x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 838.019356][T24029] debugfs: File '24021' in directory 'proc' already present! 00:22:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000fffffffffffff0", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 838.066965][T24026] XFS (loop4): unknown mount option [disoard]. [ 838.073686][T24033] binder: 24021:24033 unknown command -1539613136 [ 838.080200][T24033] binder: 24021:24033 ioctl c0306201 20000380 returned -22 00:22:02 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x71, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='dispard'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 838.268790][T24040] binder: 24037:24040 ioctl c0306201 200001c0 returned -14 [ 838.299287][T24045] binder: 24038:24045 ioctl c0306201 200001c0 returned -14 00:22:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 838.325848][T24051] binder: 24037:24051 ioctl c0306201 200001c0 returned -14 [ 838.348031][T24053] debugfs: File '24049' in directory 'proc' already present! [ 838.357654][T24053] binder: 24049:24053 unknown command -1539613136 [ 838.364139][T24053] binder: 24049:24053 ioctl c0306201 20000380 returned -22 00:22:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 838.504951][T24066] binder: 24064:24066 ioctl c0306201 200001c0 returned -14 00:22:02 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x71, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 838.550668][T24070] binder: 24063:24070 ioctl c0306201 200001c0 returned -14 [ 838.560544][T24059] XFS (loop4): unknown mount option [dispard]. 00:22:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 838.609895][T24074] binder: 24063:24074 ioctl c0306201 200001c0 returned -14 00:22:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='dissard'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x301000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x80100, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="106308400000000000000001ff0000000000000019c95e998a612abdd901367f24fba544000000000000000000000000000000000000000000000000000000000000000000010021d04e000000000000000000220000000000000000ee23bdbe8208676d4d63000000000000000000007f4335a70f058c825a267fd30aba19876b1f7d8d1606c4b5687e794ee90497a9838cc810db6dacc1c70117389bb60c8c1fe6f9e34bf9d4b4687d0000000000000000dd94b434a6728121bc"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 838.731946][T24084] debugfs: File '24080' in directory 'proc' already present! [ 838.748537][T24083] binder: 24082:24083 ioctl c0306201 200001c0 returned -14 [ 838.791900][T24084] binder: 24080:24084 unknown command -1539613136 [ 838.798631][T24084] binder: 24080:24084 ioctl c0306201 20000380 returned -22 00:22:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:03 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x71, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 838.932317][T24095] binder: 24094:24095 unknown command 255 [ 838.938190][T24095] binder: 24094:24095 ioctl c0306201 200001c0 returned -22 [ 838.981752][T24099] XFS (loop4): unknown mount option [dissard]. [ 839.000631][T24106] binder: 24104:24106 ioctl c0306201 200001c0 returned -14 00:22:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1010008912, &(0x7f0000000000)="76a5c6225cdaa2d7a79c27cc5ba2ce0bc8323436f081f01e193a38470a76b0ec33714de97501be6649e14d0f9025edd9dea27cf46d0aa96952f73cf1eef6c7a23a874e27e188f43e3ed234bb2ab900000000000000e552fc35a3dc586e6fce49f8358b3e0466eb497d5009ecbab01aee0ebf75eb8bddfdb662cf71e574aaaefe6a637e1873d8d1e89fed18371fa9b5dc3a2572214807ccd73e707a0c4c") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40000, 0x0) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x6, 0x50000) 00:22:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 839.086632][T24114] debugfs: File '24110' in directory 'proc' already present! [ 839.180148][T24114] binder: 24110:24114 unknown command -1539613136 [ 839.186794][T24114] binder: 24110:24114 ioctl c0306201 20000380 returned -22 00:22:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disuard'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 839.226942][T24120] binder: 24119:24120 ioctl c0306201 200001c0 returned -14 [ 839.238756][T24124] binder: 24123:24124 ioctl c0306201 200001c0 returned -14 00:22:03 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x79, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a00503"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 839.331935][T24120] binder: 24119:24120 ioctl c0306201 200001c0 returned -14 00:22:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x8f, "2de3d56b978c24459e4932814810df3fa3958f3f906825dabb8c443cca73f254c70f0238cb811a34d244a9688b82bd7afcd0b586494cfb341ae9cfbc8e29677ad7ac493ec1163d461d51dfdf7524bc0c39f14dca84263b460ec5e75e91b0ad47f27f4d1fa40d168a05bc98f9052d128746776987f491da3aeb5dc7b41012e6ef451805b93c4850af64d8775c3347a3"}, &(0x7f0000000080)=0x97) bind$netrom(r1, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0xfffffffffffffffd, 0xfffffffffffffffc}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) setsockopt$inet_tcp_buf(r1, 0x6, 0x80b9b15c1186b1fd, &(0x7f00000024c0)="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", 0x100c) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10630840000000000000000011634840dee446430dab6b9d0000000000000000000000000000000000000000000000f8ffffff0000000000ffff0000000000000000000000000000000000000000000000000000000000009051d9c34c304f0638a597998d2c05a04ffab9ae4ba4175d24a8d48e7579171b45a19f0b51e93f98571ec0c2d43cd6c14666abb128b24b9588260687e2e97d1ca7ffab6a6d52a0fb8894ee58d31ef1c3033fd1e66eb0adc829669e72a6788bc75394d5acd88b4b0056adaf87dc8737cb2151f0d2ce15f6c066c52bf2b68eeef618aa2179e17c4f1df32560fe79bb245e33522da4c65e00854b2cef1022adcb2bcd6fdd3593a1d155ce2ab65bf2ce7b87c84659a0c43dc4d8d6c4d92e3a1c1a8910de5802015c1b04097541168ae8aa52c73ca3b86c0205a01078a68f612ccc68451e"], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) [ 839.416838][T24137] XFS (loop4): unknown mount option [disuard]. 00:22:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 839.496668][T24145] binder: 24144:24145 ioctl c0306201 200001c0 returned -14 [ 839.499658][T24143] debugfs: File '24142' in directory 'proc' already present! [ 839.534246][T24143] binder: 24142:24143 unknown command -1539613136 [ 839.541020][T24143] binder: 24142:24143 ioctl c0306201 20000380 returned -22 00:22:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disxard'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 839.620444][T24158] binder: 24152:24158 ioctl c0306201 200001c0 returned -14 00:22:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 839.698744][T24156] binder: 24155:24156 ioctl c0306201 200001c0 returned -14 00:22:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 839.771969][T24168] binder: 24155:24168 ioctl c020aa00 20000180 returned -22 [ 839.793308][T24163] binder: 24155:24163 ioctl c0306201 200001c0 returned -14 [ 839.814848][T24167] XFS (loop4): unknown mount option [disxard]. 00:22:03 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x79, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a00503"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x4000000000f5, 0x10000) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x1}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000180)="0d742692bd9088eefb7536e17f91b21f86c931f9adcf7c2b6e9ad17c61adc039da029dd37e", 0x25}, {&(0x7f0000000280)="84e203892c26389153bc62ae07718fae34306bdfc2078abe707d0bfb6b3a149c1074806aaec3cdfe2a230437536d707ece7d9c5d06d03273bb0ca97a66c5266bbe8e1271cbfcc630198f14114ebce3187200d624d9048318a92cd4016fd8c07e52ce02c4ed5ef1117356021fcddb5f3ffb44ec42550b7ed35fb4a90b98397a24", 0x80}, {&(0x7f0000000380)="45a0ec02da426d9991becf9f9134c56e569cf4f6acde05987e7d12b471bca84c679a7ae23c15173acf0b98f9ff37ff11cad730d940574cd7ec02f5e188067fd120be167d9110d910d1bab9ab89682405c7a8149e4de89b4f6ca681ab2f81c3ea995b84bbc68c3248dc55df6e7dcb2780886e361e9a67787227d78e901784fd4d5bc3de27588d35e20a236536ef91d8067d8eeabf86cfc872c95302cd436c", 0x9e}, {&(0x7f0000000440)="f9589dc25ec937349afaa668f50f8f1db4ea2d523e83f520f6aa6a031327ace7f786b55399866f7d02914d3a5131bc6ecb4eeddf01e8eb71d0e7acb5f2a62bbef8188763a3dc170024754eac1940e4fcf26514258d88f52adc40bacb6e7047b82dd33e948fcfae6e63e5293925eaca8d89d4b652cfb8cc2cefd7097497331a6524a71f0ad3727e54a3dc45079eabfa104c167f3b67752d0a4215743eece85b10c6be3144119ca78b45e950e2ecf748dc51da89b74e4ab164", 0xb8}, {&(0x7f0000000500)="bba3b0a3ac3d4c4de71fac48475f0013c242714bec32183599258843cd3a138dc342b7b96854c97c67fe6c851fca4c3aeb6fa6fb56b2b6f6f87307f196105ba3a1658a6800dab53878685cc5b7cc7e7965216f2ca362327dab36845cf5c522e9a1dd2bf10faf6609b41b6f7ca2ef72d5d99de4a30d95b7c09056365aee834912d21c54bbe89503e0419b6397f2e36096e1e65d86eec682d7f8e0aed8823a39115f219aaa93bfbf643e", 0xa9}, {&(0x7f00000005c0)="49984dbf89480acd4e885f46f9a0394a15348951e7c7385b95894f05cfe2e4c91be9d2ef7c746e57f469a7bfc836a774ee2c645a98d5a16fe86e3e27f2926994fae6a2557083d92bb01c459290f8baa840c5bf0dc0e18a3ce8c853b4cc24e8db7033afa3de80110740a133f92bedb72ac65a1371d06a8ed8e66615554ab05f574e653412c4c3538290992d0ad3b4d5598814acd4416b41c7ba6d304807d283d9ac4fbce40bc66a52101578022114b8c96c3878aefa280b0888271df90add7f", 0xbf}, {&(0x7f0000000680)="34a0b4c95eb45f46cd01702c8e975430808a5ad7ea4067ebbc104ec538417d53b938a3ab22d24ad35489af090e2deaf5b0a4027f4b157f46644536c218e2727de0a1076eb0b75e7ded12a2c13db2b5f30350d2b0f4f1c5d53eb3e07f0fb74ca682c4a21984a726e4772e07b8cd559a029587e122a02c500cf10a62a54da799647b1074d8ba9e624e8263b57a8894713aa16dc3e1cb9158845ad92260a7290b25eff833aaab17c5bd7fa68484f014ca473d243b119b762ce7c03ecc9e6c0bcea29f1b107b659f25fde551bcbfde6a9964da73ffad1f", 0xd5}, {&(0x7f0000000780)="ca711b705b619e71648fc138b31d1994f6e7965183e7e9bef97787bc6a168f5d626021cd5c00286c4c3af06c74f83aa15cb71f92204d9bc462f7e26c83c60928c235ffddb2ad61a16a6cfa00d241f3", 0x4f}, {&(0x7f0000000800)="8355b6ce51d8f65a9e2d1323acff0ccdf20bcfc6fa686e16c572acee78b2c40f7bba1e0da89466827f335fbf66c586a12e123ee0a228c9ddedb75402877d95ce0917d9fe3a95b855e0f7d46c3c2ac4b9ca6b4fc038fb99776e3ea98ef3d3e4e9eb107dd0e2d275da320e824d5e22b3c0ac473ad22dbef92bb6cdaf191ab8cb54795baabc5d9577d7c06c0641a115c34f88684e0cfd9c36b998a9698fe0d4a6897574125b3832fd37f1b1eb4e0d6324d8e32654d850", 0xb5}], 0x9, &(0x7f0000000980)=[{0x1010, 0x10e, 0x7, "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"}, {0xa0, 0x29, 0x3, "d95a8e4934427c41ff79acaad24faf2777c638fdd6d8818a05d642c897a9f39131229b06f1aa721d568d0903d6db3d725ba762571bce3daec701f7b39257cab3c0868b07399b7ac1ee4094d9554ff0e581183f10f57ee5d178efadfb8849c3ae3532e9015157cff21648d90019053c372bbbb55877d7c7186f59078dff2eead05345885868a5cd2d64e03adfdf73cc"}, {0xc0, 0x115, 0x2ec, "40371be9810fbc4596e1828b61786d990b5824309810f58dfba064026eebcb20d35b67025ff781a8757ee7a8a5d7aee54a9d847de2a798230f3ec2e052774fed99e9d5a5efb4170721c816041504ac854641cfbc5de83da4b300697d3cb1c35cd02c3c3e8d2ba3b6a5bc85244d3a3117e8975caec2b80e7390e2ac1173c611c5b781d8449c92629eb46fad093370c997aff24338fcc9f6c2c37480ee0e4b1e52b3ddb61e57fbc27860042858"}, {0xf8, 0x29, 0xc9, "32876f8eeb265ae214bae3b3ca5a9ecf05ac0fca88b9267450863a771219c1b9da799fcfe46475e01d32fe880576effb1ae0911d831ee9700802b7e5d54e698f998589ba1c590a7f12c50d6be3b20406b60fdf82405d0e31951040e66a375cc9883325cdac7fe77775d1eb1bbbbf484814226ea16a33cf1b8d356c74635ec1dea4b4396f512d1a297bc3495881a968622e3fb3e24fcfd05ad7f42927726e7b202af9c53f45696446f155e75d7cf2048823c1cdb49f13232d6f70daf8d40d441f0c256148e730e45686959a561bcb6622c82ae6dc49de8fde75016e519711d06e6c31305c65b7"}], 0x1268}, 0x40001) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x6, 0x20, 0x8}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000000), &(0x7f0000000080)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="106308400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012dcb667ab5ebef5892eff"], 0xfffffffffffffe9e, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x288000, 0x80) 00:22:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 839.894149][T24180] binder: 24179:24180 ioctl c0306201 200001c0 returned -14 00:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 840.016986][T24186] debugfs: File '24185' in directory 'proc' already present! 00:22:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disc\nrd'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 840.104715][T24189] binder: 24187:24189 ioctl c0306201 200001c0 returned -14 [ 840.124196][T24186] binder: 24185:24186 unknown command -1539613136 [ 840.130904][T24186] binder: 24185:24186 ioctl c0306201 20000380 returned -22 [ 840.171844][T24201] binder: 24197:24201 ioctl c0306201 200001c0 returned -14 [ 840.186186][T24189] binder_alloc: 24185: binder_alloc_buf, no vma [ 840.192709][T24189] binder: 24187:24189 ioctl c0306201 200001c0 returned -14 00:22:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:04 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x800, 0x38b, 0x1000, 0x8000, 0x4, 0x7, 0x6, 0xffffffff, 0x1ff, 0x10000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000"/80], 0xfffffffffffffe9e, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x40) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x80000001}, 0x4) 00:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:04 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x79, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a00503"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 840.254443][T24207] XFS (loop4): unknown mount option [disc [ 840.254443][T24207] rd]. [ 840.390519][T24215] binder: 24214:24215 ioctl c0306201 200001c0 returned -14 00:22:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disc%rd'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 840.454411][T24228] debugfs: File '24222' in directory 'proc' already present! 00:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 840.503622][T24215] binder: 24214:24215 ioctl c0306201 200001c0 returned -14 [ 840.518755][T24231] binder: 24224:24231 ioctl c0306201 200001c0 returned -14 00:22:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 840.547889][T24228] binder: 24222:24228 unknown command -1539613136 [ 840.554464][T24228] binder: 24222:24228 ioctl c0306201 20000380 returned -22 00:22:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x60000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="726a6357a3988abc0bc7e50413c2ddf3a5398a62ac2eeb8508e917c461baa817ffb269888ec4c55727192f2b672bd22b6d491312da12203859436096fb64bd", @ANYRES64=r2, @ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 840.647215][T24234] XFS (loop4): unknown mount option [disc%rd]. 00:22:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:04 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7d, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a"], 0x1, 0x0, &(0x7f0000000200)="86"}) [ 840.774448][T24253] binder: 24251:24253 unknown command 1466133106 [ 840.780999][T24253] binder: 24251:24253 ioctl c0306201 200001c0 returned -22 [ 840.811805][T24256] debugfs: File '24251' in directory 'proc' already present! [ 840.844055][T24257] binder: 24255:24257 ioctl c0306201 200001c0 returned -14 00:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disc\\rd'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 840.886540][T24262] binder: 24251:24262 unknown command 1466133106 [ 840.893062][T24262] binder: 24251:24262 ioctl c0306201 200001c0 returned -22 00:22:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x68000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 840.974018][T24267] debugfs: File '24266' in directory 'proc' already present! 00:22:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@empty, @initdev}, &(0x7f0000000080)=0xc) ioperm(0x7, 0xffff, 0x5) [ 841.066116][T24267] binder: 24266:24267 unknown command -1539613136 [ 841.072801][T24267] binder: 24266:24267 ioctl c0306201 20000380 returned -22 [ 841.096224][T24279] binder: 24278:24279 ioctl c0306201 200001c0 returned -14 00:22:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 841.115939][T24273] XFS (loop4): unknown mount option [disc\rd]. 00:22:05 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7d, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 841.224075][T24286] binder: 24283:24286 ioctl c0306201 200001c0 returned -14 00:22:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6c000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disca\nd'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 841.298521][T24286] binder: 24283:24286 ioctl c0306201 200001c0 returned -14 [ 841.328394][T24297] debugfs: File '24294' in directory 'proc' already present! 00:22:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 841.369602][T24297] binder: 24294:24297 unknown command -1539613136 [ 841.376087][T24297] binder: 24294:24297 ioctl c0306201 20000380 returned -22 00:22:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x101700, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x21, 0x40000) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000000000001c0000000000000000000000000000000000000000000000000000000000fd00"/88], 0xfffffffffffffe9e, 0x0, 0x0}) [ 841.410823][T24300] XFS (loop4): unknown mount option [disca [ 841.410823][T24300] d]. [ 841.441977][T24309] binder: 24306:24309 ioctl c0306201 200001c0 returned -14 00:22:05 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7d, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disca%d'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 841.599750][T24319] debugfs: File '24317' in directory 'proc' already present! [ 841.695954][T24321] binder: 24320:24321 ioctl c0306201 200001c0 returned -14 [ 841.711482][T24319] binder: 24317:24319 unknown command -1539613136 [ 841.718019][T24319] binder: 24317:24319 ioctl c0306201 20000380 returned -22 00:22:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000058", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 841.751133][T24327] XFS (loop4): unknown mount option [disca%d]. [ 841.772453][T24332] binder: 24330:24332 ioctl c0306201 200001c0 returned -14 00:22:05 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7f, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a6230"], 0x1, 0x0, &(0x7f0000000200)="86"}) [ 841.828522][T24336] binder: 24330:24336 ioctl c0306201 200001c0 returned -14 00:22:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='disca\\d'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7a000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 841.985022][T24353] debugfs: File '24348' in directory 'proc' already present! [ 842.002241][T24354] binder: 24352:24354 ioctl c0306201 200001c0 returned -14 [ 842.067978][T24353] binder: 24348:24353 unknown command -1539613136 [ 842.073754][T24359] binder: 24358:24359 ioctl c0306201 200001c0 returned -14 [ 842.074474][T24353] binder: 24348:24353 ioctl c0306201 20000380 returned -22 [ 842.094301][T24363] binder: 24352:24363 ioctl c0306201 200001c0 returned -14 00:22:06 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7f, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a6230"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff600000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 842.205248][T24366] XFS (loop4): unknown mount option [disca\d]. 00:22:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000140)=0x165) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffa8", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 842.284677][T24376] debugfs: File '24373' in directory 'proc' already present! [ 842.339822][T24380] binder: 24379:24380 ioctl c0306201 200001c0 returned -14 00:22:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discar\n'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 842.406846][T24388] binder: 24384:24388 ioctl c0306201 200001c0 returned -14 [ 842.425892][T24376] binder: 24373:24376 unknown command -1539613136 [ 842.432462][T24376] binder: 24373:24376 ioctl c0306201 20000380 returned -22 00:22:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 842.595919][T24396] XFS (loop4): unknown mount option [discar [ 842.595919][T24396] ]. [ 842.619755][T24405] binder: 24400:24405 ioctl c0306201 200001c0 returned -14 00:22:06 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7f, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a6230"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discar%'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x555555d09000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 842.852150][T24428] debugfs: File '24424' in directory 'proc' already present! [ 842.865248][T24425] XFS (loop4): unknown mount option [discar%]. [ 842.891017][T24428] binder: 24424:24428 unknown command -1539613136 00:22:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 842.897590][T24428] binder: 24424:24428 ioctl c0306201 20000380 returned -22 00:22:07 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:07 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discar.'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 842.963038][T24433] binder: 24431:24433 ioctl c0306201 200001c0 returned -14 00:22:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x555555d2b000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 843.118389][T24450] debugfs: File '24442' in directory 'proc' already present! [ 843.143604][T24446] binder: 24445:24446 ioctl c0306201 200001c0 returned -14 [ 843.175110][T24451] XFS (loop4): unknown mount option [discar.]. [ 843.203756][T24450] binder: 24442:24450 unknown command -1539613136 [ 843.210352][T24450] binder: 24442:24450 ioctl c0306201 20000380 returned -22 [ 843.218675][T24457] binder_alloc: 24442: binder_alloc_buf, no vma 00:22:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 843.225029][T24457] binder: 24445:24457 ioctl c0306201 200001c0 returned -14 [ 843.269455][T24462] binder: 24461:24462 ioctl c0306201 200001c0 returned -14 00:22:07 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x3000)=nil) 00:22:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discar/'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x60ffffffffff}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 843.523917][T24481] binder: 24477:24481 ioctl c0306201 200001c0 returned -14 [ 843.533615][T24484] debugfs: File '24478' in directory 'proc' already present! [ 843.551549][T24476] XFS (loop4): unknown mount option [discar/]. 00:22:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discar\\'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 843.591308][T24481] binder: 24477:24481 ioctl c0306201 200001c0 returned -14 [ 843.596467][T24490] binder: 24489:24490 ioctl c0306201 200001c0 returned -14 00:22:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = accept(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x1e4, 0x30, 0x808, 0x70bd26, 0x25dfdbfe, {}, [{0x88, 0x1, @m_gact={0x84, 0x11, {{0xc, 0x1, 'gact\x00'}, {0x40, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x3, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0x0, 0x8, 0xfffffffffffffffc, 0x100000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x129e, 0x20000000}}]}, {0x30, 0x6, "e0f7bcd6447db61581b530ccad7c235e4ea5144b75d5039e27a1ec9297a1d3cdecb09a07ba3dcc3d639a5a93"}}}}, {0x84, 0x1, @m_csum={0x80, 0xd, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0xa877, 0x3, 0x9, 0x400}, 0x5e}}}, {0x4c, 0x6, "6cd5e9d1f58e45be5130a4d954f62e3fed3fa6934e34ad3c1b9edc515e31d64aa7a0ba7ae68ac6c0802054c6f22d998755b2fe66c738523d34047b90fc37fd9bb2dac172e95a"}}}}, {0x48, 0x1, @m_connmark={0x44, 0xf, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x401, 0x10000006, 0x3f21, 0x5}}}}, {0xc, 0x6, "b3635f788ff068ea"}}}}, {0x7c, 0x1, @m_tunnel_key={0x78, 0x8, {{0x10, 0x1, 'tunnel_key\x00'}, {0x50, 0x2, [@TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr="fee61aa7312b7dc2b528a3b16c146732"}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}]}, {0x10, 0x6, "910afd0136176070ff3877"}}}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:07 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x760000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 843.754309][T24502] XFS (loop4): unknown mount option [discar\]. 00:22:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 843.836652][T24507] debugfs: File '24506' in directory 'proc' already present! [ 843.860254][T24511] binder: 24508:24511 ioctl c0306201 200001c0 returned -14 [ 843.882069][T24515] binder: 24509:24515 ioctl c0306201 200001c0 returned -14 [ 843.894372][T24507] binder: 24506:24507 unknown command -1539613136 [ 843.901214][T24507] binder: 24506:24507 ioctl c0306201 20000380 returned -22 00:22:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7fffffffefff}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000000d", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:08 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10440, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x9, @empty, 0x800}, {0xa, 0x4e20, 0xffffffffffff8000, @dev={0xfe, 0x80, [], 0x19}, 0x9}, 0x1, [0x40, 0x601, 0x9d8, 0x1, 0x9, 0x6ce]}, 0x5c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:08 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, 0x0}) 00:22:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard', 0x7}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000007fffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 844.192187][T24534] binder: 24532:24534 ioctl c0306201 200001c0 returned -14 [ 844.207579][T24546] binder: 24535:24546 unknown command 1897030416 [ 844.214081][T24546] binder: 24535:24546 ioctl c0306201 200001c0 returned -22 [ 844.235253][T24547] XFS (loop4): unknown mount option [discard]. [ 844.238354][T24545] debugfs: File '24533' in directory 'proc' already present! 00:22:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:08 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, 0x0}) [ 844.303126][T24554] binder: 24535:24554 unknown command 1897030416 [ 844.309710][T24554] binder: 24535:24554 ioctl c0306201 200001c0 returned -22 00:22:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x960000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard', 0x3c}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfff, 0x200000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/224) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000040010000400100000000000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa1f00000000000000000000aaaaaaaaaaaa00000000000000000000ffffffffac141415000000000100000000000000000000000000000000000000000000000000000000000000000000000004c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa250000000000000000000000000000000000000000000000000000e0000002e00000020500000001000000000000007f00000100000000ff0000ff00000000000000000000000000000000000000000000000000ffffff00ff00000000000000000000000000000000000000000000000000000000000000000000ffff00ffffff000000000000000000000000000503e50003ffdb0fff7663616e30000000000000000000000065716c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000f0ffffffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 844.543893][T24568] debugfs: File '24567' in directory 'proc' already present! [ 844.603584][T24570] binder: 24569:24570 ioctl c0306201 200001c0 returned -14 [ 844.631540][T24568] binder: 24567:24568 unknown command -1539613136 [ 844.638169][T24568] binder: 24567:24568 ioctl c0306201 20000380 returned -22 [ 844.660864][T24576] XFS (loop4): unknown mount option [discard<]. 