3, 0x20, 0x2, 0x3, 0x4, 0x6}, [{0x6474e553, 0x2410, 0x9, 0x4, 0x8001, 0xf65, 0xffffffffffffcff5, 0x5}, {0x7, 0x0, 0x9, 0x8, 0x2, 0x9, 0x9, 0x100000000}], "f4c807a2aa836a14c194ef3034f4778fdf992c0e736594b65c6ec62cafaadf59540add60d57f0f2ae9b0d510078ec0b772f57b8877154bfde7fd8a27c645e58d1695505a9c5206575136236b647241bd53c0f4b5ac00f9ac06996a2e119dac9da9", [[], [], [], [], [], [], [], [], [], []]}, 0xad9) ioctl(r2, 0x1000008912, &(0x7f0000001e00)="0af51f023c123f3188b07027042ae8160eabe1ba08547c4f01cc498205be6c16979cf45197e7369da56b3568b6a2cd88a5e1994ffe0b9f95") write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'cpuset}+procppp1lo'}, {0x20, '/dev/rfkill\x00'}, {0x20, '/dev/rfkill\x00'}, {0x20, '/dev/rfkill\x00'}, {0x20, '/dev/rfkill\x00'}, {0x20, '/dev/rfkill\x00'}, {0x20, '/dev/rfkill\x00'}], 0xa, "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"}, 0x106c) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc020660b, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1739.785471][ T2816] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0xe0001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x1000, 0xce, &(0x7f0000000180)="181bb73e85232667ddf4c3870e439c4f192ac011d087f05652e86e46508471cd860e637e89e6879b6a1d7c46af1d13baab7d0782ad0ddae9179f5e7d72d8353cbec8c58dc398b360d8ea55843c9a098ffcb779efb19288316bf001265a808d256137c41250cdfa2a6735a14e68eddf05be999e3ec4c8da10f03e759c4f7c4cbaae58c7f492bd3d75ce82d7b7222f82b49f0197f0c330da5ba446dc1dfbf6e8edb858d5c571f2b39740c5fe3147daccf0cbb086e8fe7a7c426fb8f5578cd7c5e2e6d874d0054c5324e0078c97dd198f948b754c78531438fa375bcccca7bf829921c75c7b475ee33472ffec75f099eddb7e0807c6f037f0a36741f0928f6621e2aaadf4ce8fa175131461a50eec9e8ac353a45e5a3f2a691f04af6e9056657519b882e353bcb3f4693cb21cf0a74607aa716fd48d23682020bc582f62f36d92daf199951df9548e46ec49fac5e0eb78274c353d5df5e3a0abeb058736fc21ed9b1bdc9dfa59097f1a2e3a6560e600715e2a456ccbc8124a895f215173d7f3c4f5e4e1b06fa1a375195fd81762fd4345535c58dc310953522ca503774f4701c9aec213672ca6209ea18753f0bb775001c64d8dd7e5ef5aa289a84754bfe8b9d0477942c5d2e5e578076936fedbe5a26c163c822a7b2756827690457ace5430da834a387546245aada32848f9786a51e5de080a5c72371967e317e2e990c947900174c02f0cf0d94efe4f48fbf9e70cb522aef32ff98dfcb70cb008b33cf5233c2f2f890c15fc0db20e009efe6c9bf6fbad9c3d404754294c9ff8b4941c3e5f93582c3384774843afb9b1519c456bf2903fac50c797b0f04a3447bae1316de76f90420374c2811b4a7e9fae8d967a997106c5dbed6d81495fd2029c81b5e458cef76d8dc3f6b250aeb5a6dc670090ebae7073eb645e7d7b8d8cb9be558a3b3280041b21e6a0cabcb42a16fb88b3e95091c5663b0218be2f510a91897a4b3c047662fe129f27b2ea850abe4a96bcacc7bf8ee01781899ac0f66845ded24d58315d1a6e0477bc3865cb51f968fd9dfed6e57a84e2293976ffb552e90565f56e523e9d36ded0cd64eab1a7a91614316b95375bb1faa92e866c1bbdb745a088d0adef9bfb23c33546e02097143da0905685b8c8a57b0160293507e969cd6aa52c1e901c74f9b888a5385ebe9fe52a85b62c3a126034f975af39e717fba1e32cab8cd43aeca11f573925045e95edc8ced0f8aac234a15eb4ecea3b4e2d0d3fe4fcefb22989a82faa2176b29c841f8d29fcec023f67411be75ed2716b0ed63e5b6e22c59f0909095eb20bc279d5b4843675b35acc39597fdb836b679f309e3285d5d6ecaca103365b213e498045f6e9614bad62a0a86add673afd74e42b10bd6daf71bda3709087222d10d956415d41cf919e84b9734b3680108b91715470b7449fc785a78dec0fd05914a03da6d9c1dd4670188c2b0ec4c02807735aeffdd5fceb3bdcb09e76cc8f14ff7485f3b521852a3dc32c1e259eeb8bc957b1dd8f0bf4c1310803011ac126bad7d930326345d4f712fd9827d16cefa10c1c75a18976f3cd462dafd39040e94efd37365ff69bca3861af822e1c9bac53f032b5674929bef10c27da4b41b65bc19ef83cec2b7adbdaf79d4f66c9f084d46d16ab51183ccc8890442f72ebb9642b0d8c22bcaa1ba94dff6271efd0a1b94ffd400933b7e5f11de5439dd0ad1b00f7cee9074ebd34ad1e46ddb1888f70b8a481104c1dc6acceb919a4cf2d6c6090b8e8b21bc192114e595ee1318fd5ee049eba9c931496e77c0211a2a0db5aeb003dc5b5a86ddd23a095308cebe38f04cdffab1e32c62025fde1bcd3169eca3676aaad1132a485ba81c4aac9bcc81f00674f0b68b964c60379b68858313095e2d751571a5019da2c0acba6ab8de52a5438257029c2359758b42735af3477f79fd0da53b4c58bb5bae18804a2dfa97cbec75669bbee7cff7f6b7727fcaaa6f252e18d748846f207d98043aad5cc554da1e090c888620957d1a7fa6a1412481e5195bc322cb5917b9ef2f8c3a2a4636b60689d122487c49fd6c73621394f130e28dadf545bd6f7fc85b5e9c8a8783e2e6208ea321c17158da2319dd070665ab83a922e571e946babf0a9babc590c114954bf622954c1f1ffee80701efdeb3a9833a1106034724798cd5d2f5ddedcf95b356e6ba564e5469f62f97781dd2eef19eb260c492c6329b08170ab445c7b817c3270741f923d4261f369f3824e3a4d4f412d772861a917a69595173b41cc7d6616f362e2c96fc0d01ecbd1504d3879f4faae4cc6adcf9cf7759e253fc2db423bb7c7d84dada4c361b2a51c65b54056750bd3c6caefaea49d85aaa93b531ad044ddddaae42565d6fefb9ab14badd6e717735cb769f9bac54f2bc8b9f7033be3b40ef3a2d8a8cd3e076f6b3926727634a355ae65d449847e5f6a0e28e5a4676caebb7bca1209c31f20ba77c211a2f4baf48923a6e36f094390697c283a20d6304a3c0fff450370ada777783affebcbf7caad7fccef4b106b0ca93b7fd390edbcdb52829e506a682a2d8aea4273faaf8a155b2c3d55acb3a37b4c803f543265be60d190a81c954a2ad57e3a8a50148ae8e20cea59273a53d053af4cc8d4b3dd0f3c54dfe814bc7640ff2298a6badb1d26686753b8188b364ce471b4fc5e3c30c87dc2f95a6bf873f0c1f4565af85660a578b26275ea80512a7de37750e6227e6056dc5ade2e845374a7163b32016d84b0b21c2f35c4343f400208c7405cd992003c4f98cce12c2f521e0452fe682b7b328285e847579e3483f9e8f870db051bf2f36bab1820c3c584fdcbe23624904a5abe8f48ef5259fbcaf8a0fe2297def8415bd41aec2e467960153763e73c4d68f581dff8412bfb94ec4b996f3cdda34e3758324a91f1770fb042d3df5db922a3fce4b532d6fa276164afe374b2ebec38deec1d465f5a6cc24145acea51afbb8d1ef8f200e7c6b000f51a7f39f6e35c25d33da16f13ade82b53bed3206bc6bfed7642dd64401c87030e0d5c52f58596d5785cd7d2f81dfed1d6aedee935d98d2b49b3a3ce4286cf22247132a09ab774d8ddd8e926810727c3b31ee7d6f99e206fcda184548340d79bf90a3c2e7674cdeaebc6a67f12fe33f5105eceda178e955287fbea9c5f79b1c926c7bd2992c1446db6e94a5e36f4fb6195359e055d251b5b91fdc7327507cf686309a7741d8a3f608f389b392d15b72ff9c6925249cf6ec610b4b78c84e5e90cc88cddf05aeb77301d047581d1eaf93a9b5bb6d395ae53d8f28c07981fdb75f56e1b51fbc501218e51b75f8044e0be46811f27a58655dfa62d670fc32acf63b052aac2d5247186ebd75a07f145ea375ea86d93b938e2af54ef80bc6e5e5fbd5338fdf952f3fbb37cc9c8c57cb5aa84b13199f89fc6ef3420ead4881428a5d0a14d232f1d3e683f4b8b1b434bead8d1faf7a2acbcf0af415dbbe9c3424ebb5bf716636aafabad7b2fac22816c683fb6189b1ca3e3e85291f452521a5e979d3480da8213ca3953be5dd049f4450858eda18a1b1d1821e921e9e6694cbf48b64626df79adeeeb80a37bb26d58a560fa5a44107a45da758a0fef12ac67d0fe6154f732028dd3ae23626f03604d846eb1143b2acddedc598666aab3a3ecbcd96f1e7c33845426ae9bca45cc5d381fb9e3a0faf339fd8720554c7b4ce1004fd29ddb883e221d493d654d20020182fbf27048c4c5890ea91272da7c6db753491d407f23a942ddcf96dc30e6ac22cb4e60d56e6e950bdd560c159fb0607ffa9c77dc0be961140eab8ab328120d071be86e946712e7fa0d80cdf9f55d447d1b2b129bd9c71577dca39f4cd4149a5d58d7ef36e7afb5ea83d5756b9bf1728986c189f043c525f86e98697f270a502a25137b956f0a2eb86b48a3c67e0811731837cbd87a1113bcbbb8cf96c1fec2cf90cdc77079fa44c64fa68c0cf0711d36c2dbe63896544f4da8bb4e4375fab6b82b79ce3257655600dca5614375e96aeefdadfd1f7a3a02e8f6719d9df41d94fd0123b1d4d1b4b2d189b24ccaf65b439390ae26894b03039bae1b1260b5dcb3e81a2d648accd54fd1746719ac2c5ed5ba8e07e0db7c1150a37968948aa2f780e2392434167a1a7f5f15737ee9b52373b3bbea29d5cbdd89e607a2582da4f068c0ff3f7c35228d0889ba94006959557a1cca45b8d244b9bca9cf32f254e4cdb84c6f611649f98134a93015854ea1c49556cbb636ad8a1facaf3d77d129e764ba38063c6c0ea1745e1d9735889ea012ded93f4db84c37bc2d5dd6a9b0e3120a2455bf030f9dd372b4bf79ab6710f37de88511de892368905daf76fb53083c9c939fa32a1b9c503170f230910edf37c84dd117c31603b232e769ca15f920a145335f330505ebc105552000185abf87da86e0bd4adaf7fbb12d5fc07532f046a8c99b39f0a881cd5b7d487523a6214fc8881ab8198fb882ffd7dda5238a7b1b2fbe233efcb9f417a7de2f7fd3effb34569a6d9e12945293ae9fd386c30e482f8181acd374cdcad0be17876e28f8a4a8f0d2680fd1dc58be61af26d2f7f94e8a5c57fd18bdb600970a43ca53e2a4ccd051840b968da2956da3c31278c7f1b6354de760a52c8ca51b202b8906498d70da47e3b5d57e1977f702896dc822e8b1b1ad19f9c1aee2205e1eb73bdea4a3a64056873f80d29ee964e8e9916218f83c248dda405d011570d21e7be184ec66eefaaf261a612d1a5e617629df8b9a1136e987f272e49358850ee0ea52b26edc7729b3b94b96ffde7ffdd4c211d9cfae1cbe49a917ae84ba54f13f787