00:22:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x70710000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:08 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, 0x0}) 00:22:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000020000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r3 = getpgrp(0x0) getresuid(&(0x7f0000001740)=0x0, &(0x7f0000001780), &(0x7f00000017c0)) getresgid(&(0x7f0000001800), &(0x7f0000001840)=0x0, &(0x7f0000001880)) r6 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002100)=0xe8) getgroups(0x6, &(0x7f0000002140)=[0x0, 0xee01, 0xee01, 0x0, 0xee01, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0}, &(0x7f00000021c0)=0xc) fstat(r1, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002300)=0x0) fstat(r1, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() r15 = getpid() r16 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0x0, 0x0}, &(0x7f0000002400)=0xc) r18 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002440)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002540)=0xe8) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000002640)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002e40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002e80)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000002f80)=0xe8) fstat(r0, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000003240)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000140)="1c273a2deb686bc4cd7105e8875772325d6df2774cc9041ebc7da7f67975280fe1622693967140ab602b2ef3235d5bc2c9d044068c440bea022e250e6a494f7367a823", 0x43}, {&(0x7f0000000200)="99e189df8befcd0579d4429bf2a376fe4199bf3a0344d4ec50", 0x19}, {&(0x7f0000000240)="f8589732bc4acdf3aa51a5d2b4800e25a7821912e6a362a2693976c244c98655c090616e0e754b2d8959004b8a20b4ecfe13b138bb8eb27adda8378f7f958c5cb857ff8ef5a5a971e8a9c23d3a8965d6bc5774e911d6dcef4bf240404a4350e9750f301991eb2175f63b441f21ce7d4d5adb90626df8f3a52dabe416be162d50d020dff5e19777a20ab970c682045109b37980ece9c6c6052b96f1fe0df38f97a380a5a56ba8e7bee007abfaf0ea", 0xae}, {&(0x7f0000000380)="d22fe6858cb6114ab1d418073e78f19aac803b7e67fb25623f96177d9672b9ce409fba87136939695e597198756cf378e04fbda601eba34e7974c9257314f861a7d336d635b716d16a91558294d023e3621704afd044e61901e7ca777410f081a60c0fe23ecf1a2216674342ae2f9ccd0ab7e9e6f162241b8103123d45d2291e7fece7f9ec8a82b16c973aa532a1c34945d21e0805bf25eabc13c854dee62b7b21ac6d3fe661a82f7406452ace35e65b1966f994ac5e8813f7ae069fb50b52cf3c681f7573f8dade712976d0ae8609a923beecdaef6ccdccb9716b07", 0xdc}, {&(0x7f0000000480)="49417b90d311a8518f82188728753a0c3567fbdb10f23926927d9c6637bdd01ef4229b09f13ab254093f7850446b3f05f5a46875bbcabc7e786d6f7254d1223641b0b22d0e0006f4248d5051ee0f888d1c5427329088c3a575d8e4", 0x5b}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b7eff8de116d1966c472ca0395294bfa2e73d3232f2e10cbb766002b14b19790a7c24c78bf5972524d07873dc68fd81740d621801c5c5f7c99bb5b2cc76e5efe2f4198990d7e5d5bece330d7e62d44be861b9ed23a2dba9408e2db4de2ed9eada9441e8e920c8f994ba04fe89496dd7e65f7af1b1f4d301289ef9befebbdd6e547e92d9402b2a60df9de544f182864e5132689dc9971a06d091ebf261bcce7dd5520a8c3ce4102d586ce87152617ecf1526a0b0b28f14de456ca236889589d418ad9e0cc15585067352ba465c586fe7a7c30513c06102ad364a73896f562d17025c546d44735", 0xe6}, {&(0x7f0000001600)="ca4ed0dfbe96789ccf6e0a0392fa6e658772b3ff8292d1ffe2ae986a06d292c08dd5e72ca3a411023df7c6d802e70ade0a51b380ce7932d98673bacd3200873345ee6ab739d99dd86cfa9dbff6b164211413fcf72bc5d6e622f2f903e7e500fa9acfebeff964d9bd341203897d9bcee41bc5ead8ae42f500087d73f0c04364b9751bb631377e591577559ad54f", 0x8d}], 0x8, &(0x7f0000003540)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000034000000000000000100000001000000302d38bd9d73149e2c9e2b9e3d56c8bc96706630dac845e0ae621331ac312b6635bf6a78635b2deb8de28dafd0a071d54d98db09d172011ccd910abbb7e6ab1c644635e1a5f07bf8c4cdf0847d34a08a1d295a16710ecc4d92012e264854c16d886e572985c52291c36040ae3c6778f03c3f66fe8df022b38e490a285f21a702879ff7625175e20df94bd5ac8dc32b390d3366611967ba57f4656345296565a453e4d91bc4ad69b6845d453e581f0236da9d9d759a81a4135e84fc61c851f730f917101caa5489269d8e40b132ce22f4fcd78d10efce38a57134d4890cb84d390dd46b4900c792a932490562dc9bf15292d359c9b6ba28304e16ba938056", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x804}, {&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a00)="7d508ae9b7c62c337f914f92fe2ca254aca057584f3270ad11a0089b6cb6bf0f6568bb32facb3faf35a6c7ddf64a1b4c78bd7fd4f94197bbb87161b070c72482c258109d14bfc978b3f4a90a00b87aeb239eac5feb5294ca124e7c9603e8ab9e59c16d63045d3e0683ddddb8b02edee102193f3fb1d44cf4f1628d715b47fbf87d6018d143af2edf1cc9b6122371a3e46040ae1e5b1323a971", 0x99}, {&(0x7f0000001ac0)="ada2008bfbcab9a12f68c9c8261b62f015f448a141bf95014221a8b2dcb2f62fe930a76ddcbb35ab3c507ea0", 0x2c}], 0x2, 0x0, 0x0, 0x20000800}, {&(0x7f0000001b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="2110149f5a45f51b523a78790c5f92d0762eae9f530048dd93edef78a1a6780dd7e7b8de0873c1a39a9e62e864b51fe04259935ca5d901e02b1146a51b2c2c70cd105ecb607d741b1a4d023249cb69adb9949533efd15911b83101a0b1d206e897ffa342e0e75e51ded84591522ec5c8178cb8eefd", 0x75}, {&(0x7f0000001c40)="bd43f4e345e51010e24d4fcad642544e2305efd89450dd39d7612c23103d43c3f3b7a3534be8bc42294d468a8bf33e34661ef3d31125db621a8db90b36fffde6543fe159c07ceb2659adc26a92629f298c5682f7dc8ef9dfa288bf40b82358694166a09315ffb00ca5adc255d292f96ee77e98fea4f032d015a868778a219a35b5585d1af63612078befec9b8dbfd2dee68c2cb361e8462bb986c9", 0x9b}, {&(0x7f0000001d00)="772c9aab4ff0cea635e1c42d3d721ce6d0", 0x11}, {&(0x7f0000001d40)="c19e4675ee6950d7c23753ea9363593b395264d578cc7426feb5a51c2c6f04f3e7cad56393a87b8a8f56de8e3100ea4e3ad3320db2fe0fb899ade73687c89a3a238df97179db17876c2718c6ab176cdd0f66ae80ca116295dd42d7b53c8fce3cd443764412b3658feea7232674c5fb", 0x6f}, {&(0x7f0000001dc0)="7300079c483dc9e7550a098272295d6b304232d78fa10ac65f8434d5ef1f90558482ed00e4dce6c9a84abec65e07348a63c13566117c4b6ec97eb433f39fa4fe8ddf77a47efc492ca4bd819770c5437e4cc62e8eeda7c6029584664562d9e1257000372dc992088048ced0c914d121132d1aa8b5eceb2f9abae8d2f58758f501df0e8b46b6b450832aea7940f5c1c7b1e0e49b7e8306ecd2735f0878955621b8cd30a595d72d92f7e38f3b1203401f6cdbeec599d4f4eed4afd5c0c39cafd75b2140d8b5b89029ea9cd3aa833a63c74633c5de282dbd58ecad2f141ab68ab2c433717f51c3d066749ad96945b5cec6741bce600c6af6f282", 0xf8}, {&(0x7f0000001ec0)="67a015e2ef6fa2b4dfc4c35b4e2497428e12fe67efc3ddadc031de70b9b9af1bc1b474ca0e3e372acad733e3ebadbdd613ae35b1e284494b058d9ccae33f0be57c0a53eb7a7074d218b4614622b11eccd839e377384f6b184e06ab1f596ae780754e13198f66080857db343151f5d3b8cd6356adf24b4c6252bb829e3e8045b52509f62be29019410162ae56c2fc59125f4b0a4fd1", 0x95}], 0x6, &(0x7f0000002740)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0xd8, 0x20008011}, {&(0x7f0000002840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d80)=[{&(0x7f00000028c0)="40b18d05feef09ddb1067d6d2a17a29ac7281ac381ea15a0a3df1edee8f247f1", 0x20}, {&(0x7f0000002900)="30c8d853c5c7e02dca4e46c0ececea47d9c38b7488304ca3e23cb85b4a6566773bff44ca4147cfae22468b0545ce7554f505f63c347b89e72aaa433da3d4dbf6a7e4ab30f529e0b7b2fdbb7deb499a414003a05cfc1a0f2d6fc9213d5c6c5f0be64932e301f92bb803c1923eb70c87d9d290a594065fdc9f0a7bd1b73987035a2d40ae9c34350009d513b7b9f5d51b9f8a11b732b72ec35ac5a48cedfb7c2ee43ac99bce06047361ecfb03f12d028bb4f6c6", 0xb2}, {&(0x7f00000029c0)="c9e6173a3ffc894c247f351e6768bbbc81fd63b7cbdcd1a84eac3d58de9dd62f7bc03edbe4f9858c516fbb176619b7f10375de34b5c4d0ce3e0d8ac6e976285849ca55831849710c81489d69d79a7a7ba8ab37fa121a433cc5fd98158775cb9f122a32e94dec854032a10f51d0ee6e05a2714d0591927a58a477c6c3454f16591a35fd7d983c95acc82231fb8b5ad3edc46bca136f0603a310a2caedd53972", 0x9f}, {&(0x7f0000002a80)="9bf5f1a2d996690e8baca15eb6ffea115fb6305a9ed1de20075bafac6a276964bcf386db7639cb0ccb08", 0x2a}, {&(0x7f0000002ac0)="826f067ff675ab468ab79991e5a569a7d65610d0315b1b71182312de217932e37c4bca998e2e50248b44c5c83fc2a95321094fa4ca40163ccf849ab8", 0x3c}, {&(0x7f0000002b00)="0ecc15a6a49004ca54798c9c3631f5692c3c74933fb5fb26d7830222ef2e177afe397ed66ed946c49c1d08eb2374f6fd7a76732bad86d7be2e19f422d597a6c46261af512ae154abbed480ec3b3b1556e44c14884430e00dab1a666fa6850933a63fd85f71618b99320f7f3fb43c8e517d11cb21c4cab3afb2bb0a327dc5b34e2dc76097a328953bd65cd4e3e6b2e5a0fa76cde34ab205b7f8", 0x99}, {&(0x7f0000002bc0)="d393c529ff39b823f4ea3cb28ec580b1e84e3815e7e64c8df39c6f8ca50338565b069f7aeeb1f71787037f8c2045af2001d1fe9918b70b56302a39b34f1b65ad417591d65ed0b60dc2cdedd906bbb36553e1c2d52ffd8b793962af6cad91eb50ab1271a5aa4d4cc153655d7ece49565d6d4836d79f6da9b4b01f62bc04db7de7c976df929d613c7d69536db51bad9ea1ac00e649312dfdd99b126633bf184cec26ec10c4037fead418a88ac9ec30a4a9199c0c75642b48c68b6adddef7e353b50aa3", 0xc2}, {&(0x7f0000002cc0)="65497840100cb2b5f9c7a4c78423e062210016", 0x13}, {&(0x7f0000002d00)="1025847e3b561b5546428187aa567a8e837ef1c894f8663cdba77691b51bbb71064858a4724cbd4d601ca32104de5dcd48f4be4507d85a0890c81163eb0d42d6c1f2c1679003b83da61b89589993852eeae5497bfe1aa156b5d308", 0x5b}], 0x9, &(0x7f00000031c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="744e5e142e00002000000000000000010000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x78, 0x84}], 0x4, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003500)={0x58, 0x0, &(0x7f0000003480)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000033c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000003340)=""/121, 0x79, 0x2, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000003440)={0x0, 0x18, 0x40}}, 0x1000}], 0x24c, 0x0, 0x0}) 00:22:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard', 0x44}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 844.845396][T24594] binder: 24592:24594 ioctl c0306201 200001c0 returned -14 00:22:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000030000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 844.899237][T24597] debugfs: File '24596' in directory 'proc' already present! 00:22:09 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, &(0x7f0000000200)}) 00:22:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90d05555550000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 845.005102][T24602] binder: 24601:24602 ioctl c0306201 20003500 returned -14 [ 845.025959][T24609] XFS (loop4): unknown mount option [discardD]. [ 845.086594][T24613] binder: 24601:24613 ioctl c0306201 20003500 returned -14 00:22:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) [ 845.165467][T24623] debugfs: File '24619' in directory 'proc' already present! 00:22:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000040000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 845.236704][T24623] binder: 24619:24623 unknown command -1539613136 [ 845.243508][T24623] binder: 24619:24623 ioctl c0306201 20000380 returned -22 [ 845.259200][T24628] binder: 24627:24628 ioctl c0306201 200001c0 returned -14 00:22:09 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, &(0x7f0000000200)}) 00:22:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb0d25555550000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 845.342453][T24639] binder: 24635:24639 ioctl c0306201 200001c0 returned -14 [ 845.371401][T24634] XFS (loop4): unknown mount option []. 00:22:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10630840000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae583723d84c3c3f900296f3cab3d26e84745f00a997fa0ee9bca26f1580190bdf614bc96a59a0ca"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 845.484221][T24650] binder: 24649:24650 ioctl c0306201 200001c0 returned -14 00:22:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe0500000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000060000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 845.574262][T24657] debugfs: File '24656' in directory 'proc' already present! 00:22:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 845.669780][T24657] binder: 24656:24657 unknown command -1539613136 [ 845.676337][T24657] binder: 24656:24657 ioctl c0306201 20000380 returned -22 [ 845.709832][T24667] binder: 24662:24667 ioctl c0306201 200001c0 returned -14 [ 845.726671][T24668] binder: 24661:24668 ioctl c0306201 200001c0 returned -14 00:22:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe0700000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 845.813671][T24676] XFS (loop4): unknown mount option []. 00:22:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:10 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, &(0x7f0000000200)}) 00:22:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 845.952281][T24688] binder: 24684:24688 ioctl c0306201 200001c0 returned -14 00:22:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 846.032995][T24695] binder: 24691:24695 ioctl c0306201 200001c0 returned -14 [ 846.065696][T24698] debugfs: File '24696' in directory 'proc' already present! 00:22:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000c0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 846.160607][T24698] binder: 24696:24698 unknown command -1539613136 [ 846.167678][T24698] binder: 24696:24698 ioctl c0306201 20000380 returned -22 [ 846.173149][T24704] XFS (loop4): unknown mount option []. 00:22:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 846.250023][T24712] binder: 24709:24712 ioctl c0306201 200001c0 returned -14 00:22:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000e0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) [ 846.339452][T24719] binder: 24716:24719 ioctl c0306201 200001c0 returned -14 [ 846.363070][T24712] binder: 24709:24712 ioctl c0306201 200001c0 returned -14 00:22:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x200000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) [ 846.494293][T24729] XFS (loop4): unknown mount option []. [ 846.576710][T24736] binder: 24735:24736 ioctl c0306201 200001c0 returned -14 00:22:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000f0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x300000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 846.751037][T24750] binder: 24745:24750 ioctl c0306201 200001c0 returned -14 00:22:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 846.820706][T24757] binder: 24745:24757 ioctl c0306201 200001c0 returned -14 [ 846.824916][T24759] binder: 24758:24759 ioctl c0306201 200001c0 returned -14 [ 846.849936][T24756] XFS (loop4): unknown mount option []. 00:22:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000100000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:11 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 847.005056][T24774] binder: 24773:24774 ioctl c0306201 200001c0 returned -14 [ 847.026701][T24777] binder: 24776:24777 ioctl c0306201 200001c0 returned -14 [ 847.073510][T24774] binder: 24773:24774 ioctl c0306201 200001c0 returned -14 [ 847.177987][T24786] XFS (loop4): unknown mount option []. 00:22:11 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0x9, 0x8, 0xfff, 0x20}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x77, "b6d3f510485e51f374a5375460a4c65667c7f53ceb56186af0490c08223809f35ef5b64d66cb968cf4d0b0e1c5780034be0d31e60baec2fa1f9da72b8d76060f7cbde71164e743512680c58a2529c93d3056f138437faadf857334155fe75d954fece53c778f5c603c542c0dabac441a8580c8a9e96a3f"}, &(0x7f00000001c0)=0x7f) unshare(0x6c060000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:22:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200)="80d7a8ae25a7d88ee0d3d46ed1dbd2c93ea82d45a0d72ffef05ea551f49402e973c12fcfb06826e60db1138b9ee6eec3ca7f2cacbf0a6bb4f62e7b1f110e7cf5d08e5f34ce1ba715b559dc797cc1a93175a01e0d1cd2cbc2104eb77586a70b5ed41f81bd972fcd27c538ca9fd37ddd5600d5e9b364b9ad17ced9d713467f3fe5bac23d9cada7f59d13a1640ee29d5c0c", 0x90, r0}, 0x68) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x500000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000600000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x8}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 847.487899][T24805] binder: 24804:24805 ioctl c0306201 200001c0 returned -14 [ 847.521572][T24803] binder: 24802:24803 ioctl c0306201 200001c0 returned -14 00:22:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000f00000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x600000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 847.701832][T24815] IPVS: ftp: loaded support on port[0] = 21 00:22:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 847.760451][T24824] binder: 24802:24824 ioctl c0306201 200001c0 returned -14 [ 847.775956][T24816] XFS (loop4): unknown mount option []. 00:22:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000300000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000380)="11dca10d5e0bcfe47bf07049b76396eaf6e1bd069b66170ef248a167be81f325415e396795ff1fa71aa0d73051c5c114403666aea1eb4a4d400900000093f5fe1e3378b5e40e63d52bf9412a27f529927e64f143c8bd45dd41381e7e2c3194b37a4eddb82de339558ab3f35d739900b87b3258978dfd9f20f25cbffee11fb15149957d1eb76e443b8daf517c26f49ea9431448ea271b686b0b17f1f47a0bd338ea047981af46a904266148d0d1554045a70b250a9f6a4d9161dda049c70ea921791a48718fc2c3e69c606b124c71699e529b25387337ce8cc713466419e89571c298ff6d541756d3cf2e30dab900") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 847.847967][T24832] binder: 24828:24832 ioctl c0306201 200001c0 returned -14 [ 847.921681][T24816] XFS (loop4): unknown mount option []. [ 848.162300][T24846] binder: 24841:24846 ioctl c0306201 200001c0 returned -14 00:22:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x700000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000600000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) r3 = epoll_create(0x16) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x80000001}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x311) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000380)=0x9, 0x4) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa8, 0x0, &(0x7f0000000200)="2ee271a4f6aef46027be08dd34fc6dc9738f08ec069bf0873d8ff67807aa60525cabdab62f615edb64f3eed5cc3fc531a9473bbafef75cac8c3edd5b40754c016702f7b60f275636b64d2614e337a722b1539977928639ece73e3f76bc657cdf3953df2c927a208f866ed0b962885509b0c3124200ce89df2813d1c8147d3c29a69a084b6a2ef969a4ba2e1c2d21d0ff50b5fb30b4ce8c51e0146adab8900f5f4761bae81438d94f"}) 00:22:12 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0x9, 0x8, 0xfff, 0x20}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x77, "b6d3f510485e51f374a5375460a4c65667c7f53ceb56186af0490c08223809f35ef5b64d66cb968cf4d0b0e1c5780034be0d31e60baec2fa1f9da72b8d76060f7cbde71164e743512680c58a2529c93d3056f138437faadf857334155fe75d954fece53c778f5c603c542c0dabac441a8580c8a9e96a3f"}, &(0x7f00000001c0)=0x7f) unshare(0x6c060000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 848.856551][T24870] binder: 24867:24870 ioctl c0306201 200001c0 returned -14 [ 848.872867][T24872] binder: 24868:24872 ioctl c0306201 200001c0 returned -14 [ 848.884734][T24869] XFS (loop4): unknown mount option [ ]. 00:22:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000a00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 849.029971][T24870] binder: 24867:24870 ioctl c0306201 200001c0 returned -14 [ 849.037848][T24880] IPVS: ftp: loaded support on port[0] = 21 00:22:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10638c40000000000000000011634834a16f23ee263fd0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f566303fd1e706000000"], 0xfffffffffffffe9e, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240)=0x3, 0x4) 00:22:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xa}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 849.611065][T24899] binder: 24886:24899 ioctl c0306201 200001c0 returned -14 [ 849.635693][T24898] binder: 24892:24898 unknown command 1082942224 [ 849.642308][T24898] binder: 24892:24898 ioctl c0306201 200001c0 returned -22 00:22:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f00000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 849.709636][T24903] XFS (loop4): unknown mount option [ [ 849.709636][T24903] ]. [ 849.722434][T24906] binder: 24892:24906 unknown command 1082942224 [ 849.728990][T24906] binder: 24892:24906 ioctl c0306201 200001c0 returned -22 00:22:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000ff0d00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000300)={0x81, 0x5, 0x100000001, 0x5c4, 0x9, 0x3f}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x600, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)="f66b2f62ea13d8922de96870adf975db7d9beeac43cae17c83086480687f978d4dfea7441f83") ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000180)={0x5, 0xf004}) read$alg(r2, &(0x7f0000000200)=""/224, 0xe0) r4 = dup3(r1, r0, 0x80000) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0}) prctl$PR_GET_KEEPCAPS(0x7) 00:22:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xd}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 849.891425][T24917] binder: 24916:24917 ioctl c0306201 200001c0 returned -14 00:22:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x101000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)) 00:22:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 850.122590][T24927] binder: 24924:24927 ioctl 8004562e 20000000 returned -22 00:22:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/4, 0x4}], 0x1, 0x0) [ 850.176178][T24929] XFS (loop4): unknown mount option [ ]. [ 850.192310][T24938] binder: 24924:24938 unknown command 5 [ 850.198006][T24938] binder: 24924:24938 ioctl c0306201 200001c0 returned -22 00:22:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000e00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 850.277341][T24938] binder: 24924:24938 ioctl 8004562e 20000000 returned -22 [ 850.298647][T24944] binder: 24940:24944 ioctl c0306201 200001c0 returned -14 00:22:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4800000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 850.324830][T24927] binder: 24924:24927 unknown command 5 [ 850.330652][T24927] binder: 24924:24927 ioctl c0306201 200001c0 returned -22 00:22:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xe}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000f00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) [ 850.608478][T24965] binder: 24956:24965 ioctl c0306201 200001c0 returned -14 [ 850.638454][T24968] binder: 24962:24968 ioctl c0306201 200001c0 returned -14 [ 850.690099][T24969] XFS (loop4): unknown mount option []. 00:22:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c00000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x400, 0x1, 0xffffffff, 0x100, 0x401}, 0xc) 00:22:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000003f00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x10}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 850.947902][T24989] binder: 24987:24989 ioctl c0306201 200001c0 returned -14 [ 850.973787][T24995] binder: 24988:24995 ioctl c0306201 200001c0 returned -14 00:22:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) clock_gettime(0x0, &(0x7f0000005200)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) [ 851.057980][T25002] binder: 24987:25002 ioctl c0306201 200001c0 returned -14 00:22:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000004000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 851.183733][T25008] XFS (loop4): unknown mount option []. [ 851.258953][T25014] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 851.268771][T25014] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 851.327173][T25021] binder: 25016:25021 ioctl c0306201 200001c0 returned -14 00:22:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x23}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 851.384900][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) accept4$x25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 851.443947][T25029] binder: 25025:25029 ioctl c0306201 200001c0 returned -14 [ 851.460787][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000655800000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 851.536865][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 851.578125][T25038] XFS (loop4): unknown mount option [#]. [ 851.601866][T25042] binder: 25041:25042 ioctl c0306201 200001c0 returned -14 [ 851.609481][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x30}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 851.737676][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 851.809785][T25056] binder: 25052:25056 ioctl c0306201 200001c0 returned -14 [ 851.862660][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 851.947146][T25063] XFS (loop4): unknown mount option [0]. [ 851.956395][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 851.997663][T25026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:16 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x0) 00:22:16 executing program 2: r0 = shmget(0x3, 0x8000, 0x8, &(0x7f0000ff5000/0x8000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000380)=""/4096) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000006000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6c00000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x34}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 852.152405][T25071] binder: 25070:25071 ioctl c0306201 200001c0 returned -14 00:22:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 852.199203][T25080] binder: 25075:25080 ioctl c0306201 200001c0 returned -14 00:22:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000586500000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 852.263311][T25087] XFS (loop4): unknown mount option [4]. 00:22:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7400000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) gettid() perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x0, 0x3, 0x0, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x0, 0x5, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x0, 0x80000000, 0x0, 0x0, 0xd0, 0x92, 0x5a96}, 0x0, 0xf, r0, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') accept4(r1, 0x0, 0x0, 0x0) close(r2) 00:22:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x48}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000008100000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 852.568904][T25111] binder: 25106:25111 ioctl c0306201 200001c0 returned -14 [ 852.569994][T25110] binder: 25109:25110 ioctl c0306201 200001c0 returned -14 [ 852.643664][T25115] XFS (loop4): unknown mount option [H]. 00:22:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000f000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7a00000000000000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4c}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 852.913558][T25138] binder: 25129:25138 ioctl c0306201 200001c0 returned -14 [ 852.931963][T25140] binder: 25131:25140 ioctl c0306201 200001c0 returned -14 [ 852.952074][T25135] XFS (loop4): unknown mount option [L]. 00:22:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffefffffff7f0000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000dff00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 853.005253][T25147] binder: 25131:25147 ioctl c0306201 200001c0 returned -14 00:22:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 853.157763][T25154] binder: 25152:25154 ioctl c0306201 200001c0 returned -14 00:22:17 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x81, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x0, 0x0, &(0x7f0000000200)}) 00:22:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0xfffffffffffffff9, {{0xa, 0x4e23, 0xffffffffffffffc0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}, 0x88) socketpair(0x9, 0x0, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x24) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x6, 0x6}, &(0x7f0000000180)=0x8) 00:22:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x60}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffff600000}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000fffff0000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 853.431642][T25176] binder: 25175:25176 ioctl c0306201 200001c0 returned -14 [ 853.465194][T25174] XFS (loop4): unknown mount option [`]. 00:22:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000010000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x2280, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={r6, 0x7, 0x20}, 0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2, r3, r4}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x2, 0x0}) [ 853.592473][T25191] debugfs: File '25190' in directory 'proc' already present! [ 853.690075][T25191] binder: 25190:25191 unknown command -1539613136 [ 853.696599][T25191] binder: 25190:25191 ioctl c0306201 20000380 returned -22 00:22:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x68}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 853.752802][T25204] binder_alloc: 25190: binder_alloc_buf, no vma [ 853.759405][T25204] binder: 25197:25204 ioctl c0306201 200001c0 returned -14 [ 853.789369][T25209] binder_alloc: 25190: binder_alloc_buf, no vma [ 853.795813][T25209] binder: 25197:25209 ioctl c0306201 200001c0 returned -14 [ 853.819122][T25206] binder: 25203:25206 ioctl c0306201 200001c0 returned -14 00:22:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='di#card'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000020000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') openat(r2, &(0x7f0000000180)='./file0\x00', 0x40, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r3 = socket(0xd, 0x759a6a7b80e28f94, 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x7}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x40}, &(0x7f00000000c0)=0x8) [ 853.966722][T25218] XFS (loop4): unknown mount option [h]. 00:22:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x3, 0x0}) 00:22:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000030000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 854.088178][T25231] binder: 25227:25231 ioctl c0306201 200001c0 returned -14 [ 854.107851][T25225] XFS (loop3): unknown mount option [di#card]. 00:22:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6a}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 854.185910][T25238] binder: 25236:25238 ioctl c0306201 200001c0 returned -14 [ 854.255122][T25231] binder: 25227:25231 ioctl c0306201 200001c0 returned -14 00:22:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4, 0x0}) 00:22:18 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308fe8840000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0247f3d29157aa2b65b40d89669057012cc68acbae04a4512dd6540ccfd10c0d555b770465d4b262f8b4f8bb55919be07e93f22dcc7e28c4a74f6a90379"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000040000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 854.449947][T25256] XFS (loop4): unknown mount option [j]. [ 854.566137][T25264] binder: 25261:25264 ioctl c0306201 200001c0 returned -14 00:22:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6c}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 854.607603][T25267] binder: 25265:25267 unknown command -33004784 [ 854.614591][T25267] binder: 25265:25267 ioctl c0306201 200001c0 returned -22 00:22:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 854.664164][T25277] debugfs: File '25272' in directory 'proc' already present! [ 854.700448][T25279] XFS (loop4): unknown mount option [l]. 00:22:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x5, 0x0}) 00:22:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000060000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x74}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r3 = getuid() fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000b80)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000c00)={{0x4, 0x7, 0x1ff, 0x6, '\x00', 0x9}, 0x5, 0x33, 0xd6, r7, 0x1, 0x1, 'syz0\x00', &(0x7f0000000bc0)=['wlan1posix_acl_access}\x00'], 0x17, [], [0x8, 0xc7, 0x1f, 0xbd]}) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) r13 = getgid() lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0]) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x3}, [{0x2, 0x3, r1}, {0x2, 0x2, r2}, {0x2, 0x0, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r5}, {0x2, 0x7, r6}], {0x4, 0x2}, [{0x8, 0x1, r8}, {0x8, 0x4, r9}, {0x8, 0x4, r10}, {0x8, 0x2, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}, {0x8, 0x7, r15}, {0x8, 0x2, r16}, {0x8, 0x4, r17}, {0x8, 0x0, r18}], {0x10, 0x7}, {0x20, 0x2}}, 0xa4, 0x2) r19 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r20 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) readlinkat(r20, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/160, 0xa0) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000dc0)}], 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r20, 0xc0205647, &(0x7f0000000d80)={0xa30000, 0x1, 0x1f, [], &(0x7f0000000d40)={0x98091b, 0xe33, [], @p_u8=0xfffffffffffffffe}}) 00:22:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 854.935084][T25294] binder: 25292:25294 ioctl c0306201 200001c0 returned -14 [ 854.997392][T25297] XFS (loop4): unknown mount option [t]. 00:22:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6, 0x0}) 00:22:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000a0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 855.240208][T25319] binder: 25316:25319 ioctl c0306201 200001c0 returned -14 00:22:19 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x1, 0x0, &(0x7f0000000200)="86"}) 00:22:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7a}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10630840000000000000000011634840000000000000000800000000000000000000000000000000000000000000000000001000000000039100"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = dup2(r0, r0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@remote, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) 00:22:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000c0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7, 0x0}) [ 855.493557][T25332] binder: 25330:25332 ioctl c0306201 200001c0 returned -14 [ 855.515276][T25331] XFS (loop4): unknown mount option [z]. [ 855.534844][T25334] binder: 25333:25334 ioctl c0306201 200001c0 returned -14 [ 855.546390][T25332] binder: 25330:25332 ioctl c0306201 200001c0 returned -14 00:22:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:19 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x41) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000280)=0x7ff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000600000000000000018000000000000005887a3400acdbaf25704eca979a8fbdb70c8bcdf5ab82c55159826c5b9be6b4f7412abe1bca4146c30a04cbced491fea8be498e55870391d4f7bd8ec7f292e9535f608eaed7ac9f64c6a0048fe51158612f5a79605d5b84a7972512d2ee4650b7dde5edbf5544e689d53531c4ca8186d9837e01e3306afa51b79b3c957ebf02f740f", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYBLOB="04000000000000000200000000000000220000000000000085616466000000000a0000000000000001000000000000002100000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="40140000000000000c630000"], 0x0, 0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000080)) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000380)={r0, 0x6}) 00:22:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x98}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x48, 0x0}) 00:22:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000e0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:19 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c630000305e3ba494a4f0a9e98dad3ffd4dc98dd8b40408fd27b7b9d67663df9a7e348fa89ae23a42a7cf1f2ed830c4563734787b5764680fc1588d09ab552ff404c148f00848bcd624e2629da3d02fc2f2f00dab5052c93569820e7df54bd456ecc16a82088cc2dc8bdbcbcaaa9eaf1b024b674b90a0050312d78e1a62309b5e"], 0x1, 0x0, &(0x7f0000000200)="86"}) [ 855.800764][T25359] binder: 25358:25359 ioctl c0306201 200001c0 returned -14 00:22:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 855.928750][T25369] XFS (loop4): unknown mount option [˜]. 00:22:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000f0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4c, 0x0}) 00:22:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) fcntl$setflags(r1, 0x2, 0x1) [ 855.993531][T25376] debugfs: File '25372' in directory 'proc' already present! 00:22:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xbe}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 856.169228][T25387] binder: 25381:25387 ioctl c0306201 200001c0 returned -14 00:22:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000100000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 856.214980][T25392] binder_alloc: 25372: binder_alloc_buf, no vma [ 856.221387][T25392] binder: 25386:25392 ioctl c0306201 200001c0 returned -14 00:22:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x60, 0x0}) [ 856.333262][T25398] XFS (loop4): unknown mount option [¾]. [ 856.364509][T25392] binder_alloc: 25372: binder_alloc_buf, no vma [ 856.371055][T25392] binder: 25386:25392 ioctl c0306201 200001c0 returned -14 00:22:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000003f0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 856.492512][T25412] binder: 25411:25412 ioctl c0306201 200001c0 returned -14 00:22:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xc4}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 856.721730][T25424] XFS (loop4): unknown mount option [Ä]. 