d064d81236264df8b761f293ed51da82604c3661b1b0681b393874be71ed9ffb4820667ff64851dbbd03c1b332f198fd5a01d70e318c9549c904fe7660645802985d28e05a47215115afafe18ced35ac5a38088ad805bd8ec96735ba92e0d33248deca326ac6016e505f8993312e7adbd33e86c47c45134be30caa31db0ec02d885f6b1a7d9a901a24bcf025782a506332c5e7631614207e2f451b33b04008b4301c98c42062cc9e43f798027da1bc7876dd0f88873f9a3f7a1971b986a99911aa6e7679901bae4a6f793ae9f907fcdb85856164d53b5e72d57cd3cbcd3c093c1141438b148c86031c09ce090423b3ec1fc6352ee814d08794fa69cb1f1b2943bbc41dfa199a6cfbbf637a822e44feeee785a56bdbff50383b691bb7970460fd9b813a39de368d79976aa8bfd190543caca7b27094598e451c1d528dd38853a90edfbdcf7bd9fa911e66a47e21734a5409eb8c2d4ae6d0d4f02037bcb744c1ccfe949a2d87608769105262cdda806ead8471867bf556a8355e1beedb0dbf1162d9022e3a09d5fbed3d0c41c37cb4fbf899c933fe0295b55d4171899d2169a2c755b24031f2233ab16b4d1aa729db4265e3bfb17179e5d29e2a1f57a17311de61a69119dc9daf8043984432d883b2eab0ae2989e9ce7e81a8ad28439cabfbb09d402e6c6f095376abcab704533be5d2d5ce4fdc5ea5e61c122dfa2bc3eaff9761c65a00a9345098d894bee8f0099db43f753b47d042f74e72cbd0ba87a40603073dbdf49516ce51065b0d1f01df09a259b73c9498d25d6dbbb2ccf2f99dd0458f539a7f350bcfee47b509f5525b2fb96135f9b179b4167b65896a1be39228fb1ac8e1fdb24388df9836e2b4251e91c7221934f65bddff8bc0919510e4ab6a8ba6ddfaf18cc4473265391fdf21dca6bc6b74a0105fb6af2fb4f23b82a237d4b78455b2b98e3523e", &(0x7f0000001180)=""/206, 0x6}, 0x28) 09:50:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000800190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r1, r2) fsetxattr(r3, &(0x7f0000000280)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) 09:50:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072e}, 0x28) 09:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc028ae92, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000040)="0af51f023c123f3188b070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCNOTTY(r1, 0x5422) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff84dd6001209c00042f00fe80000000000000000000000071002860f5753e0000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1740.145403][ T2942] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000072f}, 0x28) [ 1740.253791][ T2942] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:50:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 09:50:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x121080, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80018}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@deltaction={0xc4, 0x31, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0xb0, 0x1, [{0x10, 0xb, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0xed}}, {0x14, 0x19, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x18, 0xd, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0xf63a}}, {0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) ioctl$KDSETMODE(r1, 0x4b3a, 0x7fff) 09:50:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000900190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc080aebe, &(0x7f0000000000)={0x6, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000730}, 0x28) [ 1740.921082][ T3070] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b000000ffff86dd6001209c00042f58f680000000000000000000000071000000000000000000000000ffff000000005a09907800000000c7a3c4407368d29abda27ef3a6f2569c3b4b5936983a5c53a54e222b77a3555ba9db2a3d88de29400be7f61678fcb44091eaf58a270376902285714df0c2284535d7827c573567d99eed62f9366af402e21b6f90e1c2d37111bed878204c200ae040377496daf217a7e73e154b0f6c4b392af5b1edea221b3d8907d1436c25293de0b838b90403b88458094f3549802ba1c1810547954cbd9369f47dc4131f0272be02e33d2c2ca7efac2cdc56745c48a414867edf8c2638175a4fcac33a2a526b"], 0x0) 09:50:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x0, 0x989680}) dup3(r0, r1, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="7cc77f644e1317be7eb7bcc31a59c9516e9a8e1f7f557d13b1967d71336efe01bec7774519ee0d5eec815f3847774ddb61f5d572d231e980bd24336264fb30bbb49ccda34ba0550e893c6fb6d9e1e6245e352f5ebee35f2660ea682d0fd8c0420273388c8228413d12dfd85d450fff925b84c868207f6e5faed79f0e09d04c18e0265143b94403e997cd18d3fff94f7bb9757ddf0af3a738b22513d4c5bb41eb59b6e20c6709e622018c07723144b4c66a") write$P9_RFLUSH(r1, &(0x7f0000002280)={0x7}, 0x7) 09:50:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000731}, 0x28) [ 1741.024062][ T3070] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000a00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x200040, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x100000001}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}]}) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209ce2032f00fe80000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1741.279079][ T3228] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1741.407355][ T3228] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:50:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000732}, 0x28) 09:50:49 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) fcntl$lock(r0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) r4 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in=@local}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) fremovexattr(r2, &(0x7f0000000340)=@known='system.sockprotoname\x00') fallocate(r5, 0x48, 0x0, 0x9) sched_setattr(r4, &(0x7f00000002c0)={0x0, 0x2}, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000300)={0x7, 0x6d, 0x1}, 0x7) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x3ff) 09:50:49 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x40) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/98) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:49 executing program 4: ioctl(0xffffffffffffffff, 0x40001000008912, &(0x7f0000000100)="0af51f028102b43f31a631e338159487b91460edd0201d8588b0") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2aa7ab871517051c44565002804007fe4c6370b3131c424d4a36ec3c9e9393d4ae0fc92519a8f743156f0e1a98269dcbcb62561248f1fc4838c251f439d47bc601d7c5b7d35c8b6b998c7b044b4dfffbda471b2ccd4e33d5ff14755e75e5fbf8273fa734c3b752170a86c77c52d3"], 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0xffff) [ 1742.001830][ T3370] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000733}, 0x28) [ 1742.138025][ T3370] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa08ffffffffff86dd6001209c00042f00fe8000008000000000000000007100000000ab00000000000000ffff000000008a0890780000000000000000"], 0x0) prctl$PR_CAPBSET_READ(0x17, 0x9) 09:50:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x4, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002300190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x20000) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x20) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0) [ 1742.488725][ T3495] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1742.601450][ T3495] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1742.710802][ C0] net_ratelimit: 24 callbacks suppressed [ 1742.710811][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.722650][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.749644][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.755494][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.761298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.767034][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.990261][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.996324][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1744.069648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.075909][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="569dd1aaaaaa4050583be605cbbc1a6ad3cc4bcaf88eeb4b9de6fd9ecf88dd9b8baaffffffffffff06006001209c00042f002e5ee1880003109a00040000007100fdffffff000000000053021131"], 0x0) 09:50:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000734}, 0x28) 09:50:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002d00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x5, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:54 