00:22:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x120, 0x0, &(0x7f0000001900)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001840)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x0, &(0x7f0000001780)=""/137, 0x89, 0x0, 0x21}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000018c0)={0x0, 0x18, 0x40}}, 0x40}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x4, 0x0, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/213, 0xd5, 0x2, 0x18}, @fda={0x66646185, 0x8, 0x0, 0x33}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/159, 0x9f, 0x2, 0x3d}, @fda={0x66646185, 0x0, 0x0, 0xa}, @fda={0x66646185, 0x7, 0x2, 0x13}}, &(0x7f0000000440)={0x0, 0x28, 0x48}}, 0x440}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f00000015c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/70, 0x46, 0x0, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/148, 0x94, 0x1, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, 0x34}}, &(0x7f0000001640)={0x0, 0x28, 0x50}}}], 0x3c7, 0x0, 0x0}) 00:22:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x68, 0x0}) 00:22:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000400000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x150}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 856.870063][T25439] binder: 25433:25439 ioctl c0306201 200001c0 returned -14 [ 856.874230][T25437] binder: 25432:25437 ioctl c0306201 200001c0 returned -14 [ 856.909877][T25441] XFS (loop4): unknown mount option [P]. 00:22:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000600000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 856.923248][T25448] binder: 25432:25448 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x1d0}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 856.988964][T25450] binder: 25449:25450 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6c, 0x0}) 00:22:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1063084000000000000000001163483a0000000000000000000000000001000000000000000000004000001447aae81292ad7b715a5eab20a1330f0000000000000000000000000000000000004172d7000400000000000000143c76317e04e34600000000cc8a12312926925eee26087ed4d5b4c07617967dcfcd7dcdde48db0998458a8e34509b76ffea44b929fb99292e61994308a156cf9df2ab2d5bd8974ab50000c65a9851238d4b0a637d3e46078246b06036d90532"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000058650000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 857.246513][T25468] XFS (loop4): unknown mount option [Ð]. [ 857.253608][T25466] binder: 25465:25466 unknown command 977822481 [ 857.260063][T25466] binder: 25465:25466 ioctl c0306201 200001c0 returned -22 [ 857.263052][T25472] binder: 25469:25472 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 857.290861][T25474] binder: 25471:25474 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x280}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x14) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/34, &(0x7f0000000140)=0x22) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x400000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) epoll_create(0x400000000000) 00:22:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000810000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x74, 0x0}) 00:22:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 857.532291][T25491] XFS (loop4): unknown mount option [€]. [ 857.552077][T25493] binder: 25488:25493 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 857.658314][T25504] binder: 25500:25504 ioctl c0306201 200001c0 returned -14 [ 857.698005][T25503] binder: 25501:25503 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x300}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000ffffa8880000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 857.794635][T25503] binder: 25501:25503 ioctl c0306201 200001c0 returned -14 00:22:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7a, 0x0}) 00:22:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308fb118413000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9cd4dd5a71de744e48907393b60f7bc6c4d17dbd8aac8d30385e7fcd405a6cf9e42a36600b908ce71b1409e8c3f147343a7a27820ec23a2e498ccbe"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 857.932454][T25517] XFS (loop4): Invalid superblock magic number 00:22:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000ffffff9e0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 858.101719][T25544] binder: 25542:25544 ioctl c0306201 200001c0 returned -14 [ 858.135008][T25543] binder: 25541:25543 unknown command -83336432 [ 858.141537][T25543] binder: 25541:25543 ioctl c0306201 200001c0 returned -22 00:22:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x380}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x300, 0x0}) 00:22:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10630840000000000000000011634840000000000000000000000000000000000000000000000000001ad448c00000000000a1849744862258e5840d3e339f9d4000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000ffffffc30000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:22 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 858.396194][T25563] binder: 25562:25563 ioctl c0306201 200001c0 returned -14 [ 858.420747][T25560] XFS (loop4): unknown mount option [€]. 00:22:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000fffffff00000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 858.513280][T25574] binder: 25572:25574 ioctl c0306201 200001c0 returned -14 00:22:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x500, 0x0}) 00:22:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3ea}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 858.675688][T25584] binder: 25582:25584 ioctl c0306201 200001c0 returned -14 00:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbad13d9c3193a09687040822dd54d9e56edcd7083923a819fbdcf03cfb86a2b93348557a8138b03c2639769911159946fbec29249336ab5785bd7340b0bc5a60e84344b21c4b4aa22db62152ba335b3c425a1672a3ee4"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 858.770569][T25594] binder: 25590:25594 ioctl c0306201 200001c0 returned -14 00:22:22 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 858.840710][T25598] XFS (loop4): unknown mount option [ê]. [ 858.875918][T25604] binder: 25600:25604 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000fffffffc0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3f6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x600, 0x0}) 00:22:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000000000000000a918000000000000010000000000000000000000847a00"/88], 0xfffffffffffffe9e, 0x0, 0x0}) [ 859.008049][T25611] binder: 25610:25611 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 859.131361][T25624] binder: 25622:25624 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 859.189863][T25620] XFS (loop4): unknown mount option [ö]. [ 859.221590][T25632] binder: 25626:25632 ioctl c0306201 200001c0 returned -14 [ 859.236585][T25634] binder: 25633:25634 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x700, 0x0}) 00:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3fe}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000fffffffe0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:23 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x4010802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) fcntl$getown(r3, 0x9) 00:22:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 859.459290][T25644] binder: 25643:25644 ioctl c0306201 200001c0 returned -14 [ 859.505133][T25651] XFS (loop4): unknown mount option [þ]. 00:22:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000dff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x2000, 0x0}) [ 859.620358][T25663] binder: 25649:25663 ioctl c0306201 200001c0 returned -14 [ 859.636698][T25662] binder: 25657:25662 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x500}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:23 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 859.714699][T25666] binder: 25657:25666 ioctl c0306201 200001c0 returned -14 00:22:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x106) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1f) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r0, 0x4, 0x5, "decb722ba28dc0f9a9d1fe6f8a4dd1ae0046342c790fe6dd632679c14edb22ba0cf2be9e1f5cd551d5c184154d826467e45df0c3b816c5c9c272e66e0e84f98d4b3379a49e6b8041bab5c88af099dbd13d8196"}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) socket$l2tp(0x18, 0x1, 0x1) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x612e, 0x5, 0x7ff}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000240)=0x7ff, 0x4) [ 859.834010][T25680] binder: 25672:25680 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000088a8ffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 859.896539][T25684] binder: 25673:25684 ioctl c0306201 200001c0 returned -14 [ 859.955135][T25681] XFS (loop4): Invalid superblock magic number 00:22:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 860.021411][T25693] binder: 25691:25693 ioctl c0306201 200001c0 returned -14 [ 860.068949][T25700] binder: 25699:25700 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x3f00, 0x0}) [ 860.112389][T25703] binder: 25691:25703 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x600}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063089000000000000000001163484000000d00"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x1, 0x44}) 00:22:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000f0ffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 860.258810][T25712] binder: 25710:25712 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 860.368028][T25722] binder: 25719:25722 unknown command -1878498544 [ 860.372073][T25723] binder: 25720:25723 ioctl c0306201 200001c0 returned -14 [ 860.374496][T25722] binder: 25719:25722 ioctl c0306201 200001c0 returned -22 00:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4000, 0x0}) 00:22:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000007fffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 860.441294][T25715] XFS (loop4): Invalid superblock magic number [ 860.468873][T25722] binder: 25719:25722 unknown command -1878498544 [ 860.475342][T25722] binder: 25719:25722 ioctl c0306201 200001c0 returned -22 00:22:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:24 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308400000000000000000116305a8000000000da9000000dd00000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b6edaabac8ced4d0e1fbc435ff315d033b11038c9455dcc0219493d1d9744db6c80a7d2aa41e874caee14103a597ec731833655ca1c434f85de78b29c68cb617065ac60eb1b9dbed98dde5410eb"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 860.597236][T25743] binder: 25742:25743 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x700}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 860.711558][T25752] binder: 25751:25752 ioctl c0306201 200001c0 returned -14 00:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4800, 0x0}) 00:22:24 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 860.827232][T25758] binder: 25756:25758 unknown command -1476041967 [ 860.833972][T25758] binder: 25756:25758 ioctl c0306201 200001c0 returned -22 00:22:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000009effffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 860.932347][T25764] binder: 25761:25764 ioctl c0306201 200001c0 returned -14 [ 861.020409][T25762] XFS (loop4): Invalid superblock magic number [ 861.042646][T25764] binder: 25761:25764 ioctl c0306201 200001c0 returned -14 00:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYPTR64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYPTR64], @ANYBLOB="c39b4f5d9bff9a53b5fc7fe80e92fc9a71e03899919033c908f603aaa4e46ce40ef1f62bf49e830b73e7c0bc89b31f7a0641a122d756fd7d8199c93e77095fb7e1cfae85a75dbf8fe36f81b225ffd4a30ef2f2b5174335eef3b7e22c3199fb7977164791750dfcb29e61"]], 0x0, 0x0, 0x0}) 00:22:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 861.065705][T25776] binder: 25770:25776 ioctl c0306201 200001c0 returned -14 00:22:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4c00, 0x0}) 00:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000c3ffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x900}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 861.293105][T25795] binder: 25792:25795 unknown command 536871424 [ 861.299673][T25795] binder: 25792:25795 ioctl c0306201 200001c0 returned -22 [ 861.360937][T25798] binder: 25794:25798 ioctl c0306201 200001c0 returned -14 [ 861.405200][T25800] binder: 25799:25800 ioctl c0306201 200001c0 returned -14 00:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2bb175bef9bcce84c8b76000000000000000000"], 0xfffffffffffffe9e, 0x0, 0x0}) getpeername(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000140)=0x20, 0x4) 00:22:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6000, 0x0}) 00:22:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000f0ffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 861.567060][T25803] XFS (loop4): Invalid superblock magic number 00:22:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 861.612434][T25823] binder: 25817:25823 ioctl c0306201 200001c0 returned -14 [ 861.664147][T25825] binder: 25824:25825 ioctl c0306201 200001c0 returned -14 00:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 861.738918][T25830] binder: 25828:25830 ioctl c0306201 200001c0 returned -14 [ 861.751398][T25825] binder: 25824:25825 ioctl c0306201 200001c0 returned -14 00:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x60ff, 0x0}) 00:22:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xa00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000fcffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 861.939849][T25843] binder: 25840:25843 ioctl c0306201 200001c0 returned -14 00:22:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 862.066814][T25848] binder: 25846:25848 ioctl c0306201 200001c0 returned -14 [ 862.089756][T25851] binder: 25849:25851 ioctl c0306201 200001c0 returned -14 00:22:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0}) r2 = accept(r0, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000200)="0c0e893bd02cc0c33467ca4b6d46ab7d5018e88c997624f37e16794a0e2ce3ec1ab1e0a2ee3c9ad9abcd2fabbd1fd9254695f59c8f3008162bff93170e05f8fe928a40de2ac9b8e321299cb68e164d9080f102ec1ce5604ed645fae851d90e811458f0f794c0d19150d65beb74eceb56db1de34a383986a6ebe9bf8d8f6e12a6ef9c6d22e2316de0c7ce5f28cf68d3800dea3330d0dd8dd83d9f0d211579fad83c6e8a82ee7b5e085cd666a7940dba601eb1595b71ae60ad8d13645cc5dc81dc4e8e03f4e0a04c67ce0296c894f287a5c8ecad8c91084a040201b3ddfe2e53e2d8", 0xe1}, {&(0x7f0000000380)="c701a2bdd76ba9b0cb9399226447725fd807701b56e20232a2d5be8ca2d970", 0x1f}, {&(0x7f00000003c0)="3beda0da9712fdb9e84b0cef357a772a73eb6456aedf6d6a016dd7c2b0764cebbd21c43432602e9ee72f29b9c190445d9e00191d59473568a70db3f70bf3518ba3abc8f371b7c52c9f2018bed67311a2caa70ace2a622152b19ded1cf19d40d2e1e036e4d8f683c3b9461ba5e823c09db6d53cbc1c5e4783dde282cf", 0x7c}, {&(0x7f0000000440)="ab214762759cde0896afb4c8c6f26ba064ca371e3fd8bfe0b1378205b548f3bfb34c0e8a639ee1c5236ced8d53b1bf70e23241358e6f62210b2301f294bf560e0f10a428b916a36f607a5667cd1a4af2aeb8c88e4c6b", 0x56}, {&(0x7f00000004c0)="04bb7521844fee1b64092c90976f216e808c835d612a0e5d2f3bf6fc5f684aac27dca2140b94d2388664c36f49ec9fafef9b7f5ef1cb8b694824392b51f255c7165452c6d6fbdc0862858a321983b488128d2fa0c095d5bb3d", 0x59}, {&(0x7f0000000540)="635d2eef91c9f527a5ad64a1daf224f8b0433410e9f1c457f503566d6b733e3d74fb9f3d0eac2ea1faa79fd265fe0ed51a98a8cccf01b5d6a88a1465c55ff6af2fe72266afd3f7fb47d65f5a7761a26b68d97d21a82477776c4b975fc24c46f68cabe40094413e08a51d345948ec60bbf667d52d41b77408a165d81f022254844cf0bad3a580457d4b467f427483189179e44e0d62fe1fd5dff79095b5fc8de846a511820669f2d5f0fd7b608e7f97ee753a882fd912a6a851542c7bf3a1a839b2", 0xc1}, {&(0x7f0000000640)="47bdfa0ddf4fa66c668b125da4f475050d458dfc6f7d4333e61478", 0x1b}, {&(0x7f0000000680)="c8218b3e298252d16cd8d01626d0f4", 0xf}, {&(0x7f00000006c0)="6dde4000536704260d64873d1018b1076beb9d27bf8897777915b5fa712ff1c712f51167877db5d5bd30d5272b5218f39d8bcb35f3c37f915a0b4ed65071b487891a9c641c72d113bdca55bdb48702a939a7c4654cf576d186899429105d850a96d98cb98c8b34fe5a917ffcb29d42242e5c1b826bbdd73a0a8a40b8ad52d78320ac00157bb6bffe0052bb8b1d17b986ca2fd465a6e237b9ff39072c7bcfb3731ac1262da10be43517b03f34efc1672cefe4cedc3c36a3b1dc17712ac74e3bc036cf30e54091624697adbf70ad55ebc0b1dfc7ee9b1008798a7e0546", 0xdc}], 0x9, 0x0, 0x0, 0x44}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x80200, 0x0) 00:22:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6800, 0x0}) 00:22:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000feffffff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 862.229142][T25873] binder: 25863:25873 ioctl c0306201 200001c0 returned -14 [ 862.239354][T25855] XFS (loop4): Invalid superblock magic number 00:22:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 862.468341][T25889] binder: 25888:25889 ioctl c0306201 200001c0 returned -14 00:22:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000ffffffffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20400, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) 00:22:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xd00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 862.514083][T25894] binder: 25893:25894 ioctl c0306201 200001c0 returned -14 00:22:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6c00, 0x0}) 00:22:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 862.659240][T25900] binder: 25896:25900 ioctl c0306201 200001c0 returned -14 [ 862.731401][T25900] binder: 25896:25900 ioctl c0306201 200001c0 returned -14 [ 862.750044][T25915] binder: 25912:25915 ioctl c0306201 200001c0 returned -14 [ 862.774090][T25901] XFS (loop4): Invalid superblock magic number 00:22:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7400, 0x0}) 00:22:26 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @reserved}, 0x10) fcntl$setsig(r1, 0xa, 0x27) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x20) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000080)={0x4, 0x1802, [0x9, 0x0, 0x1000, 0xd4c, 0x100000000], 0x9425}) [ 862.853640][T25926] binder: 25925:25926 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xe00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 862.968100][T25932] binder: 25931:25932 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7600, 0x0}) 00:22:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200000, 0x0) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x3ff, @remote, 0x65b4}}, 0x24) ioctl(r0, 0x1000008912, &(0x7f0000000040)) pread64(r0, &(0x7f0000000000)=""/98, 0x62, 0x2) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000400)={0x1f, 0x7, 0x1, 0x6, 0x101, 0x4}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3f, &(0x7f0000000480)=0x3ff, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast2, 0x5}}, 0x0, 0x0, 0x6, 0x6, 0x8}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r2, 0xf9, "38ffc0ec16b7cd455092106d6ceac7f9fe0ea0f03edcbc50ad2e6f7d038a538bc273eafced8385cc91094e5b4c8b8d4b8b2d3043a40a7e20ea496636fc7cf467d782aa559cfa1d54ce3ac346660312efe895ef59c190be62709df345dc500a8da48f3cbb63a8fa2eb73931f8c22d276222f547f40f1f8d209aea56a3003ac9797fd1e9e86d478c7b0971c8ea387f04f7269365ac1d4173a79d1f638151fe6c800d92f75c416d547dc5961b8aa9e22d765dcc4fc08e3e313e0e24046a49d3e2d6f25a4b9adae536780490aa131603f0e16658006adee4b97f845f6a67a09d2a2501cd091a869be9bf5f33b1f6e13e1463e7c2c78eecc10d456d"}, &(0x7f00000003c0)=0x101) 00:22:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 863.166173][T25947] binder: 25944:25947 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 863.239284][T25948] XFS (loop4): Invalid superblock magic number 00:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 863.348424][T25967] binder: 25966:25967 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 863.394836][T25972] binder: 25969:25972 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000308c272cdb1e1c574e9178f390d5a65c3319657144088a37de8a2aa3a12ae6854e931368bf6669b1409f681db1537f784fc1342319807db1e4b257e02b809b93"], 0xfffffffffffffe9e, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x4}, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000004805000048020000180100001801000060040000600400006004000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000400"/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020300000041070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000a934d3d627333609c68cdc1393667122db113eae116790ef0f39eeeedcc50000ac1e0101ac141428ff00000000000000aaaaaaaaaabb000000000000000000000000000000000000ffffffffff000000000000000000000000000000000000000000000000000000000000000000000000ff0000ffff0000000000000000000090f4007f000000e200000001767863616e31000000000000000000006e6c6d6f6e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000f0001802000000000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000010000000100000073797374656d5f753a6f626a6563745f723a696e6574645f6368696c645f657865635f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x598) 00:22:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x1020}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7a00, 0x0}) [ 863.610451][T25986] debugfs: File '25983' in directory 'proc' already present! 00:22:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 863.675481][T25991] binder: 25985:25991 ioctl c0306201 200001c0 returned -14 [ 863.710236][T25986] debugfs: File '25983' in directory 'proc' already present! [ 863.710699][T25993] XFS (loop4): unknown mount option [ ]. 00:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 863.739091][T25996] binder: 25983:25996 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 863.791554][T26002] binder: 25997:26002 ioctl c0306201 200001c0 returned -14 00:22:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @multicast1}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x4e21, 0x7, 0x4e24, 0x1, 0xa, 0xa0, 0x20, 0x7f, r3, r4}, {0x7fff, 0x9, 0x5, 0x3a6, 0xfffffffffffffffd, 0xa86, 0x0, 0x4000}, {0x33cc, 0x200, 0x1, 0x4}, 0x8000, 0x6e6bbf, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x2, 0x2, 0x3, 0xffffffffffffffff, 0x5, 0x5, 0xffffffff80000001}}, 0xe8) 00:22:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x9600, 0x0}) [ 863.933066][T26011] binder: 26010:26011 ioctl c0306201 200001c0 returned -14 00:22:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 864.039445][T26017] binder: 26016:26017 ioctl c0306201 200001c0 returned -14 00:22:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 864.140125][T26017] binder: 26016:26017 ioctl c0306201 200001c0 returned -14 [ 864.151260][T26029] binder: 26028:26029 ioctl c0306201 200001c0 returned -14 00:22:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 864.196492][T26036] binder: 26021:26036 ioctl c0306201 200001c0 returned -14 [ 864.205333][T26027] XFS (loop4): Invalid superblock magic number 00:22:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 00:22:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2010}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 864.526338][T26057] binder: 26056:26057 ioctl c0306201 200001c0 returned -14 [ 864.539946][T26059] binder: 26058:26059 ioctl c0306201 200001c0 returned -14 00:22:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x6) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00'], 0xb) 00:22:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x50e000, 0x0}) 00:22:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 864.652223][T26072] XFS (loop4): unknown mount option []. 00:22:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 864.779204][T26080] binder: 26079:26080 ioctl c0306201 200001c0 returned -14 [ 864.814424][T26086] binder: 26084:26086 ioctl c0306201 200001c0 returned -14 00:22:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2300}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 864.837072][T26089] binder: 26088:26089 ioctl c0306201 200001c0 returned -14 [ 864.869068][T26080] binder: 26079:26080 ioctl c0306201 200001c0 returned -14 00:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000"/76], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x707100, 0x0}) [ 865.050304][T26108] binder: 26106:26108 ioctl c0306201 200001c0 returned -14 [ 865.060734][T26102] XFS (loop4): Invalid superblock magic number 00:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 865.128795][T26119] binder: 26118:26119 ioctl c0306201 200001c0 returned -14 [ 865.161400][T26121] binder: 26117:26121 ioctl c0306201 200001c0 returned -14 00:22:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x70e000, 0x0}) 00:22:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x3, 0x4, 0x7, 0x3f, 0x5, 0xc35, 0xe2b8, 0x9, 0x8001, 0x5}) ioctl(r0, 0x100000890e, &(0x7f0000000140)="11dca50d5e0bcfe47bf070ff1dc1f34dfebecfd3fd7645dc6a478d0b30aedf51c00c0f7fadd5282271932cadf17f6c85bb054f7736c5fcd369fa6818c8dd68") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 865.352781][T26136] binder: 26131:26136 ioctl c0306201 200001c0 returned -14 00:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 865.438306][T26145] binder: 26142:26145 ioctl c0306201 200001c0 returned -14 00:22:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x717000, 0x0}) [ 865.552455][T26163] binder: 26162:26163 ioctl c0306201 200001c0 returned -14 [ 865.562295][T26148] XFS (loop4): Invalid superblock magic number 00:22:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000080)=[@acquire, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 865.770381][T26177] binder: 26176:26177 ioctl c0306201 200001c0 returned -14 00:22:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200)=0x10001, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x80000001, 0xfffffffffffffffd, 0x8200, 0x7fffffff, 0xdd, 0x2997e694, 0x100000001, 0x10000, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x2, 0x15c, 0x9, r4}, 0xfffffffffffffe62) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000180), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000001163484000b93120486ce529fd7caa5100"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x760000, 0x0}) 00:22:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 866.031532][T26200] binder: 26195:26200 ioctl c0306201 200001c0 returned -14 [ 866.088661][T26204] binder: 26199:26204 ioctl c0306201 200001c0 returned -14 [ 866.110064][T26196] XFS (loop4): Invalid superblock magic number [ 866.140801][T26212] binder: 26207:26212 ioctl c0306201 200001c0 returned -14 00:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x37, 0x27, 0x13, 0x1f, 0x3, 0x6, 0x4, 0x4, 0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x960000, 0x0}) 00:22:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3f00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 866.436123][T26231] binder: 26225:26231 ioctl c0306201 200001c0 returned -14 00:22:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xe05000, 0x0}) 00:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 866.615858][T26244] XFS (loop4): Invalid superblock magic number [ 866.625885][T26257] binder: 26253:26257 ioctl c0306201 200001c0 returned -14 00:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 866.699054][T26262] binder: 26261:26262 ioctl c0306201 200001c0 returned -14 00:22:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xe07000, 0x0}) 00:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 866.957320][T26282] binder: 26278:26282 ioctl c0306201 200001c0 returned -14 [ 866.967271][T26287] binder: 26283:26287 ioctl c0306201 200001c0 returned -14 00:22:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x1000000, 0x0}) 00:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 867.127529][T26292] XFS (loop4): Invalid superblock magic number 00:22:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) [ 867.220528][T26312] binder: 26311:26312 ioctl c0306201 200001c0 returned -14 00:22:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x2000000, 0x0}) 00:22:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 867.334652][T26319] binder: 26318:26319 ioctl c0306201 200001c0 returned -14 00:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000, 0x0}) 00:22:31 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4800}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 867.522822][T26334] binder: 26332:26334 ioctl c0306201 200001c0 returned -14 00:22:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 867.577897][T26346] binder: 26345:26346 ioctl c0306201 200001c0 returned -14 [ 867.605881][T26347] binder: 26345:26347 ioctl c0306201 200001c0 returned -14 00:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:22:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x3000000, 0x0}) 00:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 867.794079][T26362] binder: 26361:26362 ioctl c0306201 0 returned -14 [ 867.824291][T26352] XFS (loop4): Invalid superblock magic number 00:22:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 867.909719][T26375] binder: 26374:26375 ioctl c0306201 200001c0 returned -14 00:22:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 867.963966][T26377] binder: 26376:26377 ioctl c0306201 200001c0 returned -14 [ 868.010711][T26382] binder: 26376:26382 ioctl c0306201 200001c0 returned -14 00:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4000000, 0x0}) 00:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000340)={0x2, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xce, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10630840000000000000000600"/24], 0x0, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000c0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2514080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') 00:22:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4c00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 868.129411][T26393] binder: 26392:26393 ioctl c0306201 0 returned -14 00:22:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 868.205835][T26402] binder: 26397:26402 ioctl c0306201 200001c0 returned -14 [ 868.238206][T26403] binder: 26401:26403 ioctl 89e0 20000340 returned -22 00:22:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:22:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 868.279204][T26403] binder: 26401:26403 unknown command 0 [ 868.284852][T26403] binder: 26401:26403 ioctl c0306201 20000280 returned -22 00:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x5000000, 0x0}) [ 868.381186][T26413] binder: 26401:26413 unknown command 0 [ 868.386792][T26413] binder: 26401:26413 ioctl c0306201 20000280 returned -22 [ 868.412310][T26417] binder: 26416:26417 ioctl c0306201 200001c0 returned -14 00:22:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 868.456588][T26412] XFS (loop4): Invalid superblock magic number [ 868.472077][T26426] binder: 26423:26426 ioctl c0306201 0 returned -14 00:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6000000, 0x0}) 00:22:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) 00:22:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x8080, 0x2) write$FUSE_OPEN(r2, &(0x7f0000000140)={0x20, 0xfffffffffffffffe, 0x5, {0x0, 0x10}}, 0x20) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/96], @ANYBLOB='\x00'/72], 0xb8) 00:22:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) [ 868.707153][T26444] binder: 26440:26444 ioctl c0306201 200001c0 returned -14 00:22:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x5001}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 868.791118][T26448] binder: 26445:26448 ioctl c0306201 200001c0 returned -14 00:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7000000, 0x0}) 00:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) [ 868.892394][T26461] binder: 26445:26461 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:33 executing program 2: r0 = socket(0xd, 0x0, 0x78) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x226, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x3}, 0x8) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="106308400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000008a7a613ba10d4f70d3ef83f05193190da24a7673d1f8ef49518d2442196f1ad42c922fa3afe7a8c703f6098eeb6cf9447ce7d5"], 0xfffffffffffffe9e, 0x0, 0x0}) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="bee9452f309568b9aafb07cade7bbef0e5dd2ce4d78a1326e7f1ac4e5af351d84868f5601f3c01e7003e5ee2bcd72a4ecea224a2b6b6da09b03521df7839c280f229e855e3d1", 0x46, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0)={r4, 0x8c, 0xd8}, 0x0, &(0x7f0000000380)="ec0eadd12a144f2f038773fa3354fee013a3d6e9d0d082c3f51092cdce914158f831bf29e344d208bb8691c786109f5fc19fb007a8ff0d2bae0209963ab54ea83658801a7046aea8f7c8ff404275a86baf3a46f8f66905d5d814ffa8a791f0ffe4c9322e9cd5a41e128a760dcd85e5b5acf46fa3d9608e9b8e52bbaadeb31bfc834bb9d016adc24c7b68ca0e", &(0x7f0000000440)=""/216) [ 868.966180][T26467] binder: 26463:26467 ioctl c0306201 200001c0 returned -14 [ 868.986771][T26465] XFS (loop4): unknown mount option []. 00:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x20000000, 0x0}) 00:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0x0, 0x400000, 0x0}) 00:22:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 869.179152][T26485] binder: 26482:26485 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000007fff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 869.271400][T26497] binder: 26482:26497 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0x0, 0x400000, 0x0}) 00:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x3f000000, 0x0}) 00:22:33 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 869.523948][T26505] XFS (loop4): Invalid superblock magic number [ 869.545019][T26524] binder: 26518:26524 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0x0, 0x400000, 0x0}) 00:22:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 869.620033][T26528] binder: 26527:26528 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x40000000, 0x0}) [ 869.686284][T26534] binder: 26527:26534 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6800}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="106308400000000000000000116348400000000000000000000000000000000000000032b9bde903ccdc989f78680d28be000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f9d0000000000"], 0xfffffffffffffe9e, 0x0, 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x1) [ 869.790014][T26542] binder: 26540:26542 ioctl c0306201 200001c0 returned -14 00:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000, 0x0}) 00:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x48000000, 0x0}) 00:22:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 869.927072][T26554] binder: 26553:26554 ioctl c0306201 200001c0 returned -14 [ 869.953198][T26560] binder: 26558:26560 ioctl c0306201 200001c0 returned -14 [ 869.963472][T26554] binder: 26553:26554 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000f0ffffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4c000000, 0x0}) [ 869.983400][T26551] XFS (loop4): Invalid superblock magic number 00:22:34 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1b, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x558}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r2, 0xffff, 0x8, [0x0, 0x7f, 0xfffffffffffffffb, 0x40, 0x9, 0x4, 0xfffffffffffffff8, 0x100000000]}, 0x18) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffee3, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000, 0x0}) [ 870.097176][T26572] binder: 26571:26572 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6a00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x60000000, 0x0}) 00:22:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000200000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 870.285409][T26583] binder: 26582:26583 ioctl c0306201 200001c0 returned -14 [ 870.316118][T26593] binder: 26591:26593 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000, 0x0}) [ 870.386362][T26596] binder: 26582:26596 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000200)=""/213) ioctl(r0, 0x1000008916, &(0x7f0000000080)="11dca50d5e0bcf86970000") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 870.439411][T26592] XFS (loop4): Invalid superblock magic number 00:22:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x68000000, 0x0}) [ 870.575061][T26617] binder: 26615:26617 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000300000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6c000000, 0x0}) 00:22:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 870.680382][T26628] binder: 26621:26628 ioctl c0306201 200001c0 returned -14 00:22:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6c00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x92, 0x50004) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000140)="d58e6be4ac9591247655d824daea73f3eab1ef5476a509398f85d859c05ab45e0b200959f19e17d0b09b16f2d70fa37e9e845383dd0b6fc51de891aca21246cf486a20959d9ecb96a9684750590e489e2ad76e191635795d68313eafb7d500853310e391be42dae3c4eb720e164cf389e82b018c35e9d7ece248e79639d130b9b9dd6824abf7881dba3533989cba2a5bdf3b2a96761762f08dbdf14898cbfa9a53c6b1d3e752c1de678f2473db11c19bc5", 0xb1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2400, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x5, 0x5ec1, 0x5, 0x0, 0x7fff, 0x96}) 00:22:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000400000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 870.895084][T26646] binder: 26642:26646 ioctl c0306201 200001c0 returned -14 [ 870.949169][T26650] XFS (loop4): Invalid superblock magic number 00:22:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x74000000, 0x0}) 00:22:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000600000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 871.206358][T26675] binder: 26674:26675 ioctl c0306201 200001c0 returned -14 00:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="ff01580048285a6babf4eacaad75d89a16bd8d6aca3abef7edaa26f5a0c6ec104a360204ecd88015758e62d26ea81282c613ec438b0dd796022ba8289f3f9926d0a4b0d9d9694c135ef77a98e06af19b20565d67a54c8729ebaf1bc8"]) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x42) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x2}, 0x0, 0x1, 0x7ff, {0x4}, 0x1, 0x101}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x80) 00:22:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7a000000, 0x0}) [ 871.410879][T26690] binder: 26689:26690 ioctl c0306201 200001c0 returned -14 00:22:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000a00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 871.501819][T26700] binder: 26689:26700 ioctl c0306201 200001c0 returned -14 00:22:35 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 871.545417][T26699] XFS (loop4): Invalid superblock magic number 00:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) inotify_init1(0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 871.622966][T26717] binder: 26714:26717 ioctl c0306201 200001c0 returned -14 00:22:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xff600000, 0x0}) 00:22:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:35 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 871.782241][T26728] binder: 26725:26728 ioctl c0306201 200001c0 returned -14 00:22:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7a00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 871.881128][T26741] binder: 26725:26741 ioctl c0306201 200001c0 returned -14 [ 871.885607][T26739] binder: 26738:26739 ioctl c0306201 200001c0 returned -14 00:22:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000e00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:36 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:36 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="11dca50d5e0bcf017bf070a731ebbaac59f588cc2fa9b2a8c143c4bb8f7544275efd8643a07a107d216bfeade3bbd843a93cd823fc75a9a4c065cdc0f18af0bec8db10bfbeae824e8070ed53702fb1bb4a47b3ae78edd9b3b5f4fe4cfe6e5068ba522610b046e5764f3da56e28045db674bcd97cdf0c44a2a78c83b4f658c2926fdc4f4ceb4bf95f0434e8f259627d8a4f04143a2b2f03c7e1d234f69d7cab") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000000000, 0x0}) 00:22:36 executing program 3: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000f00000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 872.214122][T26767] binder: 26760:26767 ioctl c0306201 200001c0 returned -14 [ 872.235975][T26756] XFS (loop4): Invalid superblock magic number [ 872.256336][T26774] binder: 26771:26774 ioctl c0306201 200001c0 returned -14 00:22:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000001000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x555555d09000, 0x0}) [ 872.322010][T26784] binder: 26760:26784 ioctl c0306201 200001c0 returned -14 00:22:36 executing program 3: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x8002}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x240, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfffffffffffffdbc, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000140)=0x5) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000180)=""/9) [ 872.532156][T26799] binder: 26798:26799 ioctl c0306201 200001c0 returned -14 00:22:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x555555d2b000, 0x0}) 00:22:36 executing program 3: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 872.609114][T26799] binder: 26798:26799 ioctl c0306201 200001c0 returned -14 [ 872.631995][T26808] XFS (loop4): unknown mount option []. 00:22:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000006000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x181000, 0x0) getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x4d, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x2, 0x1ff, 0x401}, &(0x7f0000000180)=0xfffffffffffffc40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x7}}, 0x10) [ 872.814302][T26821] binder: 26818:26821 ioctl c0306201 200001c0 returned -14 00:22:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x8003}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 872.869359][T26829] binder: 26827:26829 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000f000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x60ffffffffff, 0x0}) [ 872.947282][T26829] binder: 26827:26829 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 873.036079][T26836] XFS (loop4): unknown mount option []. 00:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000017c0)={&(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="574c899c5e1f4fb7a6db5df86b6066092952e06187b635e482cc8df7085679a77b4e7d6482f76f723bbbf5d9fd608529d0f5d5e6e036f62979bad1f09baa93996ffda7b7ce4f08df1ec175eab127b85e06d66c497cbad514f802e143d7c8934259b5ef0e45fc8200755fcb91ede4c65c0322dca7e4c7230d9c", 0x79}, {&(0x7f0000000200)="1a2502aded472000fbce386c92456103ab72b904b5d26fd4c38e8b0c6919b93bd5160a87d8fc5d6c6b7f40f22302890b5670fde4a433db644000ece13e26f80a4d2f0f87cbdeb9d3a7cce5f898c9e4b1b2eeb6db6399434f7ac71b53132309bc10f15aee0907f51b10d6509a0c2b3e940c5f1e6257e2762e02be0997929c6b63eb4b5cddfc369be28f65820ccc0a3904c6e40e8af105d4d83b3ab37b6acaf2e05f970273fc339f192030f93ca0a4ace5d97e3cf9844477ae2430dba573aed300dab6c58fd1b81ee480669400803c22c583ab6ba4c7f7685edc6008b6919c", 0xde}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f0000001380)=[{0x110, 0x0, 0x6, "fd9d0300cf21ff5ed010cd05c773dc49ef3ecd7b1f61712f31059caee57fecd1749b6542eb58623678d678f5dc6c7b162b3534eaaeb316b9760cdbda361abd3c9cf41fc3d3d2614c47a8e9f382a3ede7c811141ddcc78d0283679ce999d6de3b1019430c2785f364b87f4a406bc7655311313a073f28236a9e7142c7f363611d2d4ee120467ea3b7a6968ad1d8637dee613013de8fe271b899c538c34b53f4fa2eb42c8f57ba0c74aa84df869033474dee9644990d70e208731d5ebecbbe39259e8795687ef196adf74bad5fe61e07227cab12b9fc31d118eda8c47ddbc38e4b5c75ad941b5a06bf129e24fc324b8037f5ac83a3fc2808ac1b3bb421"}, {0x48, 0x11d, 0x1, "0d2a4085018f02a324e17425073f0061980b7d490cef01e7afc21428b58d584fd83d18f7b8dc23462c4e87811091cce613550723"}, {0xf8, 0x1, 0x800, "2703b87fdcd85bab71906f397fdb8bd269ad07893eceaa5e769322f246a1bd0d5187f7304ebb3fa32d9843d04cb1b57a97d41d644ee2665553daf2a1969b2fcd849590a846cc55c4a8ce17cf54b9b887c21112e468928dc07260711c7e368c5af84c670d2a74704aa66b783b5c46e1d023a6ffe4d579347c77f7113726347b6975297822ec569efc7b07ce99ac395de180888506b532a56e772487709d4547a48bc6f7124caabef98dc176c3d0e53ea11816699f645a31da19939e55d3fc00b5bd7a9fc14c66e0e6a0a15fa9f0a083710c59dfa82a73605996b478ae5ff524d528"}, {0xc0, 0x29, 0x9, "94b6e5c0f1d7dbeb31d8e4c578cc921cf83eaef797ea6c22d3ad3c67f98fa8069fd5544af1c8b2e1514058659184a86f2e72394efd8a313abed48f064287a866d2f06d65022f3c838c94df333b2c75a233a912370918b110ab96592a4ee16b7f0f268c444f4587faa26b827de6120144c33793278b19d409b9fcd8ea367aa83a72853a5bfe195c7bb403f6c34a4f85b784bb4784ccd434dc254924414099d089284c3e655d9fd4149a"}, {0x108, 0x116, 0x6, "b80199271e0fd88d95225cd8549a4f2c28b95d248c30d597fdb3f3bc75a25228a04b16c39b4926f58d7927082ae3efe16de3be3197fe801725190b3f29f5116e921a1f03a48c081092687c13608a675c26f6ee15d38bad60bf9261cb1e414a011bf896ee8956d41710f90487c87ce1aa209f96885d88ce525a7fc62dd382f3476325d6dd22d741e86835a98ae4537a794f5e233cb807e17e082a376a7afaa6fbbe51087a9c844cbc578158c32ab5b9a304f02b0618cfdebbe0e5e2edc6713b192676493f797f44de2958a3707d42131ff9f5c7db92f7ca8349ad0ecb2db826f86850a053ab02bf366678e7c887d06cfdff63"}], 0x418}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xa, 0x1}, {0xb, 0x4}]}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @union={0xd, 0x1, 0x0, 0x5, 0x2, 0x8, [{0xa, 0x1, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x30, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000001880)=""/75, 0x80, 0x4b, 0x1}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 873.126451][T26854] binder: 26853:26854 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000003000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:22:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x9800}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x760000000000, 0x0}) [ 873.258793][T26861] binder: 26860:26861 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) tee(r0, r1, 0xf0, 0x2) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x3, 0x9, 0x3ff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="8b360962db1b1b729a087616b0741063084000000000000000001163484000000000553689800000000000000000000000000000000000000000bb9b1e210000000000000000000000000000000000000000000000000000000000007a4916feb7331f4d0aca7ae217c8d4b9f76c021383e9b60337b3badbd8d13f5e6d51a6a693690cd2f48c4f83cba8e471d9dff642f553302ed0f5e29bbbc8287aef96675ca3274057b4082da0165fcbb104f4418e99857db5740a1ff7a6f13c630e1f2d4a778992c8e770ea3ac1b4e185cc7de6c51e0eb234cac114c8443b4a1be832b491d87223428e5cdd0bbd124aab9fa070953d8d5c751a9cc379f643f10d6a61d7906988c78f27985abd8c7166cde383ccf024f9708883a7915811b6bf04b6622051b8b67a72c2ba4c0b0b5cab255e31e16ecd67e78d929f0636425b8edb6196dc7b301f6fb134478d7cbb9f45d02b3e0d6641b78c24c7567f5f4ef0d9f524d029aefcfa5457151d88c5f41724d67c2bcce9532b16c37368ba86edc26fae7a299620953647bd875ee0687d30e474933d5618b280e18a8a5648976804b958553f84b488787b0870ef5fc321f1054262829647475647365c53a9d8b470aeaf196f2409ffbb4599d73eb9029d63160f8cc6cf9e1a0d0f5543f15272069d37c8c9d255623689e9d5b6ea1e141f4b5783c7347d7c7d013bdb"], 0xfffffffffffffe9e, 0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x100, 0x0) r3 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001180)=0xe8) getgroups(0x2, &(0x7f00000011c0)=[0x0, 0xffffffffffffffff]) r6 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002840)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002940)=0xe8) fstat(r1, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002a00)=0x0) getresuid(&(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0)=0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000003080)='/dev/binder#\x00'}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003100)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000003200)=0xe8) r14 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003240)=0x0) r16 = geteuid() getresgid(&(0x7f0000003280), &(0x7f00000032c0)=0x0, &(0x7f0000003300)) r18 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003340)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000003440)=0xe8) getgroups(0x5, &(0x7f0000003480)=[0x0, 0xee01, 0x0, 0xee00, 0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000034c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003500)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000003600)=0xe8) getgroups(0x7, &(0x7f0000003640)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0x0, 0xee00]) r24 = getpgrp(0x0) r25 = getuid() getresgid(&(0x7f0000004bc0), &(0x7f0000004c00), &(0x7f0000004c40)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000004d80)=0x0) lstat(&(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e80)={0x0, 0x0, 0x0}, &(0x7f0000004ec0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000004f00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004f40)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000005040)=0xe8) r32 = getegid() sendmmsg$unix(r2, &(0x7f00000051c0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000200)="2c95ef6efd8058f7b6d3239179347d0a0d7bee97f96876b86a72f0faf9cf771a0ca11e7d7ccc7f78416be25ba0a2084bd1b3f5b250b20206977a263cec805a8dc5fadc688cd5f718d9db37c18073ab9ace7d0acda4513bf4c21ed2f482c1bc8399a27e7d0a53068d07687c2805c24baaeced705ba49fa2301855f4e6e6ccaf1783c8d0f3e59191e64e3f2cb82f262d9e49fd08e240a392b52aec317aaadb0134e1e142f4181f3d2ddd2e6acc110397d28ad7f0bc1142e7c179479e9a9709020061a7a7e833c76d02f5315e66550cb7cb7960697175b701f99b3ab333dda6441b9848b4f7fcc8be0348b4cb997eaea3b800b41a802d", 0xf5}, {&(0x7f0000000300)="bd8e0edb8cfa25c7c35375b6dbbff402f3b1ca239b70b95e3fd8358fdf92bee5532cedc055f22ac1fb1ae6506e89d1ff7ffa9a8954b65be880da84a24a6df179e8c9ee8aecf8b4bf0ad56958d2a26bb880093ce189f88bb739ea580d49fba25e00666ed7c8b7b50728aadfa0a91f815b6474521982fe7c5cc86acebd8a7095bd1a2c30d3a864113b84e1114085529b9c856f6b116facc1c63b5945fcbfcfe4bcfc12b29473b614ef0ef77831786139c8fde8748f5b12593118", 0xb9}, {&(0x7f00000003c0)="4b31d1bd0f67b9c014a96b9c8be344dba467826b7501c01aa208f962c48398ac2a954a044a3c88a59cb15f61a32dd118208e2625029bf5f8cdb5e4fd1e36abcb07898e8ea162c1daefc2a0f52a07515248f75e581bf317f7b042e543dce29fcd39a3f3717e71b205ff83087bf48755843102e5e29bcfd674b667c1f893db4f", 0x7f}, {&(0x7f0000000440)="273b16343ac813d9008a3683214a86f5784cbd0240206b7871ec4d8dfc97746272daf447c7a1ddd5edb84d2859568da1f3593224f8e70b46c1c2821741d80920d7ebce546e4ce9f91889fde6e84b8a09e8d729fc87d075b0afe2ef7a9462f387593317acac5892ca3986c017c1d2d1b7e7be9833d432071e50e3", 0x7a}, {&(0x7f0000000700)="1c83b456fce7d0dcf6511896f2d497d27fd351bed9268b90be825f545789fc3ee97a47989ac169e8a6e651207c2b94777e3dbc7b994376f5b7ccca50a85fac0f12bcb34451113415a0d4cfe9c5de602ac3ea44b76cbd0b2ed3dd87942bcd1ac3629530b8d79fba8eaf00b34346eb83cad295a7a6e8a2ddd70811b74e82dc5ef8ca3b32fc801c4f03b41afa825a4048d34ca2147d70efe1ceb977b791013e51044fd688ae36dbcbdecd1b90403440c343d8566864668cbe6b621196332d9182b839e94b87", 0xc4}], 0x5, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x4000040}, {&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)="828832b87c83d1a0178673c82970bab758d267045e3fda3d538d36501e82727119250bce7415e824070b9ce9bd25798d4cb96e3b0410ba703aea5ef4ce745e5da3545def690fd905565f3823939bd9399b3cc33c16e41d0a2d7b5752a7175cd67090374d", 0x64}, {&(0x7f0000000980)="abf60b696ee1b95ea0d7de8873f57c413986c470b32d01021b53e075f4bc02c6d477cb437d49241f0e12f668ca179c2ed85fd430b8f91607ca832ff567e0acf0252b8274ba7118f2afad7619596257ff1c1247d16afef8a090eb14dad531a21fd2b1bbbe7b17acbc088fa44d4634e1c92af3c28f0f00d41c", 0x78}, {&(0x7f0000000a00)="7d7c49d9e3d83ec46be51a1228b4e606ea3bce2e22175c949bb49b2e9b982c43bc2a8a17368b2031f19d03ce191d85cc0f2831c840d4e138f1ec3a15bd47b4f047c97639342204f56a0b3dd7cf9bcb6fb2acc1cd470c1def17e2aa7fa890ce25c28f13f0de0fdf86d3580d58714545eedf67d84038d58d27d4e9d3758b53cefd304b954afbc9b7850d218c2ed8749842", 0x90}, {&(0x7f00000004c0)="e012ac7f281288bec4277764f4623dcaf16312157c15894920d699eed3b4c7b396285264364ea3d1a0ae1c4cfb71b062b25d97c105", 0x35}], 0x4}, {&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000b80)="1ca154c4d701bbaefe1f8d9d602a018499460f4279d6ccf2397dff0c8084b8a2c3435347bf9fe2b1252422317cc0b047d622349cee87acb0421d384e4a711b11af9637f56ee46b78e6d0a7fa06175ad9a8a82f040c6a21d4a398d668a30bb2ae53822c6e55808b8c46af2eddc5f28d6707013f6b6852530558fe34085368f16bc94de9675d12f77e889eaf69d646eda289183ba6bcf3ce78a75beaa9e1505c01f0fe598d2de42635028f8b70874f56edd52c", 0xb2}, {&(0x7f0000000c40)="f199a310d6041d0519b71b12cfad38527330d32f664d85629dfc7471e3fda87d79ee4bc21dd68c9c7fb19d59e13fabda4959103888947fbc8a131858629a354cb12c794f8f2c5b25e671845130f869ba4f7e48332848dfeceff7a36649a256e02be130a3bb215371d8f64402e26a2f518ccc34bc50192de5e058e95bbd595a1243cfd71905d11257a7432401473b264c9bfdc509a475376b5db9ec7bad8fd885", 0xa0}, {&(0x7f0000000d00)="4e1773c6cdb8d31955c055eb0d9c0e6e1bd879a09296ce41be5456498535100808908911b504b7f94c2113681f4f593e40262c5620affc8c20657b84ff8956b4a912b5e6f5", 0x45}, {&(0x7f0000000d80)="408ce654c342c0dda0d9242a7dc2884eed2a1417d4e1d46eff79c8bf928c45c1f81303739a6b614c4fd2a44b2a2208cefebc4f56c82199f26243562b944124cfcd7e3b6eedc268cdb29a5e0f6229a786872c57cafea847895bced290487410213ae49172a9e4f48e67856f3e07a50e840c10f51fe01f44e085fd1aacf1026c0c2caf6a78efcefe95f856514aa6d60e45e7d383184b9d883ee51e0277c5a6e6136b35339af553453c8afc7fc179728a92630c61b3c60c5a3092a758de6b9d0fd58dd07266d94108f764dbb5d4f1ce3d6c5f6503cfc1d98e47ec1ae4fa244a39", 0xdf}, {&(0x7f0000000e80)="9c16e868e6362d2bc206d2654b8d1b81be", 0x11}, {&(0x7f0000000ec0)="009b5b797577c83bc0ab22585bea696a023c85500dbcfe4fd020886f91f3bfe51763757641c8362f70dbd01a996a97606e1a1d2e568db21ff34cc2387e6bc5ed70b94b84dbf8b41b8dd21be724ad69c0a0219112ac2d7282e4ade70824f761bb3b0f299d443f5fbe2a9785e1b984ae25de4918e63e5ae09f61e54ddee33164438704656ba37558bec12154ba48479310f27446d2827c4aed77ddf02957e7f2dd19c1b3cfe2edc958746827267e5d62a5aec0c67a9ebf02d8be3e76066a804c22cd95cbb657a4a7ebf6dbc25b", 0xcc}, {&(0x7f0000000fc0)="44548e", 0x3}], 0x7, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r1]}}], 0x40, 0x40000}, {&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000012c0)="5154f917da74d16925e1dd5a9f90ce54323cee17d35e04712f3027631f9fa86977aaa7400c916918406ed6a19ebb1e2cb1e077dbfba7b1a8ae38976c2336bf75493446f8a223ea62243ace5de83a2299dbe84ec8c101e70d18c299f88e668293ddc2e0a5d0e726605af850527d9dc58fd7d70ab7cd97618dbfdea41010692c0354b79dfe17be6ebd445b2b9744aa5aabcc5b12de441771defb947ef07d05aa2e098e980be73312faf9230879146540", 0xaf}, {&(0x7f0000001380)="3bf45f49b66f03ebb87b563b4724da8b728878483a6f6c2589a916", 0x1b}, {&(0x7f00000013c0)="6a0204d0d6fdba2efa12d1e3e0f2e3ccf36a9b7d0e6fc191a0ca837961029ff4cafcbbc0b78b38a7ed59370a6d16f91d25b198af1c7ee458b60dcc180a224d58142d0acd09a8b13dc88ae5ad1c791f1640", 0x51}, {&(0x7f0000001440)="3c1e9896f740cc3d4c8786df96a26cad1271ddf634c22cd8906abbba872b55efa336685dca069381d58e39fcfa9a4102f6f2f30bea94cbc21cce51860f512916fef172c3de325b0490eed49db10b196e58f0db72239377bc176b0e7fda5cb2026be92533a8a7025179d1094e956763ca709aa21ca54d8023f900e56ad56a9f513e03410864dc4e039ea3e3f346efcdf2eb8695f747d8063add58ed4517a0beb04c1d0bd7c4bd34ff0e672dbb6bad0eefd265bf175f957c719bf43a520439e4f19a2e72225521912f4585a0a4936d085b7fe72eff08a63503c583cf34c081545f67a282146a48d0530e", 0xe9}], 0x4, 0x0, 0x0, 0x10}, {&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001600)="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", 0x1000}], 0x1, &(0x7f0000002640)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}, {&(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)="6290f879eca157759cdf1d780cdf893e984a2840071769f8fa860aa37ffc84307158fa32a030b119dbdd6b49356109693cb1011352b5098001acdb1ef82389047c3e4e73efe489f6d96c0fcdb48e69e5df752df18f92850d5a9908807883087a86460c5402e3a6b1312a4445d7cbf18e88fafd2317d405a1630d5a8954b8666379f8006b212ff95ae6ed638a0f80cf958e64efca5bc24aa7f07c5c2942d03d0dc30599d12b7749a52b6e7c8a9291a05fa39866359888bc76a77c5ead616c1dcba7670e989e8090c0b99236affae2f465b2e6cdb230fe076ff00c892c2fe87550e9089efa180498", 0xe7}], 0x1, &(0x7f0000002bc0)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb8, 0x800}, {&(0x7f0000002c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002d00)="6a8ef5662cb3f35992ffa521d9a2e63e2574420bb9957503bc15e7ac93acc75676c66656db62d9dfc5035cc69df08b1a050b37cb2b73d0d683b0b3a2636d9c5215583fe23e2c49f767e0816eeae1b2120352c31db88e67e77fd19f8dda9b22868903287c87be60cf69a18cd5fd20ae12c16c7017d2d5d866f44d8b65180dfd2880196ddddb9240221508b720c4c07bfe850a95f312f08efda13867a64d9d7ca7a8c7db72509797e46a19a38febb102ec06598302bbcf64b267457882", 0xbc}, {&(0x7f0000002dc0)="ff2baee9029d63bf7cbd2f3665a1728f144796d2d60962fd20e0ed364a56e3d5882f14c90ee65358e2ebc6bf0586b6eca7664ac688876ae915741903233cf3d815f13c5d052f127e3e7194dfe6eef62816c70e0ef2ea5c254b53c5a0d6d2f27ec3a96ea9a31423d12605cf689cb513ad743194be89e0e0df182e38f2415094c9f829d2bfc534115345037440462771c7355b96d0c2ebb8b38f04bbe364149c12dc5749298e0e461662e5a2e873927cfe2fe01357e0e3ea3758d0d4c3bccf57079c754c7cf1e668633d56bea94db0bffe7984a95c3e1ae85545bbe6332e6a69ecea7b109c279371932664d7d1ef62c345f8055628478f1c3efe", 0xf9}, {&(0x7f0000002ec0)="2320ac6a9423b55365f620824a801a76768a0684068957ded178ed4cc71ab8483afd5464ce004492e49c57af4f72a88ea55becd132ffd6087562fc51bc72dc38ce7b0bf2de86fb9b0b801d6474e0b1498fe1830b792f948a1aaf0c6604facb2cfa7c9f9b02a17805a8c977e2cde3d669b845676448a809affede5a754819d99b59540155a37ebcdb4210645b7f2fb01e707d86678d484f7893aa285aa61dd2f93e74b72d32c451fcfc76de11458faaddbc07fadb38509954", 0xb8}, {&(0x7f0000002f80)="4ad378cc4f7b205ad275f5466a3343bdcafc5c2c9b61ac5b720ca7ac17a764b73ee7ed0a610cba4c1213d1c38c9a6a64e0bc263c541e0f1c7cf03c3e2d54b5fb5913f70364ab8b854acefb2dd2af06efeca7a080d8b644cfbe2c0193cd263bcf8776980b808e83872f051ff635b964b80f61d0d1d90cfb7952ead89637a4d52a555188", 0x83}], 0x4, &(0x7f0000003680)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0x110, 0x4000000}, {&(0x7f00000037c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003840)="9f87cf99d02223d8754bf7d5be8e398dd0ea131bae8b6ff4775e2f50e730cfbee7a8e10c8f06ea0f14c936a2dd7c6b2f22d2dbb4272a59eb66bb16096c4abe7cac6e4eef6a65e77b92a3f3af3e47a75a2e03202fb78a51c580116e5a80e2c2b4de6fcfcaed53bf04b40c2d609767f63587d09e6f6d467b0c5e3b690d3b74e7c51714ce668e56f81cc47b3ec4293e3abd06e4714ec0e5f7e1af6ea205a854bfeb725d039bea58f91c75135e1a14556bc540ab", 0xb2}, {&(0x7f0000003900)="a69ffc566463838f55c7a864965a496d8f49f1c0e69fd70a045c9752faffab714d865173633aa5e818c4e903805912e19125e96bcc86fae8964d137c6096d2773b179fb5827625089c220f60f1d99f0c28ca73c76f7c48bc8e055537e956cbc7a3d129c762f3975596457e5c8e1714ae7bb2aac4ffd5c75b67bf534516ad0103c5bf4ec7242a0674b68867a875bcb34a5fcf2e16bb0d9ee4bb25015340e848cbb2bef374735ec9c5aa6b27d826fc5838b5e12dab51de29b3b5c3e69062a7", 0xbe}, {&(0x7f00000039c0)="7b3c723c316291c93564423bb337e3bc5586d3f6fe25265c3484e107a82bd8a6ec4b5301dd4c9d07614afeafa05f930548a4db293d3b387baf23420eb6cd403f009f46dcde9916cd3da0620ea0f517028ef89880c96fb31006762e221b0244abf84fe76b3542b8730aeb6521fd096042979974495c70f45604ba5f561c387953dddea169", 0x84}, {&(0x7f0000003a80)="3920cb95fecd4074fdb36abda967ee2fa906de3259c41306d964664026ae322934852ddfec14391e", 0x28}, {&(0x7f0000003ac0)="67101e6ffb923e53cbc7c390923330404ad1dc0b08b4980dd546ca5c7e38156108c5ef720a74fafe500c43b629082ae597667537f7af6dc48923dab86aef8a343e6c481d57ff373c11eb41aae3a7a9588cdaa2c6598273ab8e726f36fece939006a9df0fdefdf858361d", 0x6a}, {&(0x7f0000003b40)="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", 0x1000}], 0x6, &(0x7f0000004c80)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}], 0x38, 0x10}, {&(0x7f0000004cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d40), 0x0, &(0x7f0000005080)=[@cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r31, r32}}}], 0x40, 0x8000}, {&(0x7f00000050c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000005140)}], 0x1, 0x0, 0x0, 0x80}], 0xa, 0x10) 00:22:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000006000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 873.416967][T26874] binder: 26873:26874 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) 00:22:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7fffffffefff, 0x0}) [ 873.504814][T26880] binder: 26878:26880 ioctl c0185879 20000000 returned -22 [ 873.528557][T26883] XFS (loop4): Invalid superblock magic number 00:22:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 873.588185][T26895] binder: 26878:26895 unknown command 1644770955 [ 873.594589][T26895] binder: 26878:26895 ioctl c0306201 200001c0 returned -22 00:22:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xbe00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 873.672424][T26880] binder: 26878:26880 ioctl 540f 20002a00 returned -22 [ 873.711551][T26903] binder: 26901:26903 ioctl c0306201 200001c0 returned -14 00:22:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) 00:22:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 873.769387][T26909] binder: 26878:26909 ioctl c0185879 20000000 returned -22 00:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x960000000000, 0x0}) [ 873.815155][T26880] binder: 26878:26880 unknown command 1644770955 [ 873.821707][T26880] binder: 26878:26880 ioctl c0306201 200001c0 returned -22 [ 873.844394][T26914] binder: 26878:26914 ioctl 540f 20002a00 returned -22 00:22:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000c000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) [ 874.005509][T26918] XFS (loop4): Invalid superblock magic number [ 874.028936][T26935] binder: 26932:26935 ioctl c0306201 200001c0 returned -14 00:22:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf, 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x8, 0x0, 'client0\x00', 0x2, "7a1ba8c7260c3366", "fb7c5317936f605651f344b1fde9e0af44c0fb7f8671797a07f358a5bb592cbe", 0x6, 0x1000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={0x0}}, 0x0) 00:22:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000ff0d000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x70710000000000, 0x0}) 00:22:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 874.256818][T26955] binder: 26954:26955 ioctl c0306201 200001c0 returned -14 00:22:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xc400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={0x0}}, 0x0) [ 874.351224][T26961] binder: 26960:26961 ioctl c0306201 200001c0 returned -14 00:22:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000e000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x90d05555550000, 0x0}) 00:22:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x200, 0xd, 0x400, 0x5, 0x8, 0x2, 0x6, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x4, 0x3, 0x4, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x3, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x472e, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x1400, 0x80000000, 0xaa74, 0x0, 0xd0, 0x92, 0x5a96}, r4, 0xf, r0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000200)={0x3, 0x7ff, 0x7ff, 0x40, 0x10001, 0x20, 0xfffffffffffffff8, 0x100, 0x8, 0x7ff, 0xe79, 0xbec, 0x1, 0x4, &(0x7f0000000100)=""/201, 0x8, 0xffffffffffff0001, 0x37}) accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8000, 0x4) 00:22:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={0x0}}, 0x0) [ 874.595289][T26979] binder: 26977:26979 ioctl c0306201 200001c0 returned -14 00:22:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000f000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 874.683624][T26980] XFS (loop4): Invalid superblock magic number 00:22:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xb0d25555550000, 0x0}) 00:22:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000003f000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xd001}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 874.911262][T27011] binder: 27010:27011 ioctl c0306201 200001c0 returned -14 00:22:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x200, 0xd, 0x400, 0x5, 0x8, 0x2, 0x6, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x4, 0x3, 0x4, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x3, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x472e, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x1400, 0x80000000, 0xaa74, 0x0, 0xd0, 0x92, 0x5a96}, r4, 0xf, r0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000200)={0x3, 0x7ff, 0x7ff, 0x40, 0x10001, 0x20, 0xfffffffffffffff8, 0x100, 0x8, 0x7ff, 0xe79, 0xbec, 0x1, 0x4, &(0x7f0000000100)=""/201, 0x8, 0xffffffffffff0001, 0x37}) accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8000, 0x4) 00:22:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xe0500000000000, 0x0}) 00:22:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000040000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 875.079053][T27028] XFS (loop4): unknown mount option []. 