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x8000000000032a8f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip_mr_cache\x00') syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) gettid() getpgrp(0x0) getpid() syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000580)={0x3ff}, 0x0, 0x0) 09:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f00000000c0)={0x78, 0x0, 0x2, {0x6, 0x4, 0x0, {0x0, 0x4, 0x10001, 0x8, 0x0, 0xfffffffffffffffc, 0x76, 0x27, 0x40, 0x3, 0x5, r2, r3, 0x0, 0xfffffffffffffffc}}}, 0x78) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff2f00fe8000000016000000000000007100000000000000b39d0000000000ffff000000005a09907800000000"], 0x0) [ 1746.240378][ T3511] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000735}, 0x28) 09:50:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0xfffffdfd, 0x600000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1746.362245][ T3511] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c004800190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80100000890e, &(0x7f0000000000)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:54 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x8000000000032a8f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/ip_mr_cache\x00') syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) gettid() getpgrp(0x0) getpid() syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) epoll_create1(0x0) umount2(0x0, 0x0) pselect6(0x40, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000580)={0x3ff}, 0x0, 0x0) [ 1746.553442][ T3635] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1746.674365][ T3635] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000736}, 0x28) 09:50:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x100000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:54 executing program 1: 09:50:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c004c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:55 executing program 1: 09:50:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x8000) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x200, 0x5, 0x7ff}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa0000aaffffffffffff86dd6001209c00042f00fe06000000000000000000000000bfff00000000dbc200e65ff43c50000000000002000000000000"], 0x0) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1000000) 09:50:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000737}, 0x28) [ 1747.200986][ T3763] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x200000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x6, 0x2}) [ 1747.291925][ T3763] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006000190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1747.540018][ T3786] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1747.605039][ T3786] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1747.919673][ C1] net_ratelimit: 16 callbacks suppressed [ 1747.919680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.931201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.937051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.937092][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:50:55 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:50:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000738}, 0x28) 09:50:55 executing program 4: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="3ee8c356c536c2326949334e45b9359b47677adbfdb0909dd9b17476348969baa3514e22c6c9ead626ccba4a0d263cc052c19c401a34d67cf93975556f8541d80159dabb6b6c778157f8fcad316d697ea85ec0cfd43448cd44d3fd62465a5a58de17ebeda30f86b45a5531e63d475745b1ddaff74323ee62c7c67447bc99") eventfd2(0x0, 0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2000, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209cb2c4e88400042fe7fd80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000140)={0x5, 0x1}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 09:50:55 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x100) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/xfrm_stat\x00') preadv(r1, &(0x7f00000017c0), 0x10000000000001f7, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="08072dbd7000fddbdf250b0000002c00090008000200040000000800010000000000080002002e0900000800010000800000080002"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x4040800) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x455, 0x7, 0x400}, 0xc) 09:50:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x300000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006800190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1748.149523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.155515][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:50:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8001, 0x30500) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x101, 0x9, 0x7e, &(0x7f00000000c0)="ceba97b0e1b578b4d1d53afd71b14ddc8eb7ad5a358ad1eadf4422509a3dd915e493fe595efded22fc7ec41df83914df8b220851af83e2eab3511f31a2deac113e2f21781495df485cf0ec8f45470f6e7e190bd63f5e39f33f43c00429139fab679568a17e8a0de73aa34f9d85dd4fccdce4bb1c29f747636c3f530be299"}) [ 1748.229562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.235474][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.241438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.247354][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.253513][ T3801] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000739}, 0x28) 09:50:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x400000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:56 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x80008007, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x105}], 0x1, 0x0) [ 1748.397194][ T3801] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x40, 0x3) ioctl$VT_RELDISP(r1, 0x5605) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @empty, 0x4e20, 0x0, 'rr\x00', 0x26, 0x900000, 0x6a}, {@multicast1, 0x4e22, 0x10001, 0xa343, 0x8, 0x2}}, 0x44) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) fallocate(r2, 0x28, 0x3f, 0x7) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000003c0)={0x0, @bt={0xdf83102, 0xffff, 0x1, 0x3, 0x800, 0x8a, 0x4, 0x2, 0x5, 0x61ca4d19, 0x51c566d8, 0x401, 0xffffffffffffff01, 0xbccb, 0x12, 0x20}}) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x7, 0x20, 0x7fffffff, {0x0, 0x7530}, {r5, r6/1000+30000}, {0x1, 0x88a2, 0x5, 0x100000001}, 0x1, @canfd={{0x3, 0x2, 0x7, 0x20}, 0xb, 0x2, 0x0, 0x0, "f5128dd794850a5a75ad18c22e79ff27ab75edf2d5313883eaef0de9ddab6104357fbe3f55cd405792d9edffc61d8c5ded06ba778701e906988afbbd50e94fa6"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$TIOCSTI(r3, 0x5412, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000380)={0x1, 0x3}) 09:50:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073a}, 0x28) [ 1748.555186][ T3961] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 1748.615304][ T3961] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 09:50:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x500000000000000, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c006c00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:56 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000017, &(0x7f0000000040), 0x4) 09:50:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073b}, 0x28) 09:50:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:50:56 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x400040) ioctl$KDADDIO(r0, 0x4b34, 0xfff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r2, 0x504, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40000000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb06a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1749.173591][ T4034] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:57 executing program 1: 09:50:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073c}, 0x28) 09:50:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f6c7c7a0aea5de821c6023c123f31888bf8") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:57 