00:22:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xea03}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 875.292841][T27042] binder: 27040:27042 ioctl c0306201 200001c0 returned -14 00:22:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x200, 0xd, 0x400, 0x5, 0x8, 0x2, 0x6, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x4, 0x3, 0x4, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x3, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x472e, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x1400, 0x80000000, 0xaa74, 0x0, 0xd0, 0x92, 0x5a96}, r4, 0xf, r0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000200)={0x3, 0x7ff, 0x7ff, 0x40, 0x10001, 0x20, 0xfffffffffffffff8, 0x100, 0x8, 0x7ff, 0xe79, 0xbec, 0x1, 0x4, &(0x7f0000000100)=""/201, 0x8, 0xffffffffffff0001, 0x37}) accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8000, 0x4) 00:22:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xe0700000000000, 0x0}) 00:22:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000006558000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 875.600335][T27067] binder: 27059:27067 ioctl c0306201 200001c0 returned -14 00:22:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 875.651044][T27065] XFS (loop4): unknown mount option []. 00:22:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000060000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x100000000000000, 0x0}) 00:22:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x200, 0xd, 0x400, 0x5, 0x8, 0x2, 0x6, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x4, 0x3, 0x4, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x3, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x472e, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x1400, 0x80000000, 0xaa74, 0x0, 0xd0, 0x92, 0x5a96}, r4, 0xf, r0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000200)={0x3, 0x7ff, 0x7ff, 0x40, 0x10001, 0x20, 0xfffffffffffffff8, 0x100, 0x8, 0x7ff, 0xe79, 0xbec, 0x1, 0x4, &(0x7f0000000100)=""/201, 0x8, 0xffffffffffff0001, 0x37}) accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8000, 0x4) 00:22:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xedc0}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 875.905638][T27092] binder: 27091:27092 ioctl c0306201 200001c0 returned -14 00:22:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 876.013567][T27100] XFS (loop4): unknown mount option [À]. 00:22:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000005865000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x200000000000000, 0x0}) 00:22:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x200, 0xd, 0x400, 0x5, 0x8, 0x2, 0x6, 0x6, 0x1, 0x471, 0x9d, 0x3ff, 0x4, 0x3, 0x4, 0xffffffffffffffc1, 0x2fc7, 0x0, 0x9, 0x1, 0x3, 0x2, 0x0, 0x8, 0x4, 0x7ff, 0x7bd2, 0x9, 0x472e, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x200}, 0x1400, 0x80000000, 0xaa74, 0x0, 0xd0, 0x92, 0x5a96}, r4, 0xf, r0, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000200)={0x3, 0x7ff, 0x7ff, 0x40, 0x10001, 0x20, 0xfffffffffffffff8, 0x100, 0x8, 0x7ff, 0xe79, 0xbec, 0x1, 0x4, &(0x7f0000000100)=""/201, 0x8, 0xffffffffffff0001, 0x37}) accept4(r2, 0x0, 0x0, 0x0) close(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8000, 0x4) 00:22:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xf603}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 876.222612][T27117] binder: 27114:27117 ioctl c0306201 200001c0 returned -14 00:22:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x300000000000000, 0x0}) 00:22:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000081000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x400000000000000, 0x0}) [ 876.421432][T27132] binder: 27131:27132 ioctl c0306201 200001c0 returned -14 00:22:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) [ 876.523459][T27139] XFS (loop4): unknown mount option []. 00:22:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 876.615573][T27145] binder: 27143:27145 ioctl c0306201 200001c0 returned -14 00:22:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfe03}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000f0000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x500000000000000, 0x0}) 00:22:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) 00:22:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 876.945382][T27169] XFS (loop4): unknown mount option []. 00:22:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000dff000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 877.031716][T27181] binder: 27180:27181 ioctl c0306201 200001c0 returned -14 00:22:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) 00:22:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xff00}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) 00:22:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x600000000000000, 0x0}) 00:22:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000fffff00000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) [ 877.385682][T27213] binder: 27211:27213 ioctl c0306201 200001c0 returned -14 [ 877.398479][T27200] XFS (loop4): Invalid superblock magic number 00:22:41 executing program 2: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 00:22:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x700000000000000, 0x0}) 00:22:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000100", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xff0f}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 00:22:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00pYds /'], 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3795f18d19721b69896493dd86dd20a3edf1c54829967d6e1645148923d59cbd6688"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 00:22:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000200", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 877.773834][T27248] binder: 27240:27248 ioctl c0306201 200001c0 returned -14 [ 877.800891][T27245] XFS (loop4): unknown mount option []. 00:22:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x2000000000000000, 0x0}) 00:22:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x20000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) [ 878.007221][T27266] device nr0 entered promiscuous mode 00:22:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000300", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 878.125843][T27272] binder: 27269:27272 ioctl c0306201 200001c0 returned -14 [ 878.175959][T27276] XFS (loop4): Invalid superblock magic number 00:22:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000400", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x3f00000000000000, 0x0}) 00:22:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x30000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 00:22:42 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000600", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 878.536042][T27266] device nr0 entered promiscuous mode [ 878.605123][T27307] binder: 27305:27307 ioctl c0306201 200001c0 returned -14 [ 878.699019][T27303] XFS (loop4): Invalid superblock magic number 00:22:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4000000000000000, 0x0}) 00:22:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x182) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:22:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x40000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000a00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) [ 879.065742][T27334] binder: 27331:27334 ioctl c0306201 200001c0 returned -14 00:22:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4800000000000000, 0x0}) 00:22:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000c00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 879.204161][T27339] XFS (loop4): Invalid superblock magic number 00:22:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) 00:22:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000e00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 879.357986][T27365] binder: 27364:27365 ioctl c0306201 200001c0 returned -14 00:22:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x47012}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x4c00000000000000, 0x0}) 00:22:43 executing program 3: r0 = socket(0x2000000011, 0x4000000000080002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffa888}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x2, 0x0) 00:22:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000f00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 879.701320][T27390] XFS (loop4): unknown mount option []. [ 879.732480][T27389] binder: 27388:27389 ioctl c0306201 200001c0 returned -14 00:22:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6000000000000000, 0x0}) 00:22:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000001000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x47021}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 880.001371][T27415] binder: 27414:27415 ioctl c0306201 200001c0 returned -14 00:22:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:44 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 880.075826][T27424] XFS (loop4): unknown mount option [!]. 00:22:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000003f00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6800000000000000, 0x0}) 00:22:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x47030}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:44 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 880.391319][T27451] binder: 27447:27451 ioctl c0306201 200001c0 returned -14 00:22:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:44 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 880.509609][T27461] XFS (loop4): unknown mount option [0]. 00:22:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x6c00000000000000, 0x0}) 00:22:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4703f}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:44 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:44 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000006000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 880.792049][T27481] binder: 27480:27481 ioctl c0306201 200001c0 returned -14 [ 880.820591][T27484] XFS (loop4): unknown mount option [?]. 00:22:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7400000000000000, 0x0}) 00:22:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xe0000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:45 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000586500", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 881.101969][T27510] binder: 27509:27510 ioctl c0306201 200001c0 returned -14 00:22:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:45 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x7a00000000000000, 0x0}) 00:22:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000008100", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 881.275992][T27515] XFS (loop4): Invalid superblock magic number 00:22:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000ffffa88800", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 881.463703][T27546] binder: 27545:27546 ioctl c0306201 200001c0 returned -14 00:22:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6a0000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xffefffffff7f0000, 0x0}) 00:22:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 881.678434][T27564] binder: 27562:27564 ioctl c0306201 200001c0 returned -14 00:22:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000ffffff9e00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0xffffffffff600000, 0x0}) [ 881.871760][T27569] XFS (loop4): Invalid superblock magic number 00:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 881.956437][T27594] binder: 27593:27594 ioctl c0306201 200001c0 returned -14 00:22:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000ffffffc300", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x0, 0x2}, 0x14) eventfd2(0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x1000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 882.264147][T27614] binder: 27613:27614 ioctl c0306201 200001c0 returned -14 [ 882.277283][T27622] binder: 27613:27622 ioctl c0306201 200001c0 returned -14 00:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000110000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:46 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000fffffff000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 882.459812][T27640] binder: 27636:27640 ioctl c0306201 200001c0 returned -14 [ 882.472092][T27623] XFS (loop4): Invalid superblock magic number 00:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040426968fd00000000116348400000000000000000f6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:46 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000fffffffc00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 882.675074][T27658] binder: 27656:27658 ioctl c0306201 200001c0 returned -14 00:22:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffffe5, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffecf, 0x0, 0x0}) 00:22:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000fffffffe00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:47 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 882.932600][T27681] binder: 27677:27681 ioctl c0306201 200001c0 returned -14 00:22:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x3, 0x7, 0x9, @broadcast, 'ip_vti0\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 00:22:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 883.128830][T27685] XFS (loop4): Invalid superblock magic number 00:22:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000dff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:47 executing program 2: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x500, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000088a8ffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:47 executing program 2: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 883.580499][T27738] binder: 27736:27738 ioctl c0306201 200001c0 returned -14 00:22:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:47 executing program 3: io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 883.640528][T27746] binder: 27736:27746 ioctl c0306201 200001c0 returned -14 00:22:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000f0ffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x7}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400000000000000000116348400000000000000040003da220e30000000000000000000000000000000000000000000000000000000000000000000000000000001a765b4bfbffffff00"/88], 0xfffffffffffffe9e, 0x0, 0x0}) [ 883.722112][T27748] XFS (loop4): Invalid superblock magic number 00:22:47 executing program 2: r0 = socket(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 883.901328][T27771] binder: 27767:27771 ioctl c0306201 200001c0 returned -14 00:22:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000007fffffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:48 executing program 3: io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:22:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = accept4(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @initdev}, &(0x7f0000000240)=0xc) bind$packet(r1, &(0x7f0000000280)={0x11, 0x17, r2, 0x1, 0x0, 0x6, @local}, 0x14) 00:22:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:48 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000009effffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:48 executing program 3: io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 884.321138][T27795] XFS (loop4): Invalid superblock magic number 00:22:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000c3ffffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:48 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x900, 0x58) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) sendto$x25(r1, &(0x7f0000000140)="fd897fb7882b081166a60c765fb06057ded2fa9b4c0eeea801498763033697edcdac7b891ca7ce5d513b916cb98c3930cb5f1ccafd1d5a12ce6208942337ca231ea5d872094c", 0x46, 0x10, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) 00:22:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000f0ffffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x5000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:48 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 884.640094][T27837] binder: 27836:27837 ioctl c0306201 200001c0 returned -14 00:22:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 884.733755][T27837] binder: 27836:27837 ioctl c0306201 200001c0 returned -14 00:22:48 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000fcffffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 884.903601][T27855] XFS (loop4): Invalid superblock magic number 00:22:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 884.975038][T27879] binder: 27873:27879 ioctl c0306201 200001c0 returned -14 00:22:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000feffffff00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x498, 0x218, 0x0, 0x0, 0x340, 0x0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={0x158, 'policy\x00', 0x0, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 0x4d2, 0x3506, 0x3f, 0x0, 0x14, 0xc}, {@ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0x0, 0xffffffff, 0xffffffff], 0x4d4, 0x3504, 0x7f, 0x0, 0x1, 0x1a}, {@ipv4=@multicast1, [0xffffff00, 0xff, 0xffffffff], @ipv6=@remote, [0xffffff00, 0xff000000, 0xffffffff, 0xff], 0x4d5, 0x3502, 0xc, 0x1, 0x3, 0x2}, {@ipv4=@multicast1, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv4=@multicast2, [0x0, 0xff000000, 0xffffffff], 0x4d4, 0x3501, 0x21, 0x1, 0x10, 0x17}], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'netdevsim0\x00', 'lo\x00', {0xff}, {}, 0x17, 0x2}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x8, 0x2c0, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="85ec175fae92", 0x21a00, 0xb, [0x29, 0x11, 0x23, 0x2a, 0x19, 0xb, 0x3c, 0x27, 0x7, 0x4, 0x22, 0x22, 0x1b, 0x3f, 0x10, 0x31], 0x2, 0x8001, 0x78}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @loopback, 0xff0000ff, 0x0, 'syzkaller0\x00', '\x00', {0xff}, {0xff}, 0x0, 0x3, 0x68}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x2de900000000000, 0x61f, 0x3f, 0x7fff, 0x3, 0x712}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:49 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000ffffffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 885.306570][T27902] binder: 27900:27902 ioctl 40286608 20000180 returned -22 00:22:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 885.397330][T27902] binder: 27900:27902 ioctl c0306201 200001c0 returned -14 00:22:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 885.440679][T27913] binder: 27900:27913 ioctl 40286608 20000180 returned -22 00:22:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x10282) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x1, 0xffffffff, {0x57, 0x0, 0xaac2, {0x4}, {0x7ff, 0x1}, @rumble={0x0, 0x27e3ca79}}, {0x54, 0x100000001, 0x100000001, {0x4, 0x3}, {0x1f, 0x7}, @cond=[{0x5, 0xfffffffffffffffd, 0x7295, 0x8, 0x81, 0x100}, {0x0, 0x0, 0x2a6, 0xa68, 0x6, 0xc6}]}}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 00:22:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 885.611172][T27912] XFS (loop4): Invalid superblock magic number 00:22:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 885.714879][T27939] binder: 27938:27939 ioctl c0306201 200001c0 returned -14 00:22:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) [ 885.760195][T27939] debugfs: File '27938' in directory 'proc' already present! [ 885.808514][T27939] binder: 27938:27939 ioctl c0306201 200001c0 returned -14 [ 885.848409][T27945] debugfs: File '27938' in directory 'proc' already present! 00:22:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:22:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) [ 886.088189][T27963] binder: 27962:27963 ioctl c0306201 200001c0 returned -14 00:22:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000080)={0x6, 0x0, 0x2f8, 0x2, 0x5}) [ 886.177298][T27966] XFS (loop4): Invalid superblock magic number [ 886.203170][T27982] binder: 27962:27982 ioctl c0306201 200001c0 returned -14 00:22:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 00:22:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 886.426423][T27995] binder: 27994:27995 ioctl c0306201 200001c0 returned -14 00:22:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x8000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 886.502149][T28003] binder: 27994:28003 ioctl c0306201 200001c0 returned -14 00:22:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 00:22:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe9e, 0x0, 0x0}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000840)={0x0, 0x0, 0x799, 0x9, 0x1, 0x2, 0x3, 0xfffffffffffffffe, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x7f, 0x1, 0xc464, 0x15, 0x6}}, &(0x7f0000000900)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000940)={r3, 0x46a5db9b, 0x20}, &(0x7f0000000980)=0xc) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x40000) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000080)=0x2c, 0x4) 00:22:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) [ 886.844343][T28033] binder: 28024:28033 ioctl c0306201 200001c0 returned -14 [ 886.882763][T28023] XFS (loop4): Invalid superblock magic number 00:22:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, 0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 886.963689][T28033] binder: 28024:28033 ioctl c0306201 200001c0 returned -14 00:22:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:22:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01634040d62fbacc00000000116309400000000000000000000000000000000000000000000000000000000008b55b072c56073c419e19e0e30000000000000000000000000000008000"/101], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x9000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, 0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 887.295416][T28067] binder: 28066:28067 ioctl c0306201 200001c0 returned -14 00:22:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, 0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x20000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:22:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 887.419783][T28074] XFS (loop4): Invalid superblock magic number [ 887.559846][T28098] binder: 28096:28098 ioctl c0306201 200001c0 returned -14 00:22:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 00:22:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xa000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:51 executing program 1: r0 = syz_open_pts(0xffffffffffffff9c, 0x200201) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x6, 0x100061c, 0x803, 0xffffffffffffffff, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008911, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 00:22:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 887.935524][T28125] binder: 28119:28125 ioctl c0306201 200001c0 returned -14 00:22:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101601, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl(r0, 0x527, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0163502c4985e558111bd716f04e404000000000000000001163484000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000049129af866d348239e0c42cfaef0d60c8e83d1cacb822d1d33b4ea334199f1d5fa1902faa6ec87b84617de4733ced315effbbb516654635a8b581c5e2e97e783dc2ef44ce8f0978cdfb3355021f3ae744a122aad9500"/199], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 888.066760][T28123] XFS (loop4): Invalid superblock magic number 00:22:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 00:22:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 888.205457][T28150] binder: 28148:28150 unknown command 743465729 [ 888.211853][T28150] binder: 28148:28150 ioctl c0306201 200001c0 returned -22 00:22:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2], 0x2}}, 0x0) 00:22:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xd000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x0, 0x0, 0x4, 0x2}, 0x6) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2], 0x2}}, 0x0) [ 888.599852][T28178] binder: 28177:28178 ioctl c0306201 200001c0 returned -14 00:22:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 888.668815][T28181] XFS (loop4): Invalid superblock magic number 00:22:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:52 executing program 1: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008112, &(0x7f0000000340)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040000000000000004756001163484000"/90], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x90, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x7f, @mcast2, 0xff}, @in6={0xa, 0x4e21, 0xfffffffffffffff9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in6={0xa, 0x4e22, 0x37c, @local, 0x80000000}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x100000000}]}, &(0x7f00000002c0)=0x10) 00:22:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:53 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2], 0x2}}, 0x0) 00:22:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x10000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 888.955229][T28210] binder: 28208:28210 ioctl c0306201 200001c0 returned -14 00:22:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r2 = socket(0x2, 0x7, 0x5) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x200, 0x70bd29, 0xe94, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000000000bf9100"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:53 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) [ 889.216356][T28223] XFS (loop4): Invalid superblock magic number 00:22:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 889.337174][T28248] binder: 28240:28248 ioctl c0306201 200001c0 returned -14 00:22:53 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 889.395452][T28254] binder: 28240:28254 ioctl c0306201 200001c0 returned -14 00:22:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) 00:22:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x12700400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x234480) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0xffffffffffffa46d, 0x8}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3e3a, 0x101000) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)=0xffffffff) 00:22:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:22:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) 00:22:53 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:53 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/mixer\x00', 0x400000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000001600)={0x1, [0x0]}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/294], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000300)) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000001640)=0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001580)={0xf8, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/26], @ANYBLOB="1a0000000000000002000000000000001b00000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001000000000000002000000000000003100000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0c63000011634840010000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/58], @ANYBLOB="3a000000000000000100007c52000000000000000000000000000b0000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a6277000100000300"/36], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00100000000000000c6300000c63000011634840030000000000000000000000000000000000000010000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB="852a68730111000002000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00040000000000000e630c400100"/24], 0x46, 0x0, &(0x7f0000001500)="90246aead4eb5153f5dc2327e3882e916f725fb624ff1ee34d8bdf5a89913bbbca750a1d768f614be5a0a1eeaac981314aac20cfabd477733ca95acc14b803028689fa84834f"}) 00:22:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 889.872130][T28275] XFS (loop4): Invalid superblock magic number 00:22:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400120014000100627269646765"], 0x3}}, 0x0) 00:22:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 889.930169][T28305] binder: 28304:28305 ioctl c0306201 200001c0 returned -14 00:22:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000300)={0x5, 0x0, 0x1, 0x90}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000340)={r3, 0x100000001}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x300, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR64], 0x326, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) mq_timedreceive(r4, &(0x7f0000000200)=""/118, 0x76, 0x3f, &(0x7f0000000180)) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000280)=0x9) 00:22:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x20000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400120014000100627269646765"], 0x3}}, 0x0) 00:22:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 890.324374][T28331] binder: 28328:28331 unknown command 0 [ 890.330113][T28331] binder: 28328:28331 ioctl c0306201 200001c0 returned -22 [ 890.380813][T28327] XFS (loop4): Invalid superblock magic number 00:22:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400120014000100627269646765"], 0x3}}, 0x0) [ 890.423738][T28348] binder: 28328:28348 unknown command 0 [ 890.429571][T28348] binder: 28328:28348 ioctl c0306201 200001c0 returned -22 00:22:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x280140, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x7fffffff, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)={r0, 0x7, 0x7a, "8b12214b97d68e427fefe3eca6dd0e094d34796a49aaff1f657d6005862e8d01d85eaf66c38155e8a0f0912c7324b9e61b19afede14ef9cbcb44b52f6fd7f9b863dd68abed2b1b37c6bc9c43d77ea24dcbf2e917095f427eb0243f288d7d82055a58176f339f4bf60cd1f27b8d3281f4132d694b03e6fa397ea3759c56c8a8e3"}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x0, 0x0, 0xbf8c, 0x6}) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c"], 0x3}}, 0x0) 00:22:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, 0x0) 00:22:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x20100000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 890.707924][T28369] binder: 28365:28369 ioctl c0306201 200001c0 returned -14 00:22:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c"], 0x3}}, 0x0) [ 890.853158][T28369] binder: 28365:28369 ioctl c0306201 200001c0 returned -14 00:22:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:55 