executing program 1: 09:50:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000002, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1749.312107][ T4034] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073d}, 0x28) 09:50:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c007400190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:57 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:50:57 executing program 1: 09:50:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073e}, 0x28) [ 1749.602976][ T4069] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1749.697017][ T4069] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, &(0x7f0000000140)=0x54) 09:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000004, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:58 executing program 1: 09:50:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x252a3f81392020e0) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xc0) 09:50:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000073f}, 0x28) 09:50:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c007a00190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000740}, 0x28) 09:50:58 executing program 1: 09:50:58 executing program 4: r0 = getpid() ptrace$pokeuser(0x6, r0, 0xfffffffffffff800, 0x1ff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="9e5dcd66cffd775f43b7ba96d7c95b9782bc4aad2aee1a9aac17d11ae09b7f4c4bbc1a62c980047629d3dd8bf3681094ef4f39059d8b20c85f97de7a2e0b490e067a0c634b7cffb245762bc879c1a150ae8d41b7ae8fd2afc3ee381cde626e1778d2fd8e0c7b45af1cf7ad33b8ddc40dfe062e65dec6372cfc1ae38247a33769770a696ecaac537d75b4bb799bb99c3fdddd83aeaae02fcb317e77832c2f3230b0ff46306ae764f5e9b6fd5389b95f61f7daf6f47ba33300f7a7964fba7823115e2bbf8fcb128195153345f35f653bbe01c8946a538d482aaf9600e4c4cb8a447ad5b27e50b2813e2b419ea1f9169dc773fcda83", 0xf4, 0xfffffffffffffffa) r3 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000280)='vmnet0\x00', 0xfffffffffffffffb) r4 = request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='wlan0*vboxnet0@\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r3, r4}, &(0x7f00000003c0)=""/190, 0xbe, &(0x7f00000004c0)={&(0x7f0000000480)={'hmac(sha1-generic)\x00'}}) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1750.610393][ T4084] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000008, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1750.741789][ T4084] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:58 executing program 1: 09:50:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000741}, 0x28) 09:50:59 executing program 1: 09:50:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000003190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) 09:50:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000742}, 0x28) 09:50:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000010, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:50:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x010\x00'}, &(0x7f0000000140)=0x54) 09:50:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000743}, 0x28) 09:50:59 executing program 1: [ 1751.734065][ T4126] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000011, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1751.824674][ T4126] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:50:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x15b) ioctl$TCSETAW(r0, 0x5408, &(0x7f00000005c0)) 09:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0xf, 0x0, 0x8, "74d16234bbfcd4d57564a4ce8e99a4"}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x84800, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x3, r3}) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0) 09:50:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c001004190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:50:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000744}, 0x28) 09:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xff}, &(0x7f00000000c0)=0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x0, 0x8, 0x2, 0x100000001, 0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x2, 0x54}, &(0x7f0000000140)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") 09:50:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000170a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1752.085547][ T4224] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000745}, 0x28) 09:51:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000012, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1752.220639][ T4224] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1753.109596][ C0] net_ratelimit: 24 callbacks suppressed [ 1753.109605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.121566][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.149689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.155616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.161446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.167191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.389587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.395610][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.469635][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.475638][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:51:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000140)=0x54) 09:51:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000005190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, &(0x7f0000000b00)=""/11, 0xb, 0x2, 0x0, 0x0) 09:51:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x401, 0x200002) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x401, 0x46f, 0xf6, 0x8}) 09:51:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000746}, 0x28) 09:51:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000017, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1755.319505][ T4372] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000747}, 0x28) 09:51:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000600)='./file0\x00', 0x1f, 0x3, &(0x7f0000000840)=[{&(0x7f0000000640)="46acb1ada4471b46f1d1bd357739a79cb92acfb2de8c71994d0e8ccfe1fef6fec317d0ec801ea36ad5f8144532258d2652ac61f12bc9bcc6912c0db522d537cf006497d72f94926ce3032d221effaa6c70b2fdce889a449f7789ae23af4833dfc364a8ba7fd61974e144d6faf3aea4a79bb676b7bb42", 0x76, 0x38f}, {&(0x7f00000006c0)="31337052d5496f7f7620f6b4845073c94954d7af5ac552e1c373c9ce99c6a8d4f781856b500df8af02d675ea75a01f253c92b982a4806b5b03d92915051a7acc306f49b0cb680b637677f041864564e108d83be6145f5c6f820485e2abe4158a2c15d331299dfdaf30fdc970acfe73d4213eb78016f4212f84139b8b1802588e07cc", 0x82, 0x2}, {&(0x7f0000000780)="cc1a9f0d7e5590ae64a71c57df1224e61e38f3eb378b83cfeabe565b1ab32152a8cb801a52f67570856daa6546db000939e693b26970b2316d6794f3ed5459ae6b2e66f3d880164537fdc4e81c8a67dbc6b0fea384dbc96dd8b65a6a5f8212dc2ff9ac43d299af4e5b2f682c0cd6ee1b3ad6c79754daf53bc6ddb89e2f62d36b65cd27000fce71b982ba88e5", 0x8c, 0x6}], 0x2004, &(0x7f0000000980)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0x80000001}}, {@errors_withdraw='errors=withdraw'}, {@data_writeback='data=writeback'}, {@upgrade='upgrade'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/self/net/pfkey\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ',%'}}, {@euid_eq={'euid', 0x3d, r1}}]}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400001, 0x0) fremovexattr(r0, &(0x7f0000000a40)=@known='trusted.syz\x00') ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/49) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x4a8, 0x1d380000000000}}, 0x28) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x80000000, 0x1, 0x7, 0x6, 0x80000001, 0x3, 0x3f, 0xfff, 0x2cf, 0x40, 0x215, 0x8001, 0x100000000, 0x38, 0x1, 0x80000001, 0x8, 0x4}, [{0x3, 0x8000, 0x3f, 0x7, 0x50017f67, 0x1, 0x218, 0x20}, {0x6, 0x2, 0xffffffff, 0x7, 0x7, 0x7, 0x7, 0x400}], "c94e9724", [[], [], []]}, 