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c"], 0x3}}, 0x0) 00:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x400040) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 00:22:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, 0x0) 00:22:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 891.014307][T28389] XFS (loop4): Invalid superblock magic number 00:22:55 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003"], 0x3}}, 0x0) [ 891.085525][T28406] binder: 28405:28406 ioctl c0306201 200001c0 returned -14 00:22:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xcde, 0x400200) 00:22:55 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003"], 0x3}}, 0x0) 00:22:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, 0x0) [ 891.316782][T28421] binder: 28420:28421 ioctl c0306201 200001c0 returned -14 00:22:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x21700400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="016340050000000000040000116348400000000000ba9500000000000000000000000000000000000000000000000000d200"/90], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4240) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x0, 0x81}) 00:22:55 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003"], 0x3}}, 0x0) 00:22:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) [ 891.608925][T28449] binder: 28445:28449 unknown command 88105729 [ 891.615699][T28449] binder: 28445:28449 ioctl c0306201 200001c0 returned -22 [ 891.634414][T28449] binder: 28445:28449 unknown command 88105729 [ 891.641950][T28449] binder: 28445:28449 ioctl c0306201 200001c0 returned -22 00:22:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x1ff, 0x4) ioctl(r0, 0x80, &(0x7f0000000080)="11df1a0d410bcfe47ba2f0705fb9e0c96ac2bc6d61c0e64dc14edd464dcdb2b8440f6d69d89bd2ecba46ed001ce375990e0db42570b976235c142e8e4b8bfaf1ae0667bd5a4bed4771ed894d9ec053067da0e612b0896e96d0288969056602b587e5fdfe2a03") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000007f", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 891.746957][T28442] XFS (loop4): Invalid superblock magic number 00:22:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) 00:22:55 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003000008"], 0x3}}, 0x0) [ 891.890049][T28474] binder: 28473:28474 ioctl c0306201 200001c0 returned -14 00:22:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 891.953073][T28478] binder: 28473:28478 ioctl c0306201 200001c0 returned -14 00:22:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x23000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:56 executing program 1: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) ioctl(r0, 0x1, &(0x7f00000000c0)="03b8eaa61a1f534ca70e6d396b1d6f788d7f5d25a5a60d4cf3") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000480)="11dca50d5e0bcfe47bd58036429d35674fdf8de80e279cc93894344b08f0707b04b5efa23a9d98d6230110936bd511d5136e6e5628a8e6c16ff766abb3bd3ea371da2c604050ffed50a4d347384ea679e8bf9259af5e0b1e18cc30f49e5de79381461c01ee0e8dcf56fbd873e8d4efd87b92db5c8f629cc6614aa39681cd15a9643ae7d3fc0033899e01ab7487365428311db648e742b17c28fff3a8bb1ed86c25b26d4fcad735f7501abee6287caf4f43448fe6b492531a4b33d60ef8035029875b0ba07ef7963f98fc7751289109a49a2857c00ddebab9fe0fdcb16c7765f38ba443b25f7e2c559661") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) 00:22:56 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003000008"], 0x3}}, 0x0) [ 892.198106][T28500] binder: 28493:28500 ioctl c0306201 200001c0 returned -14 00:22:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000f0ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 892.254157][T28494] XFS (loop4): Invalid superblock magic number 00:22:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x7ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000009000000000000004000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x100) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x800) 00:22:56 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c000500080003000008"], 0x3}}, 0x0) 00:22:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[0x0]) 00:22:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x30000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8c, 0x80000001}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b459418b3468016340400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f3a2fca8290314603de0e82ddf7ec0c16e10eac9e0ebf7c9a"], 0xfffffffffffffe9e, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x200900, 0x4) 00:22:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:56 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c00050008000300000820"], 0x3}}, 0x0) 00:22:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000003000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 892.743858][T28548] binder: 28546:28548 unknown command -1958651468 [ 892.750639][T28548] binder: 28546:28548 ioctl c0306201 200001c0 returned -22 00:22:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[0x0]) 00:22:56 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c00050008000300000820"], 0x3}}, 0x0) [ 892.871916][T28551] XFS (loop4): Invalid superblock magic number [ 892.884637][T28565] binder: 28546:28565 unknown command -1958651468 [ 892.891302][T28565] binder: 28546:28565 ioctl c0306201 200001c0 returned -22 00:22:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c00050008000300000820"], 0x3}}, 0x0) 00:22:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000740)="11dca50d5e0bcfe47bf070ed1a724ceb6b43330749a1220c273b91534f327acabbfbf40f152fe1133edfed74f4a68f5f8f1266ee5258279d8fc623b7bac0ad9264599442da844d96f30f216b2a4ea8a57124982ba668800c06e2b6598bcc3de4bd9b68bdc376c20ec2c68e8eb7e83b9adae11331e7000000000000000000") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) pipe2(&(0x7f00000006c0), 0x80000) r2 = syz_open_dev$usb(&(0x7f0000000700)='/dev/bus/usb/00#/00#\x00', 0xb72, 0x200) r3 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000480)=""/185) sendmsg$alg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="7d9f10c7ac618e30477da40d14694257d001892fb923e796d6d7901caeb4d186e3d94ba1574f6558b044a02c8ad27054e2c66dc71c3b559fde8614e6e81bf351a51a5e37f082cd8ef69cbf174cb73ea48957078592d695ccf60a9a1ed1a771bb900ab2728564a0d90cc12b07ca040b1d87d3e574898ffed2740ba148c812aa1d7fda5f47eb60b501e8d0d00c426baf6a7c2401f16a5b0c6d0d294eb806aaf7d2d33b90ec8390b305b8d5bea6d312af036c8392ae855e33299aea03b18239b91f57125aafe65f6bbf4c08a410e8a327faca", 0xd1}, {&(0x7f0000000380)="643d4fd92ebc77044203129821de15a254fd23bf28c70db324568b228b3a30e0d160d704f142c2b7206ef9daceddc3a9be3b17d5164168e3c4dd5d3afa05fb1c682b582470df7a1b5f3dfb4cfc6b29e0efc602a150d5d116541c3fe0639545c2074bdb099c63a41f59df69d26c511a655055fcc50926bf628d6203b3e3ffcabd420e9a9abe9982d0cea263b22cbfac2fb76f946a5f7d162529f9f3b5b409bac53043880859dffab2b2bd71272cee9e9f6a9e871228b4ec6dac8e413633bb1ffdfb759e661ae4fd34fd3fe59a389698690faad2bae38654e7ddce95cd9c2dbf6f6480a3", 0xe3}, {&(0x7f00000000c0)="6a8014bb313309d901f8c64e66b0e2d38b7a9266245f33865052356c4386a0b61072287cfc4aeb2807f0defd360ab9909b7815546756c363aee917b6431e51", 0x3f}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x88, 0x80}, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10000, 0x30}, &(0x7f0000000540)=0xc) open$dir(&(0x7f0000000680)='./file0\x00', 0x410000, 0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000580)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0xa5a193, 0xffffffff, 0x3f, 0x2}, &(0x7f0000000640)=0x98) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xfffffffffffffffb) 00:22:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000004000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x30700400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[0x0]) 00:22:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000006000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 893.286061][T28605] binder: 28589:28605 ioctl c0306201 200001c0 returned -14 [ 893.325993][T28595] XFS (loop4): Invalid superblock magic number 00:22:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 893.462635][T28605] binder: 28589:28605 ioctl c0306201 200001c0 returned -14 00:22:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:22:57 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x10000000020c204, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca50d5e0bcfe47bf07080888e1d6e39ba83af8487a1bc51cd38dcb6e9c4f34505ceaae9d861c97e5d6afc5d9e6b0ca5b8ac916e065efc7a25d61de4dae682a2c71e03c3729f3f51c5e09f7ec8a058933cd9a4286624945caf9b2ebf1c044a36a05d61697767767086287e7a68c3b5c44952681093b5e554600c9e91fc7732645f2b3196cf93e769cd6fae7e76f9deb2") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @dev}, &(0x7f0000000140)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01634040000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009651e3fdc7726ceb1e62000000000000f7ad19cd00000000"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x34000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000c000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 893.802338][T28647] binder: 28646:28647 ioctl c0306201 200001c0 returned -14 00:22:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0163404000000000000000001163483fffffe8000000000000000000000000000000000000000000000000000000000c7e00"/90], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000e000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 893.964306][T28650] XFS (loop4): Invalid superblock magic number 00:22:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 894.021918][T28676] binder: 28675:28676 ioctl c0306201 200001c0 returned -14 00:22:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xc20a, 0x6}, 0x0, 0x0, 0x4, {0x0, 0x2}, 0x4, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01635d11d67b870a91c973404000007814da0ad68ae0eb886100000011634840000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000cd0100"/102], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000f000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3f000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 894.272727][T28690] binder: 28688:28690 unknown command 291332865 [ 894.279138][T28690] binder: 28688:28690 ioctl c0306201 200001c0 returned -22 00:22:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:22:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000010000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:58 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000080)="1fdca50d5e0be3e47bf070c5b857af49dd81801a928a554d07d055237db7c79a06ed6b231ec367d9a88e46e049") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 894.541276][T28704] XFS (loop4): Invalid superblock magic number 00:22:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:22:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000060000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x44}}, 0x0) 00:22:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3f700400}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:59 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000100)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:22:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000f0000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 894.941054][T28751] binder: 28750:28751 ioctl c0306201 200001c0 returned -14 00:22:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x480200, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000200)=""/175) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x1c) [ 895.067662][T28753] XFS (loop4): Invalid superblock magic number 00:22:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:59 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000030000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 895.193411][T28781] binder: 28780:28781 ioctl c0306201 200001c0 returned -14 00:22:59 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab05) [ 895.239411][T28781] binder: 28780:28781 ioctl c0306201 200001c0 returned -14 00:22:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x800, 0xffffffff, 0xfffffffffffffffc, 0x10001, 0x3, 0x0, 0x1000, 0x4c, 0x38, 0x320, 0x1000, 0x2, 0x20, 0x1, 0x7, 0x3ff}, [{0x7474e553, 0x100000000, 0x1f, 0x5, 0x1, 0xad, 0x10001, 0x6e3c}, {0x7, 0x3f, 0x4310, 0x3, 0x1, 0xdd, 0x80000000, 0x100000001}], "736b24bfd1e83b652e39631b239dc0669f976ff3407df29dde6251c2fa7b", [[], [], []]}, 0x396) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) 00:22:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:22:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x40000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:22:59 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x2}}, 0x0) 00:22:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000060000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:59 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) [ 895.486329][T28806] binder: 28801:28806 ioctl c0306201 200001c0 returned -14 00:22:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 895.558739][T28812] binder: 28801:28812 ioctl c0306201 200001c0 returned -14 [ 895.624278][T28811] XFS (loop4): Invalid superblock magic number 00:22:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") rt_sigprocmask(0x0, &(0x7f0000000000)={0x38e0f3ad}, &(0x7f0000000140), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000300)) r2 = getpgrp(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x322, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, ["", ""]}, 0x24}}, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000340)='ns/user\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9, 0x3, 0x0, 0xffffffff00000000, 0xfffffffffffffffd}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r4, &(0x7f0000000380)=0x4) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340400000000000000000116348400000000000000000000000000000000000000000000000000000e7ffffffffffffff1a00000000000000000000000000000000000000000000000000000720afc01000"/93], 0xfffffffffffffe9e, 0x0, 0x0}) 00:22:59 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:22:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000a0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:22:59 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 00:22:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 895.814407][T28838] binder: 28836:28838 ioctl c0306201 200001c0 returned -14 00:22:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x42534658}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:00 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) [ 896.073986][T28856] XFS (loop4): unknown mount option [X]. 00:23:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000c0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 896.125710][T28863] binder: 28861:28863 ioctl c0306201 200001c0 returned -14 00:23:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x48000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:00 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002a000000070000000000000095000000000000001c3550a4ac5bcb50aeebb9a11efe9d9b325fe9623f7c4adab343b8c6b182c150377fae711559456fd96ac1676d4566e398d3011b27a01dc80d4ca755fc59e3fbfb4295b643ad8c23c46e1fa1797ddd1946a43c82003d7f5a98ddcf8e471192053146"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="e460cdfbef24080000000a9386dd", 0x0, 0x10000}, 0x28) 00:23:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x3, "5f67f7f600b9cc7b"}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 896.352285][T28882] binder: 28881:28882 ioctl c0306201 200001c0 returned -14 00:23:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000ff0d0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10080, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="238b14bc") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000200)="2c0870a3d49c29504192825cbb3776076b4cb8e2ec8492d04a252089ac42cba90237c76e272f548c985d1c722fc109bdac645604bbc7b93b7b4e3a038f8531678df4868f399fcd1e9db9e32ce5ff9504f1946f9879acc8ee5591c6cc7e4fb55da9e4b8644ae02df4527bc160f007da69b9c96ebcce5be3ea2c359f55fd26e954832fb342edef8cffe05e4eff23ebd5921264c982fe5ca7f98a97aecd4d207fb587b356683d69e8879e31454bafe7a933", 0xb0) 00:23:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000e0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:00 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) [ 896.598575][T28887] XFS (loop4): Invalid superblock magic number 00:23:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4c000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000893db0190000000000"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000f0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@srh, 0x8) close(r1) 00:23:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000003f0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 897.083788][T28949] binder: 28940:28949 ioctl c0306201 200001c0 returned -14 00:23:01 executing program 3: unshare(0x400) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab02) 00:23:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 897.213088][T28951] XFS (loop4): Invalid superblock magic number 00:23:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 897.385535][T28978] binder: 28977:28978 ioctl c0306201 200001c0 returned -14 00:23:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x50010000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000400000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x400) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) mq_timedreceive(r1, &(0x7f0000000000)=""/13, 0xd, 0x9, &(0x7f0000000080)={0x0, 0x1c9c380}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000065580000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 897.634417][T28994] binder: 28993:28994 ioctl c0306201 200001c0 returned -14 [ 897.673989][T28999] binder: 28998:28999 ioctl c0306201 200001c0 returned -14 [ 897.744830][T29003] binder: 28998:29003 ioctl c0306201 200001c0 returned -14 00:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x61) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="e31c9194fb0ad8bb137dfd8415775bb0537a62092b327f082d68998e068825a4bd814cd24258305e6ebe", 0x2a}, {&(0x7f0000000200)="ad751688e5ef75931bf8f1ddc791bd48471c9c5bc76e95fbe4a362c6f8b4a2f70d69f2dfc5d7d4fb3d7eedb4d034029c4361595cdf06d5c6f846c375988dbebfd6989be0305c3b58d07883e04b0a0049ec8d0f383500226a8385cfb202f00a65fd37988bc512957e6fa1a46741b2dddd675779f23d357ba66438281be06a882fee8951367276aa2c520da093fd6ff6ab92eb8fbaa9e8e3521c41fd5f6297576a678a3c4a10011e91f521", 0xaa}, {&(0x7f0000000380)="2a7094c24e6ca695cf033f179ae966a65d8083f5d43bfed2346669e3ee909eba86678a002d33a764597c8cea5dba9f112d44348df74356ec8d3468973329fda5ff593f4ced621b9f3244f6afc54f535289233b4854cfa7f548bbfa72adbcf7cbdbafb36bb733c3ed3cf4315ad4346c2c01944ccd79832a4f4efdce9ab1c1ff80dbe087f6a36de47434704da8056d4346970181ecf9be0240976b1fa7263a16f159edaec7b10155a99e180ab4b462af16ea5ffd70d6e29268e943105a1084af1050f02e51d2c9aaf08f9494db169a2effef802bfee60c00a6949db80f4cc0c64d26b5381697bd", 0xe6}, {&(0x7f0000000480)="934568edbec4f02fe61621e9af937448506182078d799ba42acd42bdbbd95efaaf4da02ae77478fd56b47cf7ae52d852cdef2eadc40ac8a008d351d066debdc8bf1fffbb56c7d3457d27f5773b0db5147eabfad11260ce70b072a5425bf75a90973fec0f3467ed526140b5fc8278526320da7d855b3ce737decaeeabcf39ba67ebb1461c5a3f3bcac621d001e70c694507025b71128b1066ea19dff85da0bb", 0x9f}, {&(0x7f0000000140)="a756c43ffd05f1", 0x7}, {&(0x7f0000000540)="f6e7467d60a2ccb033d5dcd49d89a691b7404f13dac4500595f85475039b23de39e7441e323302a6912a40d432a7190c31aa01fde427b3bcd77c63b347fd9744b28e82c48ad213c8ca6b63018cc38d5742eb077b5a96fed3c258540be58bd0b177edb888f864bdebce09cef179d3a43022e49496b3d4e651b9906aa50a2804da4980ecf3791fee4592282656dbbd0bf5eaec8753f8312857c9a57451cff65da207d85467f4112c", 0xa7}], 0x6, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400000000000000000116348400000000000000000000000000000000000009745d3950000000000000000000000000000000000000000000000000000d10000000000001000000000000000000005000000000000"], 0xfffffffffffffe9e, 0x0, 0x0}) [ 897.871376][T28997] XFS (loop4): Invalid superblock magic number 00:23:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000600000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/18, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 897.964887][T29026] binder: 29024:29026 ioctl c0306201 200001c0 returned -14 [ 898.053518][T29036] binder: 29024:29036 ioctl c0306201 200001c0 returned -14 [ 898.085901][T29025] binder: 29022:29025 ioctl c0306201 200001c0 returned -14 00:23:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x58465342}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000058650000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/18, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 898.265854][T29047] binder: 29046:29047 ioctl c0306201 200001c0 returned -14 00:23:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000810000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 898.391478][T29053] XFS (loop4): unknown mount option [B]. 00:23:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/18, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 898.443689][T29061] binder: 29057:29061 ioctl c0306201 200001c0 returned -14 00:23:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 898.566852][T29074] binder: 29069:29074 ioctl c0306201 200001c0 returned -14 00:23:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) 00:23:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x60000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 898.631777][T29080] binder: 29069:29080 ioctl c0306201 200001c0 returned -14 00:23:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000f00000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:23:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 00:23:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) [ 898.908804][T29093] XFS (loop4): Invalid superblock magic number 00:23:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000dff0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") msgget$private(0x0, 0x40) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400000000000000000116348402846000000000000000000000000000000000000000000000000000400"/88], 0xfffffffffffffe9e, 0x0, 0x0}) exit_group(0x39) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @mcast1, 0x20}, r3}}, 0x30) 00:23:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000082000"], 0x3}}, 0x0) 00:23:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x68000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 899.224073][T29130] binder: 29126:29130 ioctl c0306201 200001c0 returned -14 00:23:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000fffff000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:03 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x1e4, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x96}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6a4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x92}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x938d}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffffffffffb, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xe1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3806dd742794be53}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x88, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000007c0)={@fda={0x66646185, 0x5, 0x2, 0x3d}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/126, 0x7e, 0x1, 0x14}}, &(0x7f0000000840)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x4, 0x1, 0x9}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/185, 0xb9, 0x0, 0x34}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) connect$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) 00:23:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000040000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 899.488733][T29143] XFS (loop4): Invalid superblock magic number 00:23:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000001", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400080, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x4, @local}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0xfffffffffffffffd, @ipv4={[], [], @multicast2}, 0x800}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x7f}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x8001}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7f}, @in6={0xa, 0x4e20, 0xd5, @dev={0xfe, 0x80, [], 0x14}, 0x7}, @in={0x2, 0x4e20, @local}], 0xd8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) 00:23:03 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6c000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 899.831903][T29186] binder: 29180:29186 ioctl c0306201 200001c0 returned -14 00:23:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000002", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 899.899433][T29186] binder: 29180:29186 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1f8, 0x35, 0x400, 0x70bd2d, 0x25dfdbfd, {0x5}, [@typed={0x14, 0x76, @ipv6=@mcast1}, @generic="4994518065d2ed7c03123123dcf18476b4871321869bc95449f2b39758cd60e58e8c2aad641f9708f4b03dd92f2831604d8e6e188bc027a5a09f0e87a9869c0f6f136faf2bffced4f6a8f24165052593475511a183a4b1823b47096958cfb8a38c2a2ac6b53d6449", @typed={0x14, 0x16, @str='/dev/binder#\x00'}, @nested={0x4c, 0x48, [@generic="b0ee5f2747265cfe566607034f1da100643c5105708e0c0c2f7e794f12142a3bf6c0663492788fec99c826fbec1ef5df69bcfde8a490508deb7d7c4570d0bfed1707c46df89d99d1"]}, @nested={0x108, 0x49, [@generic="8d82575b0f3dcc754c5d7d8823e9c8438269b0a91f7f0e288f8546603a899bc1bf4b64532c0bfd8b6cc3bab8198d5550eb4ee6f672eabd346b67b781caa40fbe18346e641e29a3ef4878a322b702cffcb17a5783d84630d0c18365a203b07c39ac07192b76", @generic="c0ce3156dcdd60a4d4e9d4c917fdbd709248e3f62785240e5f60614cf80495f63aeacdbc8104c78713f8618d7d7be8dffaba70373449fed647dc350e522e7feedeb547b78c4ff381b99fce9922ecef93aec32ca2da5529d60ca851066a384339eb4450680f4155e082185ba1bd899a440df7aed9d65eb4e9a8969d4050416c1518aee1366e2f9ff087599ca6c5d32a5b1cacbb6627844e11cd2d34e5c15e"]}]}, 0x1f8}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0163404000000000ac2842a28f960000000011634840000000000700"/94], 0xfffffffffffffe9e, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x604c00, 0x0) sync_file_range(r0, 0x5, 0xed, 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x2b5f, 0x1) 00:23:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 900.108905][T29196] XFS (loop4): Invalid superblock magic number [ 900.138970][T29215] binder: 29213:29215 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000003", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 900.215572][T29219] binder: 29213:29219 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 1: r0 = dup(0xffffffffffffff9c) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) 00:23:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 900.474521][T29238] binder: 29235:29238 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x74000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000004", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 900.563459][T29238] binder: 29235:29238 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:04 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca50d5e0b4fe47bd870") r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x440000) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000180)={0x3786, "de6299445ff63fc38bfd1a5749c9b14a69998538a820db61e1357a504976fc57", 0x1, 0x1}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='.dead\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000006", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:04 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 900.822340][T29254] XFS (loop4): Invalid superblock magic number [ 900.838969][T29272] binder: 29264:29272 ioctl c0306201 200001c0 returned -14 00:23:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 900.909024][T29274] binder: 29264:29274 ioctl c0306201 200001c0 returned -14 00:23:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) 00:23:05 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x7a000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000000a", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 901.122539][T29292] debugfs: File '29288' in directory 'proc' already present! 00:23:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000000c", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 901.245510][T29303] debugfs: File '29288' in directory 'proc' already present! 00:23:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xfff, @mcast2, 0x40}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x2a}, 0x7}, @in={0x2, 0x4e20, @broadcast}], 0x48) [ 901.314760][T29299] XFS (loop4): Invalid superblock magic number [ 901.463846][T29326] binder: 29325:29326 ioctl c0306201 200001c0 returned -14 00:23:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000000e", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 901.548411][T29326] binder: 29325:29326 ioctl c0306201 200001c0 returned -14 00:23:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0xfff) ioctl(r0, 0x1000008910, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8001) 00:23:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x80020000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 901.778978][T29345] QAT: Invalid ioctl 00:23:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000000f", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 901.809969][T29345] QAT: Invalid ioctl [ 901.833939][T29345] QAT: Invalid ioctl [ 901.890378][T29347] XFS (loop4): Invalid superblock magic number 00:23:06 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 902.076428][T29374] binder: 29372:29374 ioctl c0306201 200001c0 returned -14 00:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000010", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x80030000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:06 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 902.367285][T29395] binder: 29393:29395 ioctl c0306201 200001c0 returned -14 00:23:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000003f", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 902.441322][T29403] binder: 29401:29403 ioctl c0306201 200001c0 returned -14 00:23:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000f0ffffffffffff000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:06 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 902.558399][T29400] XFS (loop4): Invalid superblock magic number 00:23:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000fffffffffffff000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000040", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x8cffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 00:23:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 902.875564][T29442] binder: 29439:29442 ioctl c0306201 200001c0 returned -14 00:23:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000060", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x400400, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x630101) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x7fff}, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000180)={0x3, @bcast, r5}) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000540)={0x471, 0x0, 0xa0, 0x0, 0x7, 0x80000000, 0x23, 0x1, 0x20, 0x652, 0x1, 0xe5, 0x200, 0x8000, &(0x7f0000000480)=""/138, 0xda2, 0x1, 0x101}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffe03, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR64], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="ea07d1a0547161b2fb259dbf9b6ea7b35a894c84f9d48194869a1d62fbebfbd76aeaaf7f4f13095f9eb860271825ae77df6b4c0e55b924f6a4c231ec62e64b85d4918e8510de4e4fdedfbba595dccfd9d5bb61168b98074dccb607ddde218f2950e35932bb45916c51c4a089326d5e597195b72e2e8ae9b9a04570d72daa34d5d6861f2b3ac84026e2e63a693d1a4515926319c6c33bc342"}, 0x10) 00:23:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 00:23:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000005865", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100fffffffe0000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 903.207090][T29467] XFS (loop4): unknown mount option [ÿ]. [ 903.228496][T29469] binder: 29468:29469 ioctl 6609 0 returned -22 00:23:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) [ 903.286934][T29477] binder: 29468:29477 ioctl 6609 0 returned -22 00:23:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x98000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x7fffffff}}, 0x400, 0x9, 0x7, 0x5d7, 0x7}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e20, 0x1800000000000000, @dev={0xfe, 0x80, [], 0x12}, 0x7}}}, 0x84) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) 00:23:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000081", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x803, 0x7f) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 903.644952][T29493] XFS (loop4): Invalid superblock magic number 00:23:07 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000ffffa888", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc00, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xea67, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x23a, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="0b6300005c97525b10ece2607be0e0ff25beba5fd56785293b0758902ca4b244e8457aa41c00fd81848ce9c18fa7b95502a6e1c9b82632badd88b9bc85b6be46838b97fcef2f791705d1e3ebbe507a687c86e5b849ee72444aae16792ae17bbbe3155603d31572916f27baff29d0cd2b11b60904f4e44d18d8b0a899b3e2c06cc66466b5368e125e7c6da7ad40f82d66c74736aed2896f961931c641a1a925aeb4612cdecdb77ea6d56c1a059ec1904718"], 0x35f, 0x0, 0x0}) [ 903.821924][T29520] debugfs: File '29518' in directory 'proc' already present! 