0x3b4) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff0287dd6601209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a099078000900003b27bfb95abcf34b71f87e72c255d978c6bc"], 0x0) 09:51:03 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x2) [ 1755.426285][ T4372] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000001b, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000c39f28a9b237b37016891e000000000000ffff000000"], 0x0) 09:51:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000006190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1755.651801][ T4506] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1755.722666][ T4506] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00'}, &(0x7f0000000140)=0x54) 09:51:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000280)=""/60) syz_emit_ethernet(0x0, &(0x7f0000000280)=ANY=[], 0x0) r2 = semget(0x3, 0x0, 0x1) semop(r2, &(0x7f0000000200)=[{0x2, 0x1000000000000, 0x1000}], 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) linkat(r3, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x400) getpeername(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x80) ioctl$KDENABIO(r3, 0x4b36) 09:51:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x2df, 0x80000000000) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 09:51:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000748}, 0x28) 09:51:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000002a, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000007190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000749}, 0x28) [ 1756.275212][ T4517] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xce, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa3f3109cb430a182db390e9a485fbe09f400d0a000000000000000000000000ffff000000005a099078000000000000000000000000000000"], 0x0) 09:51:04 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:51:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000002c, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1756.415977][ T4517] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000009190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:04 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000300)=0xe8) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000a00)={0x0, 0x3, 0x9, 0x3, 0x4, 0xfffffffffffff98d, 0x0, 0x8000, {0x0, @in6={{0xa, 0x4e22, 0x80, @local, 0xfffffffffffffe01}}, 0x1, 0x26, 0x0, 0xfffffffffffffffa, 0x504b}}, &(0x7f0000000ac0)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000b00)={r5, 0x1000, 0x1, 0x96, 0x10001}, &(0x7f0000000b40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) r7 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000900)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000940)=0xffffffff, &(0x7f0000000980)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) r12 = getgid() getgroups(0x4, &(0x7f0000000640)=[0xee00, 0xee01, 0x0, 0x0]) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r15 = getegid() fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x7}, [{0x2, 0x1, r2}, {0x2, 0x3, r3}, {0x2, 0x3, r6}], {0x4, 0x2}, [{0x8, 0x5, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x1, r11}, {0x8, 0x4, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r14}, {0x8, 0x7, r15}, {0x8, 0x7, r16}, {0x8, 0x0, r17}], {0x10, 0x7}, {0x20, 0x2}}, 0x8c, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x0, &(0x7f0000000180)=ANY=[], 0x0) [ 1756.597635][ T4676] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1756.692573][ T4676] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00'}, &(0x7f0000000140)=0x54) 09:51:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000034, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074a}, 0x28) 09:51:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0xa, 0x0, [], [{0x9, 0xcd, 0xffffffffffffffc0, 0xfffffffffffffd80, 0xffffffffffffff37, 0x7}, {0x2, 0x1ff, 0x0, 0x401, 0x81, 0xffffffffffffffc1}], [[], [], [], [], [], [], [], [], [], []]}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xf97, 0xe3, [], &(0x7f0000000040)=0xfffffffffffffffc}) 09:51:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00000a190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x8}, 0x28, 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) [ 1757.291095][ T4758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074b}, 0x28) 09:51:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000003a, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1757.414526][ T4758] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1758.309606][ C1] net_ratelimit: 16 callbacks suppressed [ 1758.309615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.321097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.326892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.332669][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.549704][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.555672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.629612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.635633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.641598][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.647463][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:51:07 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:51:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af5a4ad1f02c5243f31102b428175d2db") syz_emit_ethernet(0x9, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES64, @ANYBLOB="39917de94084094f88a046ceed1d65a02f891ccbed8506fc012b7c38f5911f31e84cfb6bacb75a0252b14c29645f0736fd059ca60740c2804a365851a11438e07087c210f574e1e0e8667c173beb5948b894a7732dab3fc86ffe01820f74cdbf58", @ANYBLOB="951da411e14ccbd159f391041c54ed0bad1a3dddbf411926005ab0b62e2d76e7d6f0992125b997649410ea237edd0deb981341a25df7efd4243dd05adbd1fd67f711f61d4a38a77c02", @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64], @ANYRES32=r0, @ANYRES16=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYPTR], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR, @ANYPTR64, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=0x0]]], 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x6, @rand_addr="1b8d49a3cebd5a8f990b8233fa149e6a", 0x80}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x758, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xfff}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @empty}], 0x94) 09:51:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00000c190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074c}, 0x28) [ 1759.930607][ T4784] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1760.028778][ T4784] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x9e\x00'}, &(0x7f0000000140)=0x54) 09:51:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x22000) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x2, 0x0, 0x800, 0x7fffffff}, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe800000000000000000000000710000000000000000000000f92ded06014100ffff000000005a09"], 0x0) 09:51:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000003b, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074d}, 0x28) 09:51:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00210f190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) [ 1761.150547][ T4899] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r1 = fcntl$getown(r0, 0x9) getpriority(0x0, r1) 09:51:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074e}, 0x28) 09:51:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000048, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:09 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88a00, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa92bdffffffffffff1b529235cb0adf3c2988ada9dfab7e860000000700040000000000100200ffff000000005a099078"], 0x0) [ 1761.316027][ T4899] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000074f}, 0x28) 09:51:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000410190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1761.569948][ T5028] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1761.676834][ T5028] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) 09:51:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000008b, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:09 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x1ff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000000000000000000071000000000000000000000000ffff000000005a09907800000000"], 0x0) 09:51:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000750}, 0x28) 09:51:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c002010190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1762.155455][ T5039] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1762.285286][ T5039] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1763.509638][ C0] net_ratelimit: 24 callbacks suppressed [ 1763.509646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.521386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.549595][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.555398][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.561220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.561260][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:51:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000751}, 0x28) 09:51:12 executing program 4: getresgid(&(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188b070") timer_create(0x7, &(0x7f0000000000)={0x0, 0x25, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {0x77359400}}, &(0x7f0000000180)) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6001209c00042f00fe80000000001f0000f4e0cd0000000071000000000000000000000000ff15516e3a5f4741c606ff000000005a09907800"], 0x0) 09:51:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000009e, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00001f190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:51:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000140)=0x54) [ 1764.789554][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.795522][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.869581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.869614][ T5055] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1764.875508][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:51:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:51:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000752}, 0x28) 09:51:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x6000000000000c1, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1765.047473][ T5055] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000020190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x6000000000000c2, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1765.232007][ T5178] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000753}, 0x28) [ 1765.374574][ T5178] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c001020190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x6000000000000cd, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000754}, 0x28) [ 1765.570496][ T5189] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1765.663292][ T5189] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000755}, 0x28) 09:51:16 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x6000000000000ce, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000f21190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000756}, 0x28) 09:51:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000140)=0x54) 09:51:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000140)=0x54) 09:51:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000757}, 0x28) [ 1768.421724][ T5214] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x6000000000000fe, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1768.589234][ T5214] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000758}, 0x28) 09:51:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000023190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1768.709697][ C1] net_ratelimit: 16 callbacks suppressed [ 1768.709704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.715428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.715534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.732704][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:51:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000759}, 0x28) 09:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000010a, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1768.900295][ T5334] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1768.949557][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.955589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.994088][ T5334] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1769.029658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.035763][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.041767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.047664][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:51:19 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:51:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075a}, 0x28) 09:51:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00002d190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000011e, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1772.045666][ T5351] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1772.151832][ T5351] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, &(0x7f0000000140)=0x54) 09:51:21 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0x0) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r8 = getpid() r9 = getuid() fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fcntl$getown(r1, 0x9) r12 = getuid() stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r0, 0x9) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000340)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x1}, {&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x38, 0x1, 0x1, [r1, r0, r1, r1, r1, r1, r1, r1, r1]}], 0xb8, 0x4000}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000), 0xffffff05}], 0x1, 0x0) 09:51:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075b}, 0x28) 09:51:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00003f190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000140, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x284082) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, '\x00\x00r\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}}) dup3(r0, r0, 0x80000) [ 1773.255316][ T5463] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075c}, 0x28) 09:51:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0xf9ff, 0x0, 0x2}) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x40, r1}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000d00)=""/79, 0x4f, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) r3 = accept(r2, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nbd(0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x6a8843, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000240)=0xf4240) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}]}, 0x74}}, 0x0) shutdown(r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xd7, 0x100, 0x8, 0x1, 0xff, 0x3, 0x3, 0x0, 0x318, 0x40, 0x13e, 0x800, 0x80000000, 0x38, 0x0, 0x20, 0x4, 0x4}, [{0x0, 0x20, 0x7, 0x400, 0x5, 0xfd9e, 0xff, 0x3}], "3b5d762f664b40b2e20c7c8270149077932ee23eb84d38b7b69faa3f463e8749f72bed1c0f5a4f2181a159504c5658a04b808f4f897376c63542728a174eb2fbc640d370a8d2518c5be3443f23c699105b3cdd2a6fef7b86de1c09911d96dd738719c283e3a919619bf4bc6b", [[], [], []]}, 0x3e4) r9 = socket$inet6(0xa, 0x3, 0xb) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'bcsf0\x00', 0x9, 0xe53}) setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0x1b, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {0xa, 0x0, 0x2, @mcast1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x5c) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000140)={0x5, 0x1}) 09:51:21 