00:23:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xbe000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 903.876710][T29527] binder: 29524:29527 ioctl c0306201 200001c0 returned -14 [ 903.888758][T29520] binder: 29518:29520 ioctl c0306201 200001c0 returned -14 00:23:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000ffffff9e", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x803, 0x7f) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 904.031114][T29535] debugfs: File '29534' in directory 'proc' already present! 00:23:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_adjtime(0x7, &(0x7f0000000080)={0x12, 0xfff, 0x400, 0x12d, 0x5, 0x8, 0x5, 0x3, 0x2, 0x3ff, 0xec, 0x401, 0x10001, 0x0, 0xffffffff, 0x6, 0x1, 0x9, 0x1ff, 0x34, 0x0, 0x0, 0x8, 0x7f, 0xfffffffffffffff7, 0x66}) r1 = msgget(0x3, 0x600) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000180)=""/4096) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 904.126673][T29535] binder: 29534:29535 unknown command 1532139356 [ 904.133172][T29535] binder: 29534:29535 ioctl c0306201 200001c0 returned -22 00:23:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000ffffffc3", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 904.172304][T29538] XFS (loop4): Invalid superblock magic number 00:23:08 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:08 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001173484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002b40)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002b80)={@empty, @rand_addr="4f0563ad30f2e5b10c4625b11ddf0ca7", @empty, 0x77, 0x3, 0x8, 0x500, 0x2, 0x80100000, r2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x3, '\x00', 0x4}, 0x18) [ 904.248206][T29553] debugfs: File '29552' in directory 'proc' already present! [ 904.275388][T29553] binder: 29552:29553 ioctl c0306201 200001c0 returned -14 00:23:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000fffffff0", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x803, 0x7f) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 904.399789][T29572] binder: 29571:29572 ioctl c0306201 200001c0 returned -14 [ 904.415306][T29575] binder: 29571:29575 ioctl c0306201 200001c0 returned -14 00:23:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xc0ed0000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 00:23:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 904.679803][T29589] debugfs: File '29588' in directory 'proc' already present! 00:23:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000fffffffc", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xffff) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:08 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 904.764779][T29589] binder: 29588:29589 ioctl c0306201 200001c0 returned -14 [ 904.839547][T29599] XFS (loop4): Invalid superblock magic number 00:23:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x803, 0x7f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000fffffffe", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 904.979010][T29618] binder: 29617:29618 ioctl c0306201 200001c0 returned -14 00:23:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r5}, {0x8, 0x2, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x4c, 0xa70e50b5091870fb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01634040000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbbc56f9cb0e7c9ab6e15aebcf3a"], 0xfffffffffffffe9e, 0x0, 0x0}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vcs\x00', 0x400, 0x0) connect$pptp(r7, &(0x7f00000017c0)={0x18, 0x2, {0x3, @rand_addr=0x5}}, 0x1e) [ 905.048755][T29628] debugfs: File '29626' in directory 'proc' already present! 00:23:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xc4000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 905.117248][T29628] binder: 29626:29628 ioctl c0306201 200001c0 returned -14 [ 905.178812][T29637] binder: BINDER_SET_CONTEXT_MGR already set [ 905.184910][T29637] binder: 29629:29637 ioctl 40046207 0 returned -16 [ 905.194793][T29639] binder: 29634:29639 ioctl c0306201 200001c0 returned -14 00:23:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000dff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000088a8ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 905.282843][T29639] binder: 29634:29639 ioctl c0306201 200001c0 returned -14 00:23:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:23:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:09 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x484000, 0x0) accept$inet(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x11, 0x3, 0x100000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0163404000000000000000001163484000000000000000000000fb030000c00900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000329d0000000075846f787e010000000000000094b11af657ba13e80c9faeae3ae811916e21ac0d2ec7a593e24e0820ed220a54b4d00b0f93fb145b059c4279fb7dcf8e058bb2d5160de4b80765dff4710fc6ac02a6cb97d9b06ca5a7c54919c656ee322e420c30c4db94ead4efdaca9a4e48ffbbc98606a455e9de1471cd52d465d7486c51795bbd0b396ea74cc408799177b3edb553c96d95fae4e98e6791bee2a0f188908b81ee5d9dd13096e6"], 0xfffffffffffffe9e, 0x0, 0x0}) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) [ 905.446424][T29644] XFS (loop4): Invalid superblock magic number [ 905.486275][T29669] debugfs: File '29664' in directory 'proc' already present! 00:23:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000f0ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 905.496791][T29668] binder: BINDER_SET_CONTEXT_MGR already set [ 905.502967][T29668] binder: 29667:29668 ioctl 40046207 0 returned -16 00:23:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 905.586108][T29669] binder: 29664:29669 ioctl c0306201 200001c0 returned -14 [ 905.614920][T29679] binder: 29675:29679 ioctl c0306201 200001c0 returned -14 00:23:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 905.684052][T29686] binder: 29675:29686 ioctl c0306201 200001c0 returned -14 00:23:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xd0010000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:09 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000007fffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x442200, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000200)={0x0, 0xffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x8) [ 905.840385][T29697] binder: 29695:29697 ioctl c0306201 200001c0 returned -14 [ 905.852937][T29693] binder: BINDER_SET_CONTEXT_MGR already set [ 905.859167][T29693] binder: 29688:29693 ioctl 40046207 0 returned -16 00:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 905.903567][T29700] binder: 29699:29700 ioctl c0306201 200001c0 returned -14 [ 905.917003][T29693] debugfs: File '29688' in directory 'proc' already present! [ 905.965451][T29700] binder: 29699:29700 ioctl c0306201 200001c0 returned -14 00:23:10 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000009effffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 906.118630][T29707] XFS (loop4): Invalid superblock magic number [ 906.120315][T29726] binder: 29717:29726 ioctl c0306201 200001c0 returned -14 00:23:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 906.222602][T29735] FAULT_INJECTION: forcing a failure. [ 906.222602][T29735] name failslab, interval 1, probability 0, space 0, times 0 [ 906.235557][T29735] CPU: 0 PID: 29735 Comm: syz-executor.2 Not tainted 5.2.0+ #71 [ 906.243203][T29735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.253267][T29735] Call Trace: [ 906.256574][T29735] dump_stack+0x16f/0x1f0 [ 906.260917][T29735] should_fail.cold+0xa/0x15 [ 906.265520][T29735] ? fault_create_debugfs_attr+0x180/0x180 [ 906.271344][T29735] ? __kasan_check_read+0x11/0x20 [ 906.276490][T29735] __should_failslab+0x121/0x190 [ 906.281446][T29735] should_failslab+0x9/0x14 [ 906.285957][T29735] __kmalloc+0x2ce/0x760 [ 906.290217][T29735] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 906.295960][T29735] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 906.301708][T29735] ? rcu_read_lock_sched_held+0x110/0x130 [ 906.307465][T29735] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 906.313207][T29735] tomoyo_realpath_from_path+0xcd/0x7b0 [ 906.318772][T29735] ? tomoyo_path_number_perm+0x193/0x520 [ 906.324427][T29735] tomoyo_path_number_perm+0x1dd/0x520 [ 906.324447][T29735] ? tomoyo_path_number_perm+0x193/0x520 [ 906.324470][T29735] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 906.324493][T29735] ? __f_unlock_pos+0x19/0x20 [ 906.335614][T29735] ? __fget+0x388/0x560 [ 906.350238][T29735] ? ksys_dup3+0x3e0/0x3e0 [ 906.354666][T29735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 906.360049][T29740] binder: 29738:29740 ioctl c0306201 200001c0 returned -14 [ 906.360919][T29735] ? fput_many+0x12c/0x1a0 [ 906.360942][T29735] tomoyo_file_ioctl+0x23/0x30 [ 906.360960][T29735] security_file_ioctl+0x77/0xc0 [ 906.360983][T29735] ksys_ioctl+0x57/0xd0 [ 906.386431][T29735] __x64_sys_ioctl+0x73/0xb0 [ 906.391045][T29735] do_syscall_64+0xfd/0x6a0 [ 906.395567][T29735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.401465][T29735] RIP: 0033:0x459819 [ 906.405376][T29735] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.425162][T29735] RSP: 002b:00007f13312fbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.433584][T29735] RAX: ffffffffffffffda RBX: 00007f13312fbc90 RCX: 0000000000459819 [ 906.441571][T29735] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 906.449551][T29735] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 906.457530][T29735] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13312fc6d4 [ 906.465507][T29735] R13: 00000000004c4e2e R14: 00000000004d9040 R15: 0000000000000004 00:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000c3ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 906.465624][T29735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 906.550291][T29750] binder: 29747:29750 ioctl c0306201 200001c0 returned -14 00:23:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xea030000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000f0ffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01336e40000000000000000211634a40000000000000000000e0a569b0000000120000f4bd600000000000000000001500000000004000000000000000003c556d7100"/84], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:10 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 906.757145][T29764] binder: 29758:29764 unknown command 1080963841 [ 906.763616][T29764] binder: 29758:29764 ioctl c0306201 200001c0 returned -22 [ 906.776055][T29761] FAULT_INJECTION: forcing a failure. [ 906.776055][T29761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 906.789289][T29761] CPU: 1 PID: 29761 Comm: syz-executor.2 Not tainted 5.2.0+ #71 [ 906.796944][T29761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.807012][T29761] Call Trace: [ 906.810331][T29761] dump_stack+0x16f/0x1f0 [ 906.814682][T29761] should_fail.cold+0xa/0x15 [ 906.819292][T29761] ? is_bpf_text_address+0xae/0x170 [ 906.824519][T29761] ? fault_create_debugfs_attr+0x180/0x180 [ 906.830349][T29761] ? lock_downgrade+0x920/0x920 [ 906.830377][T29761] should_fail_alloc_page+0x50/0x60 [ 906.830393][T29761] __alloc_pages_nodemask+0x1a1/0x8e0 [ 906.830412][T29761] ? __kasan_check_read+0x11/0x20 [ 906.830436][T29761] ? __alloc_pages_slowpath+0x2520/0x2520 [ 906.840481][T29761] ? __kasan_check_read+0x11/0x20 [ 906.840504][T29761] cache_grow_begin+0x90/0xc90 [ 906.840523][T29761] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 906.840538][T29761] ? trace_hardirqs_off+0x62/0x210 [ 906.840553][T29761] __kmalloc+0x694/0x760 [ 906.840569][T29761] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 906.840588][T29761] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 906.840606][T29761] tomoyo_realpath_from_path+0xcd/0x7b0 [ 906.840623][T29761] ? tomoyo_path_number_perm+0x193/0x520 [ 906.840646][T29761] tomoyo_path_number_perm+0x1dd/0x520 [ 906.840660][T29761] ? tomoyo_path_number_perm+0x193/0x520 [ 906.840682][T29761] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 906.860813][T29769] XFS (loop4): Invalid superblock magic number [ 906.861779][T29761] ? __f_unlock_pos+0x19/0x20 [ 906.861827][T29761] ? __fget+0x388/0x560 [ 906.861848][T29761] ? ksys_dup3+0x3e0/0x3e0 [ 906.861864][T29761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 906.861887][T29761] ? fput_many+0x12c/0x1a0 [ 906.951096][T29761] tomoyo_file_ioctl+0x23/0x30 [ 906.955879][T29761] security_file_ioctl+0x77/0xc0 [ 906.960835][T29761] ksys_ioctl+0x57/0xd0 [ 906.965003][T29761] __x64_sys_ioctl+0x73/0xb0 [ 906.969612][T29761] do_syscall_64+0xfd/0x6a0 [ 906.974136][T29761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.980035][T29761] RIP: 0033:0x459819 [ 906.983937][T29761] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:23:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000fcffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 907.003553][T29761] RSP: 002b:00007f13312fbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.011983][T29761] RAX: ffffffffffffffda RBX: 00007f13312fbc90 RCX: 0000000000459819 [ 907.019970][T29761] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 907.027947][T29761] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 907.027956][T29761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13312fc6d4 [ 907.027964][T29761] R13: 00000000004c4e2e R14: 00000000004d9040 R15: 0000000000000004 00:23:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000feffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bae65566750f4b63b3a65d62a7235d5700000000000000000000000000000000000000000000000900000000"], 0xfffffe77, 0x0, 0x0}) 00:23:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xf6030000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:11 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:11 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 907.303749][T29800] binder: 29799:29800 ioctl c0306201 200001c0 returned -14 [ 907.333775][T29803] binder: 29802:29803 ioctl c0306201 200001c0 returned -14 00:23:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000ffffffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 907.395580][T29809] binder: 29799:29809 ioctl c0306201 200001c0 returned -14 [ 907.438236][T29816] FAULT_INJECTION: forcing a failure. [ 907.438236][T29816] name failslab, interval 1, probability 0, space 0, times 0 [ 907.451185][T29816] CPU: 0 PID: 29816 Comm: syz-executor.2 Not tainted 5.2.0+ #71 [ 907.458830][T29816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.468896][T29816] Call Trace: [ 907.472213][T29816] dump_stack+0x16f/0x1f0 [ 907.476561][T29816] should_fail.cold+0xa/0x15 [ 907.481166][T29816] ? fault_create_debugfs_attr+0x180/0x180 [ 907.481192][T29816] __should_failslab+0x121/0x190 [ 907.481216][T29816] should_failslab+0x9/0x14 [ 907.481230][T29816] __kmalloc+0x2ce/0x760 [ 907.481257][T29816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 907.506957][T29816] ? d_absolute_path+0x11b/0x170 [ 907.511926][T29816] ? __d_path+0x140/0x140 [ 907.516268][T29816] ? rcu_read_lock_sched_held+0x110/0x130 [ 907.522006][T29816] ? tomoyo_encode2.part.0+0xf5/0x400 [ 907.527395][T29816] tomoyo_encode2.part.0+0xf5/0x400 [ 907.532609][T29816] tomoyo_encode+0x2b/0x50 [ 907.537041][T29816] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 907.542694][T29816] tomoyo_path_number_perm+0x1dd/0x520 [ 907.548163][T29816] ? tomoyo_path_number_perm+0x193/0x520 [ 907.553810][T29816] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 907.559621][T29816] ? __f_unlock_pos+0x19/0x20 [ 907.559667][T29816] ? __fget+0x388/0x560 [ 907.568488][T29816] ? ksys_dup3+0x3e0/0x3e0 [ 907.568505][T29816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 907.568519][T29816] ? fput_many+0x12c/0x1a0 [ 907.568539][T29816] tomoyo_file_ioctl+0x23/0x30 [ 907.568561][T29816] security_file_ioctl+0x77/0xc0 [ 907.593288][T29816] ksys_ioctl+0x57/0xd0 [ 907.597458][T29816] __x64_sys_ioctl+0x73/0xb0 [ 907.602068][T29816] do_syscall_64+0xfd/0x6a0 [ 907.606590][T29816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 907.612943][T29816] RIP: 0033:0x459819 [ 907.616849][T29816] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:23:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:11 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 907.636461][T29816] RSP: 002b:00007f13312fbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.644883][T29816] RAX: ffffffffffffffda RBX: 00007f13312fbc90 RCX: 0000000000459819 [ 907.652865][T29816] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 907.660844][T29816] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 907.668822][T29816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13312fc6d4 [ 907.676796][T29816] R13: 00000000004c4e2e R14: 00000000004d9040 R15: 0000000000000004 00:23:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = dup2(r0, r0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x30}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/16) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 907.684908][T29816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 907.700706][T29827] binder: 29825:29827 ioctl c0306201 200001c0 returned -14 00:23:11 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 907.747573][T29811] XFS (loop4): Invalid superblock magic number 00:23:11 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) [ 907.865233][T29838] binder: 29837:29838 ioctl c0306201 200001c0 returned -14 [ 907.909604][T29846] binder: 29844:29846 ioctl c0306201 200001c0 returned -14 [ 908.056814][T29853] FAULT_INJECTION: forcing a failure. [ 908.056814][T29853] name failslab, interval 1, probability 0, space 0, times 0 [ 908.069655][T29853] CPU: 1 PID: 29853 Comm: syz-executor.2 Not tainted 5.2.0+ #71 [ 908.077306][T29853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.087375][T29853] Call Trace: [ 908.090683][T29853] dump_stack+0x16f/0x1f0 [ 908.095028][T29853] should_fail.cold+0xa/0x15 [ 908.099636][T29853] ? fault_create_debugfs_attr+0x180/0x180 [ 908.105466][T29853] __should_failslab+0x121/0x190 [ 908.110424][T29853] should_failslab+0x9/0x14 [ 908.114941][T29853] kmem_cache_alloc_node_trace+0x269/0x730 [ 908.120754][T29853] ? rwlock_bug.part.0+0x90/0x90 [ 908.120776][T29853] ? tomoyo_path_number_perm+0x214/0x520 [ 908.120798][T29853] __kmalloc_node+0x3d/0x70 [ 908.120818][T29853] kvmalloc_node+0x68/0x100 [ 908.120899][T29853] video_usercopy+0x454/0x10d0 [ 908.145136][T29853] ? v4l_s_fmt+0xab0/0xab0 [ 908.149673][T29853] ? v4l_enumstd+0x70/0x70 [ 908.154092][T29853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 908.154114][T29853] ? tomoyo_path_number_perm+0x263/0x520 [ 908.165965][T29853] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 908.171778][T29853] ? __f_unlock_pos+0x19/0x20 [ 908.176477][T29853] video_ioctl2+0x2d/0x35 [ 908.180882][T29853] v4l2_ioctl+0x1ac/0x230 [ 908.185223][T29853] ? v4l2_prio_init+0x30/0x30 [ 908.189911][T29853] do_vfs_ioctl+0xdb6/0x13e0 [ 908.194521][T29853] ? ioctl_preallocate+0x210/0x210 [ 908.199646][T29853] ? __fget+0x388/0x560 [ 908.203813][T29853] ? ksys_dup3+0x3e0/0x3e0 [ 908.208240][T29853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 908.214489][T29853] ? fput_many+0x12c/0x1a0 [ 908.218932][T29853] ? tomoyo_file_ioctl+0x23/0x30 [ 908.223888][T29853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 908.230260][T29853] ? security_file_ioctl+0x8d/0xc0 [ 908.235384][T29853] ksys_ioctl+0xab/0xd0 [ 908.239558][T29853] __x64_sys_ioctl+0x73/0xb0 [ 908.239828][T29862] binder: 29859:29862 ioctl c0306201 200001c0 returned -14 [ 908.244156][T29853] do_syscall_64+0xfd/0x6a0 00:23:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xf6ffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1e2000000000, 0x121002) accept$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040000000000000000011634840000000000000000000000000000000008100"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 908.244180][T29853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 908.244193][T29853] RIP: 0033:0x459819 [ 908.244208][T29853] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.244216][T29853] RSP: 002b:00007f13312fbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.293750][T29853] RAX: ffffffffffffffda RBX: 00007f13312fbc90 RCX: 0000000000459819 [ 908.301740][T29853] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 908.309733][T29853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 908.317723][T29853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13312fc6d4 [ 908.325702][T29853] R13: 00000000004c4e2e R14: 00000000004d9040 R15: 0000000000000004 00:23:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) [ 908.360998][T29870] binder: 29857:29870 ioctl c0306201 200001c0 returned -14 [ 908.382343][T29864] XFS (loop4): unknown mount option [ÿ]. 00:23:12 executing program 2 (fault-call:1 fault-nth:4): r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xf9fdffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 908.504616][T29880] binder: 29875:29880 ioctl c0306201 200001c0 returned -14 00:23:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 908.617988][T29887] binder: 29885:29887 ioctl c0306201 200001c0 returned -14 [ 908.688324][T29897] binder: 29885:29897 ioctl c0306201 200001c0 returned -14 00:23:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 908.735946][T29900] XFS (loop4): unknown mount option [ÿ]. [ 908.746355][T29904] binder: 29898:29904 ioctl c0306201 200001c0 returned -14 00:23:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="096310400100000000000000000000000000000011634840000000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="8561646600000000010000000000000002000000000000003c000000000000008561646600000000000000000000000000000000000000002500000000000000852a6873010000000200"/88], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00b\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00 \x00\x00'], @ANYBLOB="0006000000000000"], 0x1000, 0x0, &(0x7f0000000380)="9e35a701d9141b4a624628a2a46d583744c20001aafff3419177aa8f96fbdc4e10d5b7d178ebb69c015e945478c9423d2ad4e508aee0d686d80728ee58868d3cd83588168c3783a432488f2ee2527412a1e94253ff1b914aa49622940ff4d4dd49d2b51d974dfe3639ec33549e869176cfead32de2446cc20540df9f0f42b25e9ee81f802bdae982bc95db91a04282e1c22e0ca55e52d35c6785b7abbef896274c1795e32bd6e03d04f66364c33f064507110b9d23d0d803d02e29a063f10f7a9160ba7f1b254eca349b99b82e6a50042236c3d79a529fdbb2db0fe25e8bb9e4bc72523d497f04ae2ea50d2f15f393d0b7dd172ce56a3af2f547529ec7198b4f30c2f3343385b89a66d32444171811cbe745fe72403c5e84a8448e1618afca3a172f51388d5de58f136e6211813520852c7c6c5d44d3fdef62a9fe2a3f1b1cab8d211ace48fa0d448557d3e3d5aeed034b24983bbdea9a2bc88fa0bb37e7f9175912446addcf3cc3522703d17c02000d52a04e2304a549d118b8385fb7a1f7be9596601dd5bbba1a54c73b5da13352d594f22ef33a51798af0972ee33e28c90bc79bdaa0bb83cfe8a04eaa0189cd52a0191da9ae0ebc9b8d08b25e09d46eb140f0f9f5138a7c8b0ee1e5bde2a70adbdb7a49a56ded368889984ca7ca3699cb51d5283a265ac5ed3edc32a4a5c54e1a266e15ba12aca3e622da446ae82978ae54b7b6b14dbb2e302f175e0f6a753e08bc63257bbead0f96b81267432f3816cc1cdda75a5c376388375496e4b9a47f43b8a778083e0dea416111912056aef1f3cebdb3f82615e0b2518e024095d6f3b2e4df82e736d22f67e9ee4c2324a0e19f8b39f325714fd835fc71f1314428901e3dda5a14ee6ad010cd3afdb79acc585010e20a72c60fba414b2fac0db129fadf22937b9f0ffeac4292217db593e42f6f2b0a1c09bb2bbef6abd37fc61136b33a6bf509efd9bc4cce747fc3e2b9f65eab9b73ce3a40fb0df2d4793c06fd9065e5812ac427d757f63e914ec084cd245a6979c49ac9d148d7b8441e73dd480cb97b8e80e1ce99792d2254c393de629e5b76663e04f8e5e98de1eb193ea82d2730beb665c354d51e9331005e41fe725c84b9991d1ea497e4fcd9ca54ac207199881aef53a17ef4afd63f3b12647942445d64002afab652be119870071fc0364a42c2ababd5dfde9150d3a798e0a108af6143e2a6d3b61bbb8ac9cebd12903b3cb2ad86d1386566adae5ddd40000749f4f3ca366d2c92a14c5060243b9d0e38cfedde7c8d4e67b69a0ca9a4f42ed74ccd45a66d43ae49e70a0bf0c7eaf5608b41d132bb4fa358c6a5c6e9be3b743afef92fcb947d3973cca9f80f209c83955ebbf66bfe3cc1f23ee545de0a8db29bbe9f87247a188be2fd9312119258891e2500762ffd6cf28d0322c162a9dc4d571c71d6c442295a82891d4816c2a36e956830f1fc8f83e7b207a1841ae99e78487c9cd970afb05ad6df51a9a213e51b24a57d376033e2c28b92cd6c867117fb76570b65daf0178ec7d9b99c151c6eb70a3f915e84d315e40d62f6a53473b47107eaaff9967a625d229a0cc17feb05a74b1646b71ea7072291642a5143dc360042c95109ce8a2e2b959dc936e5b17425b9acc937ac72af766ba08b8eb172b55cf4bc2ac3bb9b3086747c974c5d38a635c4ad407f2985ef2be41c1671f5df130d19006de15d6cae7515a89fdac25ab06db9638e186da6ee9128de9db9c64a1e531d62b70c064e08ae8801f826900eb79a63c4b97ea9b8f5b79be0a9d5a4320f0e1d025470a23a1a75adb9c1186d3528a35f8dd0ac41b94b18343ed5ebbc958585288bc6dc8d6f5ebd28ae1493589425a575d8e2815a9b73d7322ed68f3af0d46ae84800e7b024ceac94d46986b1a5e5f544821087f35bd1e5274007dbf0d8b04c1aa89a08c4c2d70ecaf6f0d7904db15d9f2f1b6daffb3db632402e3ec2dd2c0319a79a00513bc5acb97560031c97895672db526cf8212bac1f44740971f716ee68fe092e38d76c65c829b224ffb99276923fffec6e67700f6405cd6af4f619473d740f8362d058a6479fa7e040b2f2a34956b31a672ea414dbc356fcb8035ab7b7ad57594edbd28033752efdde01e82c8ced4f9589939c7065220ea2ca843d8ee7300a5febed663e9ea5ec9a9d8e2770995fd3872bf1de723c537fabd7a9aa63a258bd9c40bff3bfe4dd37e50c59191ae4e48132daca3150fc0df3f39ee646c164155f06fb722756d5c641e722937af38fe9bf30e51d175bafb695cc2f8ef23d11b559d5c91cb5536e44891d9e944745b54a99979748a98a156b7a0bc12fc6f9da3b088b1d5f56149683ead052a8f851a997defa3434fe513f87e2e7753393ffad7e402c5c10aff285d9e08925dfaf202df95c8e024dbc7ac8becee697b42b9a6141389566d0c493aa71c74c56fa9d645d842b2e2a6af2ea0a71f1eabd76b2346d9b5f81a4965a39b1a5f93bae2c28146480e504cbfd513d20be03e06f945edde9b6b00b31b91911edfd6f6cdb71ba013c27b033e5db194b5ab517e179b19c4171064031f3da66f31adb2e4205871663c730702a422e511c9d8197fd302aac367c9bf08880e378b952f53484025680a9861d9408bef12ac2377e9ce51a32a198f5e45a616bff93c51571cf0302583151cbe2619b8e1534ea92443046b323196fd07b262606f605d1382affd39fe7d43bd1bcbd6227913789436c1325c12712e199aa7e8f1f02e09225a90d948c5b28d782be0533882ef6d7338db5d162d52cc9c9c8012150d95c8670b8965f344911cac97cafe791a387f6d4d8b0892983feb70bf8847d6af017ac606b740e8246cc240fbf0858a3cf427a7d25ae6b33c51a90126eaf1ddb38621a66d2e20299010bf01ce8a21f72a2c97e17ba686362f5b9f7754bab12043e8160ea019557946c55e6972420a85f98ee41b671d8e646603fcd111f8abe0514af8591cc7f76ff18563924cc317a1c1d53dedc6198ff0940e567da907d7ff62530c8682319397442a23af8c96c85534972cf18951ca7acacbcd4a9887ea15b82d419c8c9293c9fcc3efe5352ae01f0374602df2c1e9eb9e6a8385131c3b8d54ee70c4f845335b83c1aa1cb59da63ac365e9049bb753d227f983a8ddb93ce4f3e82651cbcaa5365a91ae113635f996afa6372f2ebc4578efa43eb05d108cc47e8b81d7abfa9023122d4a84eeaf3b8b2684156334252ea4216467aa250ec646853c2c8535daed34be2e5488a6ffcb16b97b22ad835b97ab6c49b6c32547e09f0373673f0df06be5e0059177ba179d67df7288bd1dcec53ce46a0c281f7a6c53eb9d1a0e7b0ac87136f74a44ef62356bb5751d04395acee0a5df53fefd4d76333362f41db4bcd7371c341218f8ac3625a0f708a7e7f0593eb1183144138fa6060b93c8dab46d8222ec310840519b3c0d0ac9e729b5fc759664c03ba9943db2ee469f199f714b121f43a8f2e56e53a81aaff111f8bec6a6d6759d4108625bb45633ffb730118be779554d1631cee7722e3842814a94c025e767e18eb5d3a8a668f6fcc9c9df1be643e623614a7c2342f5d7e71fb8a8de56a2944046e52cd7a12ba92fb660041d7de456aedc839a88374935f2bf655082f10a978abaf108c914c8bc71d23e36f94eec3c88e65e9e13c10ad772e0a4ca06930415cb7650f001fe3c694a388f746eb6f999b6bb081894f4a9581344fc5951be04c2d008712fe14fe8e1e71b8a3269845f0154e122892f34a05fcb447fb44af30682abbb76c3a9dc8a0dc6f5b8c13d799ff40f81b3962e15af84ffbf3fe832d1e826e9021a38fd8b9d480312f3f1ad5c672bc852787cbbef74c3848cdfa8f13ba61d9a26abed36530a7dac87942a426deaf0a94ccd9f3ab0e8ed60f14091ebf6b2452287aec9a90d2a5b89ef0ded388a22ab47d6b3e0b3c7a9ed671abc8bb8f784ae69b88466a7b097d458ac17fddc39da644e6cfc72c31264918234521767ef95edea57aa4cd76d3b215c447b2005b94bac45abf127026fb46ee390f0ea8c623e906b39436f2ae84f86595a8caf6a29a531604064f03b8d14c07ebd7cb49302d85e0150e006deeb89d574a87ad746967c332758af60eaf7f9541494aee5da14e098c828067a69be4813b70a42602020d30c2413759e6101abfc96741387967a6e0a0027912df272014c9efe3a3ab0b408df712df18c6e59410265075c5eb09e02368fc75fc5e2ef12d7c792418c702857ea3fa32f58235c040176546f9483811f0331fd505d4530bc8cb63ba5be140ee2f34d62d94a05b607e432b3950a52cefee2e6f17af193a20e48f6f69c07add84b3da15f16d80ec25098f6416ade94b2af77b546cf483729466458c255de0ed144e2f41c1691bef5a58db2a6d94b55ed213d2afb7fa9cd6b56b138bd601cd0d0486201b5b576b210c026a601f36af60ccde588456d4ca157364486eeb18a228769873a84fb684e28117c84da090dc8513df6fe18617875b3b47b3652db9834c651798f16c62a3b6485baf46bd458f334469e828513778cad7af63525e8723e801414c5083036129bca24819b478bf8c576d8d7e24dd2cc574b282dff49c5d30faf5717a2407f0a934eee2c37568c8f86baf395b676c924ad69cb073f25ad1e23751e84e5837e72f4b5ac4bf623e88ffc25dc05679bd6d5930e0b0736a54256b9fac7456f6e26d1087582d5c69f8d4343f5d5545d3c5d2b19400d108a7bad3c8fb358c482e5fa092016a765995431d4c126677aa2e5cf9ed9412f6cb09401d578987903eeec33717748bddbf5492914558eb21a862c6d2759f518d2ce0fdf94d0710c4284c8305f05f8b878d8f61969c86543dee4d1c2d589497db1000a1ec703fd7392ff3f63d82a12980c273d580a6356cca2c285e1027afaef15810b3e72a875a6eef7854ef4a17de9a3a1ea8b8506ee1575b51f1f21ac714edd0c629e2264f89e31874338dac5ab6fccccd513eac3a8678f2e1cba3d42b705f87e9776bd5292ef071b54d7dad0a9f03f1ab6bc177c2d7536260385f07431549a7620d49c88dba6f9f6e40a2016a57312638565d068f07a8e95255115f3e03d2517531fb59b3e258883a56fa93f2ac651702eff3e5b92e54614d02b2ab5acdce30b476840c7b463da53eceb75a6cd83e2f1cae6d0c46b8f7a7ed07fe57fc03fb467fce6f15f933001316e3b3f87e2eb6a3daca4824448265311ccff59a57a417adeb704faaebb596ff57690c87b070c149a4b600bf841186f12a8fccf3edb5b557c440e3842c5688268393801d2a1a0f108ec014b409dfdfc5c3426a62ae5f4c8652c0d02ee9e18aa612d6d474318f628d60a2aef605be6a6a2ffc8ec8f40e1b2986509da3c3d378e5548582eb2fdab61ccc78abaf3f115641a82e18545c6df16279ce54c2b80f28d766c2621caa8c2efe202199a0361b38947c9b0517b3ec3625c3958657fc0182cdf042ff454d20c647ba3d296608ec3ebff5cda1d12fa21f5771d3d22a36a27cac993431fe061e8c306e3d7646693b9cb762ac27e83a1d4ca983421a0cb8ba0eee8a5b1885b02960643e5302af734f78d4d8e89447f84f375d5eae934359d0ca9391bd61f704cdfeadf009bc6211625fc45c5156a19aa73bca8ac20e8a46144f75b461a6417fca7409e955863b704efeeaec56081f6fb746ef0e880d1bc5ce072b48c932c9ee36ecdce7e95d578326d0d7c23f2e690b0da0632e4c13edcd3fed5d606d7e30f274d18efe06f7d30f8effa14365ad319a2133"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000001440), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x7}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000013c0)={r4, 0x1}, &(0x7f0000001480)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80102, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) 00:23:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 00:23:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfe030000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 908.981785][T29917] binder: 29916:29917 ioctl c0306201 200001c0 returned -14 00:23:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x2, &(0x7f0000000200)={0x0, @reserved}) [ 909.072940][T29928] binder: 29916:29928 ioctl c0306201 200001c0 returned -14 [ 909.102827][T29931] binder: 29925:29931 ioctl c0306201 200001c0 returned -14 00:23:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 909.144028][T29924] XFS (loop4): Invalid superblock magic number 00:23:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @multicast2}, &(0x7f0000000180)=0xc) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x90) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x10, &(0x7f0000000200)={0x0, @reserved}) 00:23:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xff000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 909.412287][T29961] binder: 29956:29961 ioctl c0306201 200001c0 returned -14 [ 909.448828][T29958] binder: 29957:29958 ioctl c0306201 200001c0 returned -14 00:23:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x4b66, &(0x7f0000000200)={0x0, @reserved}) 00:23:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:13 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'user.', 'wlan1user\x00'}, &(0x7f0000000240)='-wlan0\x00', 0xfffffffffffffda6, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000140)={@bcast, @null}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) connect$vsock_dgram(r2, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040000000000000000011634840000000000000000000000000000200000080000000000000000000000000000000000000000000000056eac707808832f70000000000000000000000000000000000000600000000"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 909.722760][T29992] binder: 29978:29992 ioctl c0306201 200001c0 returned -14 [ 909.749041][T29977] XFS (loop4): Invalid superblock magic number [ 909.761101][T29988] binder: 29985:29988 ioctl c0306201 200001c0 returned -14 00:23:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x4c00, &(0x7f0000000200)={0x0, @reserved}) 00:23:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008919, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="018240400000000000000000116348400000000000000000000000060000000000000000000000000000000000000000000000d25300"/88], 0xfffffffffffffe9e, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 00:23:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xff0f0000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x4c01, &(0x7f0000000200)={0x0, @reserved}) [ 910.105833][T30019] binder: 30008:30019 unknown command 1077969409 [ 910.113157][T30019] binder: 30008:30019 ioctl c0306201 200001c0 returned -22 00:23:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 910.154854][T30023] binder: 30006:30023 ioctl c0306201 200001c0 returned -14 00:23:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5111, &(0x7f0000000200)={0x0, @reserved}) 00:23:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/route\x00') ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'gre0\x00', 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000300)=[@release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x7, r5, 0x17, r4}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) [ 910.259102][T30024] XFS (loop4): Invalid superblock magic number [ 910.283015][T30034] binder: 30008:30034 unknown command 1077969409 [ 910.289884][T30034] binder: 30008:30034 ioctl c0306201 200001c0 returned -22 00:23:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5412, &(0x7f0000000200)={0x0, @reserved}) [ 910.484174][T30054] binder: 30049:30054 ioctl c0306201 200001c0 returned -14 00:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfffdffff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 910.678366][T30067] XFS (loop4): unknown mount option [ÿ]. 