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x100, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x2, 0x27, &(0x7f0000002300)="10850d7e435b0a2483dd30bf753950312064826d1fa91485340b03413587eb952cbd583d92dee4", 0x8, 0x400, 0x2, 0x5, 0x0, 0x2, 0xffffffff, 'syz0\x00'}) sendmsg$key(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000200)={0x2, 0x10, 0x3, 0x0, 0x40f, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x3, 0x1, 0xffffffffffffff3f, 0x401, 0x6}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0xffff}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2c, 0x3502}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x7fff, 0x6, 0xf9, 0x1, 0xa0000000}, @sadb_x_sec_ctx={0x201, 0x18, 0x3, 0xd48, 0x1000, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x80}]}, 0x2078}}, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x88400, 0x0) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) getresuid(&(0x7f0000000100), &(0x7f0000002340)=0x0, &(0x7f0000002380)) fstat(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002440)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002540)=0xe8) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002640)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000002680)={{0x49e, r3, r4, r5, r6, 0x100, 0x9}, 0x0, 0x3ff, 0x8, 0x2, r7, r8, 0x3}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffffffffffb, @empty, 0x81}, 0x1c) unshare(0x10000000) 09:51:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000174, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1773.423930][ T5463] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075d}, 0x28) 09:51:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000040190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1773.834082][ T5700] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1773.919609][ C0] net_ratelimit: 24 callbacks suppressed [ 1773.919618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.925569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1773.957685][ T5700] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1774.949674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.955544][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1774.961387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.967256][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.189565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.195576][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.269630][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.275618][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:51:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, &(0x7f0000000140)=0x54) 09:51:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075e}, 0x28) 09:51:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x2, 0x3, &(0x7f00000005c0)=[{&(0x7f00000003c0)="451263cf6b127c0459e202e7208f0d06a4903e1a3b419211d8c8e1c38a99f6951d148471ba6e58c15278e5ab11c4797a863372c12e1b58ba80493c031616f4f62e3729409a509868aac4ea45a1f4391a824c59c9db1e459f094ab684acff64bcf4ee8d0fca055c377959a1fea714f7665335b9f07bb20de2b0af71e3051cb9f3b974d4abb7d09660e51347512b55ac7d7de0fc7230dd1d1b52bbae37ac8fc5081ffdbf004f9b67", 0xa7, 0x400}, {&(0x7f0000000480)="25fda53731833535ac3f70730fe5d75e4284f0ae7c3dd9b199df379d432667e839109a519f249c495e38f40f4d8e8ec9dd891f9c088b0792827f38b08670b9c7b7069835f14cfb13fa98ed685ea03365d80fce1bd5fbd787b425bae083175aa452c715c50e91e437a0a5420db067d5542786aa4538421d19e73f5f964fc1947a", 0x80, 0x4}, {&(0x7f0000000500)="0e173912defb176bbe97d80179055145a23d2002b306d92fb04fa2a4a1965df66b5a34682632c7c816a2f8a5f8080d63e5f270108c186ed254ba485aa18a5783e49ac1947b9f26586112841470d46b61de7760c19e6bab60106fe0a523235fcb85c1f670aa62dd3d4f14058793876a69083df5e3965f79758aefd914cd0271a43ab9f6d873d35b4aeff67460b64373b26aa341", 0x93, 0x9}], 0x2930000, &(0x7f0000000640)={[{@nodots='nodots'}], [{@appraise_type='appraise_type=imasig'}, {@audit='audit'}]}) r0 = socket$kcm(0x10, 0x2000000002, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x9cad, 0x40000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000009c0)) stat(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000006c0)='./file0/file0\x00', 0x1ff, 0x2, &(0x7f0000000800)=[{&(0x7f0000000700)="8074c2b27110b313614f4e5c1b88b53fce6da6e112e0399a1e3badd4349b260e03f0683eb91410e218d65c7f6da53f18a1de948545438b2d26e228b463d8b55fa18f4798203f73bbc8754aab3b119e9bf7c09b6ece62b1cc0a7253f47a9096c3366a797ce8dfd25ea91e945af57f87cbc19d25b065dc685155631a152545", 0x7e, 0x7}, {&(0x7f00000007c0), 0x0, 0x10001}], 0x2000, &(0x7f0000000900)={[{@check_relaxed='check=relaxed'}], [{@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nodots'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x33, 0x64, 0x0, 0x30, 0x73, 0x77, 0x3c], 0x2d, [0x77, 0x39, 0x30, 0x72], 0x2d, [0x35, 0x67, 0x66], 0x2d, [0x72, 0x36, 0x37, 0x61], 0x2d, [0x77, 0x77, 0x3a, 0x31, 0x61, 0x77, 0x0, 0x77]}}}, {@obj_user={'obj_user', 0x3d, '/dev/mixer\x00'}}]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) lstat(&(0x7f0000000780)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000680)={0x7fffffff, 0x3f, 0x4, 0xfc, 0xfffffffffffffffc, 0x6}) write$FUSE_ENTRY(r3, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0x6, 0x1, 0x0, 0x5, 0x7, 0x9, {0x5, 0xcb, 0x80, 0x7, 0x4, 0x3, 0x8, 0x7fffffff, 0x8000, 0x7, 0xfffffffffffffff7, r4, r5, 0xffff, 0x4}}}, 0x90) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="2e0000002000817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790004f85acc7c45", 0x2e}], 0x1}, 0x0) 09:51:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000175, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0xf9ff, 0x0, 0x2}) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x40, r1}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000d00)=""/79, 0x4f, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) r3 = accept(r2, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nbd(0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x6a8843, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000240)=0xf4240) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}]}, 0x74}}, 0x0) shutdown(r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xd7, 0x100, 0x8, 0x1, 0xff, 0x3, 0x3, 0x0, 0x318, 0x40, 0x13e, 0x800, 0x80000000, 0x38, 0x0, 0x20, 0x4, 0x4}, [{0x0, 0x20, 0x7, 0x400, 0x5, 0xfd9e, 0xff, 0x3}], "3b5d762f664b40b2e20c7c8270149077932ee23eb84d38b7b69faa3f463e8749f72bed1c0f5a4f2181a159504c5658a04b808f4f897376c63542728a174eb2fbc640d370a8d2518c5be3443f23c699105b3cdd2a6fef7b86de1c09911d96dd738719c283e3a919619bf4bc6b", [[], [], []]}, 0x3e4) r9 = socket$inet6(0xa, 0x3, 0xb) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'bcsf0\x00', 0x9, 0xe53}) setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0x1b, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {0xa, 0x0, 0x2, @mcast1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x5c) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000140)={0x5, 0x1}) 09:51:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000048190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1777.367187][ T5705] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1777.398175][ T5709] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x400000000000075f}, 0x28) [ 1777.461380][ T5709] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000176, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c00004c190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000760}, 0x28) 09:51:25 executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "b19ab84167d66f15b1fce2648192ff6818f0b2d3"}, 0x15, 0x2) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') [ 1777.669584][ T5830] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000761}, 0x28) [ 1777.838177][ T5830] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getgid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00\x00\x00\x00\xab\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00'}, &(0x7f0000000140)=0x54) 09:51:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x101000}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000acc000)={@loopback, @dev, 0x2}, 0xc) 09:51:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0xf9ff, 0x0, 0x2}) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x40, r1}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000d00)=""/79, 0x4f, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) r3 = accept(r2, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nbd(0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x6a8843, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000240)=0xf4240) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}]}, 0x74}}, 0x0) shutdown(r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xd7, 0x100, 0x8, 0x1, 0xff, 0x3, 0x3, 0x0, 0x318, 0x40, 0x13e, 0x800, 0x80000000, 0x38, 0x0, 0x20, 0x4, 0x4}, [{0x0, 0x20, 0x7, 0x400, 0x5, 0xfd9e, 0xff, 0x3}], "3b5d762f664b40b2e20c7c8270149077932ee23eb84d38b7b69faa3f463e8749f72bed1c0f5a4f2181a159504c5658a04b808f4f897376c63542728a174eb2fbc640d370a8d2518c5be3443f23c699105b3cdd2a6fef7b86de1c09911d96dd738719c283e3a919619bf4bc6b", [[], [], []]}, 0x3e4) r9 = socket$inet6(0xa, 0x3, 0xb) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'bcsf0\x00', 0x9, 0xe53}) setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0x1b, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {0xa, 0x0, 0x2, @mcast1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x5c) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000140)={0x5, 0x1}) 09:51:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x600000000000179, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000762}, 0x28) 09:51:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000060190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 09:51:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000763}, 0x28) [ 1778.250823][ T5951] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:26 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r1, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) [ 1778.324835][ T5951] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) 09:51:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000017a, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) 09:51:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="800000000100000019000300e60100006c000068190000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1778.455051][ T6069] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 09:51:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f00000003c0)='sy\xb0\x15\xe6JXd\x17\xdc\xbf', 0x7fff, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000000)="e460cdfba83c707423070700886400a0219386dd0021", 0x0, 0x4000000000000764}, 0x28) 09:51:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x60000000000017b, [0x6e0], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801004000000000]}) [ 1778.654372][ T6069] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 1778.692663][ T6078] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1778.805932][ T6078] EXT4-fs (loop3): bad geometry: first data block 25 is beyond end of filesystem (1) [ 1779.109615][ C1] net_ratelimit: 16 callbacks suppressed [ 1779.109623][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.121261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.127072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.132877][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.349638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.355701][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.388508][ T6022] WARNING: CPU: 1 PID: 6022 at kernel/locking/lockdep.c:1024 lockdep_register_key+0x10d/0x490 [ 1779.398786][ T6022] Kernel panic - not syncing: panic_on_warn set ... [ 1779.405359][ T6022] CPU: 1 PID: 6022 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 1779.413919][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.423963][ T6022] Call Trace: [ 1779.427253][ T6022] dump_stack+0x172/0x1f0 [ 1779.431571][ T6022] ? lockdep_register_key+0xf0/0x490 [ 1779.436861][ T6022] panic+0x2cb/0x65c [ 1779.440754][ T6022] ? __warn_printk+0xf3/0xf3 [ 1779.445329][ T6022] ? lockdep_register_key+0x10d/0x490 [ 1779.450700][ T6022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1779.456930][ T6022] ? __warn.cold+0x5/0x45 [ 1779.461248][ T6022] ? lockdep_register_key+0x10d/0x490 [ 1779.466602][ T6022] __warn.cold+0x20/0x45 [ 1779.470846][ T6022] ? find_held_lock+0x35/0x130 [ 1779.475589][ T6022] ? lockdep_register_key+0x10d/0x490 [ 1779.481011][ T6022] report_bug+0x263/0x2b0 [ 1779.485331][ T6022] do_error_trap+0x11b/0x200 [ 1779.489909][ T6022] do_invalid_op+0x37/0x50 [ 1779.494311][ T6022] ? lockdep_register_key+0x10d/0x490 [ 1779.499668][ T6022] invalid_op+0x14/0x20 [ 1779.503811][ T6022] RIP: 0010:lockdep_register_key+0x10d/0x490 [ 1779.509776][ T6022] Code: 75 23 e9 e5 01 00 00 48 89 da 48 c1 ea 03 42 80 3c 3a 00 0f 85 b1 02 00 00 48 8b 1b 48 85 db 0f 84 c7 01 00 00 4c 39 e3 75 dd <0f> 0b 48 c7 c0 b8 57 5e 89 48 ba 00 00 00 00 00 fc ff df 48 89 c1 [ 1779.529377][ T6022] RSP: 0018:ffff88809c4679a0 EFLAGS: 00010046 [ 1779.535424][ T6022] RAX: dffffc0000000000 RBX: ffff88809b772e58 RCX: 1ffffffff12bcaf7 [ 1779.543376][ T6022] RDX: 1ffffffff146751e RSI: 0000000000000000 RDI: ffff8880550c0a7c [ 1779.551328][ T6022] RBP: ffff88809c4679d0 R08: ffffffff8a33a8f0 R09: ffffed101388cf29 [ 1779.559282][ T6022] R10: ffffed101388cf28 R11: 0000000000000003 R12: ffff88809b772e58 [ 1779.567235][ T6022] R13: 000000000000004a R14: 0000000000000286 R15: dffffc0000000000 [ 1779.575207][ T6022] alloc_workqueue+0x427/0xe70 [ 1779.579956][ T6022] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1779.585750][ T6022] ? __debug_object_init+0x4aa/0xe00 [ 1779.591022][ T6022] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1779.596723][ T6022] ? tipc_topsrv_start+0x259/0xb90 [ 1779.601824][ T6022] ? lockdep_init_map+0x1be/0x6d0 [ 1779.606832][ T6022] tipc_topsrv_start+0x536/0xb90 [ 1779.611753][ T6022] ? tipc_topsrv_kern_unsubscr+0x310/0x310 [ 1779.617540][ T6022] ? rcu_read_lock_sched_held+0x110/0x130 [ 1779.623244][ T6022] ? kmem_cache_alloc_trace+0x354/0x760 [ 1779.628771][ T6022] ? lockdep_init_map+0x1be/0x6d0 [ 1779.633779][ T6022] ? __raw_spin_lock_init+0x2d/0x100 [ 1779.639051][ T6022] tipc_init_net+0x397/0x550 [ 1779.643627][ T6022] ? tipc_exit_net+0x40/0x40 [ 1779.648203][ T6022] ops_init+0xb6/0x410 [ 1779.652266][ T6022] setup_net+0x2c5/0x730 [ 1779.656496][ T6022] ? lock_acquire+0x16f/0x3f0 [ 1779.661160][ T6022] ? ops_init+0x410/0x410 [ 1779.665478][ T6022] copy_net_ns+0x1d9/0x340 [ 1779.669891][ T6022] create_new_namespaces+0x400/0x7b0 [ 1779.675170][ T6022] unshare_nsproxy_namespaces+0xc2/0x200 [ 1779.680809][ T6022] ksys_unshare+0x440/0x980 [ 1779.685298][ T6022] ? walk_process_tree+0x2d0/0x2d0 [ 1779.690400][ T6022] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1779.695845][ T6022] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1779.701895][ T6022] ? do_syscall_64+0x26/0x610 [ 1779.706562][ T6022] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1779.711837][ T6022] __x64_sys_unshare+0x31/0x40 [ 1779.716588][ T6022] do_syscall_64+0x103/0x610 [ 1779.721169][ T6022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1779.727050][ T6022] RIP: 0033:0x457f29 [ 1779.730943][ T6022] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1779.750643][ T6022] RSP: 002b:00007f2d45c3bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1779.759038][ T6022] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457f29 [ 1779.766995][ T6022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1779.774954][ T6022] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1779.782907][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d45c3c6d4 [ 1779.790867][ T6022] R13: 00000000004c6d3b R14: 00000000004dc4f8 R15: 00000000ffffffff [ 1779.799870][ T6022] Kernel Offset: disabled [ 1779.804194][ T6022] Rebooting in 86400 seconds..