00:23:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x541c, &(0x7f0000000200)={0x0, @reserved}) 00:23:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfffffdf9}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 910.808735][T30082] binder: 30078:30082 ioctl c0306201 200001c0 returned -14 00:23:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4a0480, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000140)={0x2, 0x3, 0x1}) clock_adjtime(0x7, &(0x7f0000000200)={0x5, 0x7, 0x2, 0x1, 0x9f64, 0x5, 0x8a, 0x9, 0x10001, 0x3fc000000, 0x0, 0x2, 0x7, 0x4, 0x4, 0x9, 0xfffffffffffffffd, 0x800, 0x3, 0x64ff, 0x800, 0xd3d9, 0x492, 0x6819, 0x0, 0xfffffffffffffffd}) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfffffc40) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioprio_get$uid(0x3, r4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1c, r3}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000480)={0x1, 0x5, 0x1}) 00:23:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5421, &(0x7f0000000200)={0x0, @reserved}) 00:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 911.011809][T30093] binder: 30092:30093 ioctl c0306201 200001c0 returned -14 [ 911.023202][T30100] XFS (loop4): unknown mount option [ù]. 00:23:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 911.053201][T30093] binder: 30092:30093 ioctl c0306201 200001c0 returned -14 00:23:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 911.126962][T30107] binder: 30106:30107 ioctl c0306201 200001c0 returned -14 00:23:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt(r0, 0xed6, 0x6, &(0x7f0000000380)=""/4096, &(0x7f0000000140)=0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x4}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xfffffffffffffffd}, @in6={0xa, 0x4e24, 0x1, @remote, 0x8}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x31}, @in={0x2, 0x4e23, @rand_addr=0x3}], 0x80) 00:23:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5423, &(0x7f0000000200)={0x0, @reserved}) 00:23:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfffffdff}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5429, &(0x7f0000000200)={0x0, @reserved}) 00:23:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 911.376381][T30129] binder: 30127:30129 ioctl c0306201 200001c0 returned -14 [ 911.406560][T30126] XFS (loop4): unknown mount option [ÿ]. 00:23:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 911.421295][T30134] binder: 30132:30134 ioctl c0306201 200001c0 returned -14 [ 911.433728][T30129] binder: 30127:30129 ioctl c0306201 200001c0 returned -14 00:23:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x16) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000000000faffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xffffff7f}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5450, &(0x7f0000000200)={0x0, @reserved}) 00:23:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 911.705125][T30157] binder: 30154:30157 ioctl c0306201 200001c0 returned -14 00:23:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 911.775845][T30163] binder: 30151:30163 ioctl c0306201 200001c0 returned -14 [ 911.810736][T30163] binder: 30151:30163 ioctl c0306201 200001c0 returned -14 00:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 911.853049][T30166] XFS (loop4): unknown mount option []. 00:23:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5451, &(0x7f0000000200)={0x0, @reserved}) 00:23:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000080)={0x2, 0x8000, [0x3, 0x7, 0x5, 0x7, 0x101], 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="016340400000000000000000116348400000c14f8de08aa8dd6e0f1f5b110000000000000000000000000000000000000000000088391e0800000000000000000000000000000000000000000000007fdc64be0000000000000000000000000000000000b5465f57342eceb114b5c504d0ced32427a5077f7fc74ce7575a6e7a968b80e8050ec2ce06d8f88b4f77cf5c5ffb3ef4e9e4f5453eff2b927ac88f8749d5ad2186f2b4dc4c0b2519b59c0615da796bb1e63c3daf5f866be16a862b947cc27a602bf57811d4ba4c6f3c38a41f41614e2c7cb538f7599f2a3956aa366a1510a3441473623ab6791e2b1a2f773be9e0af703c361b186c06ee2aa9dcd17261b4804e14e8f0844693138bc9d3ae0e1624df7839bbd3c2f2a9ebd2b74e7b625ae18e7b8e8b19ac3c889412c8e9c78403a5f2954c6940daee07a68b4040f97bed092d92aef3eb"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xffffff8c}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 912.013477][T30182] binder: 30179:30182 ioctl c0306201 200001c0 returned -14 00:23:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 912.146809][T30192] XFS (loop4): unknown mount option [Œ]. [ 912.155120][T30194] binder: 30193:30194 ioctl c0306201 200001c0 returned -14 00:23:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5452, &(0x7f0000000200)={0x0, @reserved}) 00:23:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xfffffff6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe467f070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 912.408760][T30210] binder: 30209:30210 ioctl c0306201 200001c0 returned -14 00:23:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5456, &(0x7f0000000200)={0x0, @reserved}) [ 912.459327][T30219] XFS (loop4): unknown mount option [ö]. 00:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163e2d77ae90000000000000000000000004000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xedc000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 912.696499][T30241] binder: 30235:30241 ioctl c0306201 200001c0 returned -14 [ 912.732238][T30242] binder: 30240:30242 unknown command -673029375 00:23:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x5460, &(0x7f0000000200)={0x0, @reserved}) [ 912.739614][T30242] binder: 30240:30242 ioctl c0306201 200001c0 returned -22 00:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 912.794674][T30244] XFS (loop4): Invalid superblock magic number 00:23:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040000000000000000011634840000000000000000000f94bfa69343e9bd400"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 912.989616][T30266] binder: 30265:30266 ioctl c0306201 200001c0 returned -14 00:23:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x6364, &(0x7f0000000200)={0x0, @reserved}) 00:23:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x2000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 913.088058][T30273] binder: 30272:30273 ioctl c0306201 200001c0 returned -14 00:23:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x6611, &(0x7f0000000200)={0x0, @reserved}) 00:23:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2163402100000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4) 00:23:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 913.257799][T30290] binder: 30285:30290 ioctl c0306201 200001c0 returned -14 00:23:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 913.337958][T30288] XFS (loop4): Invalid superblock magic number 00:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 913.425813][T30303] binder: 30300:30303 unknown command 557867809 [ 913.433325][T30303] binder: 30300:30303 ioctl c0306201 200001c0 returned -22 00:23:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x8912, &(0x7f0000000200)={0x0, @reserved}) [ 913.504660][T30310] binder: 30300:30310 unknown command 557867809 [ 913.511696][T30310] binder: 30300:30310 ioctl c0306201 200001c0 returned -22 [ 913.543111][T30314] binder: 30311:30314 ioctl c0306201 200001c0 returned -14 00:23:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x100) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000080)={0x6, 0x4}) 00:23:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x8916, &(0x7f0000000200)={0x0, @reserved}) 00:23:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x3000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 913.829685][T30335] binder: 30331:30335 ioctl c0306201 200001c0 returned -14 00:23:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x8933, &(0x7f0000000200)={0x0, @reserved}) [ 913.879313][T30335] binder: 30331:30335 ioctl c0306201 200001c0 returned -14 [ 913.972881][T30351] binder: 30341:30351 ioctl c0306201 200001c0 returned -14 00:23:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000001163484000000000000000000000000000000000000000000000000000000000000000000000000087f900"/88], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) 00:23:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 914.013405][T30340] XFS (loop4): Invalid superblock magic number 00:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x89e2, &(0x7f0000000200)={0x0, @reserved}) [ 914.113628][T30366] binder: 30364:30366 ioctl c0306201 200001c0 returned -14 00:23:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xb101, &(0x7f0000000200)={0x0, @reserved}) [ 914.254024][T30366] binder: 30364:30366 ioctl c0306201 200001c0 returned -14 [ 914.274520][T30375] binder: 30374:30375 ioctl c0306201 200001c0 returned -14 00:23:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x4000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0c6340400000000000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b535c6e547a267bff57ece7f3e0ddea42130b5b09b81ec0b425c3605a539fa79f4235e3e03116a9c786dc15e3fa873f24214a279732ed338e153815103f189c63a40906edd7793b96a7d126c619aa9b5dfbe292a3b98994268ea878cfc3f5650213041bcce0b537d40f8d877368bed89690b5b54f8c1245ab2cbd2295f7f0594b39f364fdb2e7afab7f9d1a28aa865b4de0713a188ede7fc544156f01419245000a68abe2679e11025329d7f92870b2d8057d60eed1a4d3511aed51d8fe1e7f85df9c3ff56550ce2af8112566e013dc696d5ca0a5aa41414a8cdee99ea99a5990e187967f3790d91429fd43e058ad8de629e90000000000"], 0xfffffffffffffe9e, 0x0, 0x0}) r2 = dup3(r0, r1, 0x80000) write$UHID_CREATE(r2, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000200)=""/213, 0xfffffffffffffd54, 0x6, 0xfffffffffffffffb, 0x8, 0x400, 0x2}, 0x120) 00:23:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000f0ffff", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 914.513658][T30400] binder: 30397:30400 ioctl c0306201 200001c0 returned -14 [ 914.552571][T30402] binder: 30401:30402 unknown command 1077961484 00:23:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x400454ca, &(0x7f0000000200)={0x0, @reserved}) [ 914.559313][T30402] binder: 30401:30402 ioctl c0306201 200001c0 returned -22 00:23:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:18 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0xffffffffffffff40, 0x8, 0x1, 0x5, 0x8}, 0x14) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xded7, 0x105000) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x3, 0x480, 0x4, 0x484, 0x0, 0x4, 0x2000, 0x6, 0x1, 0xfffffffffffffffb, 0x7, 0x3, 0x8, 0x6, 0x20, 0x6272, 0x2, 0x9, 0xf2, 0x1, 0xf9f, 0x2e, 0x0, 0x9, 0x73, 0x4, 0x5, 0x3f, 0x5, 0x4, 0x0, 0x3, 0x3, 0x8, 0x8, 0xffffffff, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x3860, 0xfb52, 0x5, 0x7, 0xfffffffffffffff9, 0xcad, 0x10001}, r0, 0x1, r1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000020000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 914.784780][T30421] binder: 30420:30421 ioctl c0306201 200001c0 returned -14 00:23:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 914.837671][T30411] XFS (loop4): Invalid superblock magic number [ 914.871181][T30435] binder: 30433:30435 ioctl c0306201 200001c0 returned -14 00:23:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x400455c8, &(0x7f0000000200)={0x0, @reserved}) 00:23:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000030000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 915.038006][T30444] binder: 30443:30444 ioctl c0306201 200001c0 returned -14 00:23:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0xe000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x54c49bd5, 0x2c0000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141041, 0x0) ftruncate(r2, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0163402b00000000000000001163484000000000000000000000000000000000000000000000000000000000000098df00000000000000000000000000000000000000000000000000000000000000000000005f5d5687d5dde5e1efcaa71e97067bbff48189c27af312e2aaf2f2e6c28478ffe964f5da2950ab0a28b34138bc6660f8cd9c7796145d4920ba246dc91bd5f64e5100edb3f73ebaa5feabe13759e45ac3df7a1755ad629ebcf09817b188a904"], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000040000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x40049409, &(0x7f0000000200)={0x0, @reserved}) [ 915.301180][T30467] binder: 30463:30467 ioctl c0306201 200001c0 returned -14 [ 915.314226][T30460] binder: 30459:30460 unknown command 725639937 [ 915.320809][T30460] binder: 30459:30460 ioctl c0306201 200001c0 returned -22 00:23:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x4010744d, &(0x7f0000000200)={0x0, @reserved}) 00:23:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000060000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 915.459662][T30476] binder: 30459:30476 unknown command 725639937 [ 915.465963][T30476] binder: 30459:30476 ioctl c0306201 200001c0 returned -22 00:23:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) [ 915.583937][T30477] XFS (loop4): Invalid superblock magic number 00:23:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x6a000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000a0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x4020940d, &(0x7f0000000200)={0x0, @reserved}) 00:23:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffe27, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40406301}, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001840)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'sit0\x00', r2}) 00:23:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000100000000000001163484000"/88], 0xfffffffffffffe9e, 0x0, 0x0}) 00:23:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x800454d2, &(0x7f0000000200)={0x0, @reserved}) 00:23:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000c0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) [ 916.103045][T30540] binder: 30531:30540 ioctl c0306201 200001c0 returned -14 [ 916.134897][T30539] binder: 30538:30539 ioctl c0306201 200001c0 returned -14 [ 916.178800][T30526] XFS (loop4): Invalid superblock magic number 00:23:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000e0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x100000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:20 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}) write$binfmt_misc(r1, &(0x7f00000000c0)={'sy\x9a}'}, 0xff5f) 00:23:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x80086301, &(0x7f0000000200)={0x0, @reserved}) 00:23:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001000000000000000000000f0000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 916.515263][T30569] binder: 30568:30569 ioctl c0306201 200001c0 returned -14 00:23:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000100000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0x9000aea4, &(0x7f0000000200)={0x0, @reserved}) [ 916.726589][T30580] XFS (loop4): Invalid superblock magic number 00:23:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#'], 0x1) [ 916.816988][T30602] binder: 30598:30602 ioctl c0306201 200001c0 returned -14 00:23:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x200000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000600000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0044306, &(0x7f0000000200)={0x0, @reserved}) 00:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:21 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/5, 0x5) ioctl$int_in(r0, 0x800000800c5011, &(0x7f00000000c0)) 00:23:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000f00000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0044308, &(0x7f0000000200)={0x0, @reserved}) [ 917.313197][T30630] XFS (loop4): Invalid superblock magic number 00:23:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000300", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xff3e, 0x0, &(0x7f0000000080)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3b, 0x0, 0x0}) 00:23:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x300000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0045878, &(0x7f0000000200)={0x0, @reserved}) 00:23:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000600", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 917.798320][T30682] binder: 30679:30682 ioctl c0306201 0 returned -14 [ 917.819373][T30671] XFS (loop4): Invalid superblock magic number 00:23:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045009, 0x0) 00:23:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000a00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0045878, &(0x7f0000000200)={0x0, @reserved}) 00:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 918.033575][T30701] binder: 30694:30701 ioctl c0306201 0 returned -14 00:23:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000c00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0189436, &(0x7f0000000200)={0x0, @reserved}) 00:23:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x400000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:22 executing program 1: unshare(0x400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) flock(r0, 0x8) 00:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:23:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0205647, &(0x7f0000000200)={0x0, @reserved}) 00:23:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f6\nu\xaa!\xd7x\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000ff0d00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) [ 918.417974][T30727] binder: 30723:30727 ioctl c0306201 0 returned -14 00:23:22 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x3, 0x4) 00:23:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0205649, &(0x7f0000000200)={0x0, @reserved}) 00:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 918.544956][T30731] XFS (loop4): Invalid superblock magic number 00:23:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xd7!\xaau\n6\x7f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000e00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x500000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc020660b, &(0x7f0000000200)={0x0, @reserved}) 00:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:22 executing program 1: unshare(0x8020000) semget$private(0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x1) setns(r0, 0x0) 00:23:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0285628, &(0x7f0000000200)={0x0, @reserved}) 00:23:23 executing program 1: 00:23:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000f00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf0\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:23 executing program 1: [ 919.229491][T30786] XFS (loop4): Invalid superblock magic number 00:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x0, 0x0, 0x0}) 00:23:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x600000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0285629, &(0x7f0000000200)={0x0, @reserved}) 00:23:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000003f00", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x0, 0x0, 0x0}) 00:23:23 executing program 1: 00:23:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc038563c, &(0x7f0000000200)={0x0, @reserved}) 00:23:23 executing program 1: 00:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x0, 0x0, 0x0}) [ 919.794358][T30835] XFS (loop4): Invalid superblock magic number 00:23:23 executing program 1: 00:23:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x700000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0585609, &(0x7f0000000200)={0x0, @reserved}) 00:23:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000655800", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:23:24 executing program 1: 00:23:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000006000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc058560f, &(0x7f0000000200)={0x0, @reserved}) 00:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:23:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x4, 0x0, 0x0, 0xa88, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7f, 0xf7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xe32, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x205ee, 0x0, 0xffffffffffffffe1, 0x9, 0x3, 0x3}, 0x0, 0x3, r0, 0x3) [ 920.329576][T30881] XFS (loop4): Invalid superblock magic number 00:23:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000586500", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x800000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:23:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000fc3ffffffa30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x4, 0x0, 0x0, 0xa88, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7f, 0xf7, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xe32, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x205ee, 0x0, 0xffffffffffffffe1, 0x9, 0x3, 0x3}, 0x0, 0x3, r0, 0x3) 00:23:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0585611, &(0x7f0000000200)={0x0, @reserved}) 00:23:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000008100", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc058565d, &(0x7f0000000200)={0x0, @reserved}) 00:23:24 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) fsetxattr$security_smack_entry(0xffffffffffffff9c, &(0x7f00000003c0)='security.SMACK64MMAP\x00\xd8\xea\xab\x15p\xfe\xc1\xd3\xd5\x9f4\x88\x01JS\xf5\x9f\xad\xb0\xb3D*\xe5\xd6\x8e\xc5\xe2Z\x10\xfa\xbb\x1a8ae5\\\xa4\bP#*\t|ex\'\xd9\xd8\x80\x7f\x7f0\b\x00(C\xc5\x03\x98wG-\x8b<\xa3.\x13\x15+-8\xf6\x9c\x9bP1\xdb\xe6d\xc9\x0eNs\xb6\xb8\xf7j\xf3\x93\xd4\x90\x9d\xf9\xac\x8e\x91\xd1\xa6Y\xa1B\x8b\xf4dW\xa8\x01\x10b\xa60\xa3\xbd\x10\xf25\x1cQ<\x82l\x16\x0f\x17\xf3NEW=\x9e\xb6\x1f\xe7\xed\xe8\xc2\xa2\x9es-\x96\xb4\xe6K\xada9\x90}\xfc\xb5\xea\xdd\xb6e\r\xb0A/~\xac\xda\x87\xcbz&\xb1\xd7\xaa\xf8P\xfe\xf6\'\x87\xaf08Ja\xdb\xa7\xfc\xcahY', 0x0, 0xfffffffffffffcda, 0xfffffffffffffffd) [ 920.834835][T30933] XFS (loop4): Invalid superblock magic number 00:23:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300001000000000066f3069a08f9e3ab14000100100001000800010069666500c3000000"], 0x28}}, 0x0) 00:23:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010000000000000000000000f000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000080000"], 0x44}}, 0x0) 00:23:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0x15c, 0x1b, 0x0, 0x0, 0x0, {{{@in=@remote, @in=@local}}}, [@lifetime_val={0x24}, @algo_auth_trunc={0x4c, 0x14, {{'sha256-ssse3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev, @in6=@empty}}]}, 0x15c}}, 0x0) 00:23:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard='discard'}], [], 0x900000000000000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 00:23:25 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845667, &(0x7f0000000200)={0x0, @reserved}) [ 921.150708][T30959] __nla_validate_parse: 34 callbacks suppressed [ 921.150719][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 921.166558][T30959] kasan: CONFIG_KASAN_INLINE enabled [ 921.171926][T30959] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 921.180089][T30959] general protection fault: 0000 [#1] SMP KASAN [ 921.184871][ T3900] kobject: 'loop2' (00000000c8aa644d): kobject_uevent_env [ 921.186972][T30959] CPU: 1 PID: 30959 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 921.186983][T30959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.187056][T30959] RIP: 0010:tcf_ife_init+0x260/0x1850 [ 921.187082][T30959] Code: 00 00 48 c7 c7 80 a5 da 88 e8 5c a9 a6 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 921.194343][ T3900] kobject: 'loop2' (00000000c8aa644d): fill_kobj_path: path = '/devices/virtual/block/loop2' 00:23:25 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x2, @reserved}) [ 921.201880][T30959] RSP: 0018:ffff888099106eb8 EFLAGS: 00010246 [ 921.201892][T30959] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110152b4d30 [ 921.201899][T30959] RDX: 0000000000000000 RSI: 1ffff110152b4d37 RDI: 0000000000000282 [ 921.201906][T30959] RBP: ffff888099107060 R08: 0000000000000002 R09: ffff8880a95a6988 [ 921.201913][T30959] R10: fffffbfff13494e7 R11: ffffffff89a4a73f R12: 0000000000000001 [ 921.201920][T30959] R13: ffff88808d7c2480 R14: ffff8880991078c0 R15: 0000000000000000 [ 921.201930][T30959] FS: 00007f02c7c38700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 921.201938][T30959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.201945][T30959] CR2: 000000000046ee30 CR3: 00000000947f7000 CR4: 00000000001406e0 [ 921.201954][T30959] Call Trace: [ 921.202025][T30959] ? tc_lookup_action_n+0xd2/0x100 [ 921.325628][T30959] ? __add_metainfo+0x480/0x480 [ 921.330480][T30959] ? tc_lookup_action_n+0xd2/0x100 [ 921.335598][T30959] ? lock_downgrade+0x920/0x920 [ 921.340445][T30959] ? symbol_put_addr+0x40/0x40 [ 921.345203][T30959] ? mark_lock+0xc0/0x11e0 [ 921.349618][T30959] ? __kasan_check_write+0x14/0x20 [ 921.354724][T30959] ? do_raw_read_unlock+0x3f/0x70 [ 921.359750][T30959] tcf_action_init_1+0x6f2/0xa80 [ 921.364706][T30959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 921.370948][T30959] ? tcf_action_dump_old+0x80/0x80 [ 921.376061][T30959] ? is_bpf_text_address+0xae/0x170 [ 921.381269][T30959] tcf_action_init+0x241/0x360 [ 921.386036][T30959] ? tcf_action_init_1+0xa80/0xa80 [ 921.391178][T30959] ? mark_lock+0xc0/0x11e0 [ 921.395588][T30959] ? save_stack+0x5c/0x90 [ 921.399912][T30959] ? save_stack+0x23/0x90 [ 921.404234][T30959] ? __kasan_slab_free+0x102/0x150 [ 921.409356][T30959] ? __kasan_check_read+0x11/0x20 [ 921.414378][T30959] tcf_action_add+0xe8/0x370 [ 921.418996][T30959] ? tca_action_gd+0x1710/0x1710 [ 921.423929][T30959] ? refcount_dec_not_one+0x1f0/0x1f0 [ 921.429310][T30959] ? __nla_parse+0x43/0x60 [ 921.433730][T30959] tc_ctl_action+0x3b5/0x4bc [ 921.438419][T30959] ? tcf_action_add+0x370/0x370 [ 921.443364][T30959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 921.449692][T30959] ? tcf_action_add+0x370/0x370 [ 921.454719][T30959] rtnetlink_rcv_msg+0x444/0xb10 [ 921.459663][T30959] ? rtnetlink_put_metrics+0x580/0x580 [ 921.465316][T30959] ? netlink_deliver_tap+0x233/0xbf0 [ 921.470596][T30959] ? find_held_lock+0x35/0x130 [ 921.475357][T30959] netlink_rcv_skb+0x177/0x450 [ 921.480120][T30959] ? rtnetlink_put_metrics+0x580/0x580 [ 921.485580][T30959] ? netlink_ack+0xb30/0xb30 [ 921.490172][T30959] ? netlink_deliver_tap+0x25c/0xbf0 [ 921.495461][T30959] rtnetlink_rcv+0x1d/0x30 [ 921.499880][T30959] netlink_unicast+0x531/0x710 [ 921.504821][T30959] ? netlink_attachskb+0x7c0/0x7c0 [ 921.509948][T30959] ? _copy_from_iter_full+0x25d/0x8a0 [ 921.515583][T30959] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 921.521300][T30959] ? __check_object_size+0x3d/0x43c [ 921.526524][T30959] netlink_sendmsg+0x8a5/0xd60 [ 921.531292][T30959] ? netlink_unicast+0x710/0x710 [ 921.536228][T30959] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 921.541773][T30959] ? apparmor_socket_sendmsg+0x2a/0x30 [ 921.547230][T30959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 921.553468][T30959] ? security_socket_sendmsg+0x8d/0xc0 [ 921.558929][T30959] ? netlink_unicast+0x710/0x710 [ 921.563862][T30959] sock_sendmsg+0xd7/0x130 [ 921.568282][T30959] ___sys_sendmsg+0x803/0x920 [ 921.572957][T30959] ? copy_msghdr_from_user+0x440/0x440 [ 921.578418][T30959] ? __fget+0x388/0x560 [ 921.582585][T30959] ? ksys_dup3+0x3e0/0x3e0 [ 921.586998][T30959] ? __fget_light+0x1a9/0x230 [ 921.591847][T30959] ? __fdget+0x1b/0x20 [ 921.595914][T30959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.602151][T30959] __sys_sendmsg+0x105/0x1d0 [ 921.606757][T30959] ? __sys_sendmsg_sock+0xd0/0xd0 [ 921.611788][T30959] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 921.617245][T30959] ? do_syscall_64+0x26/0x6a0 [ 921.621929][T30959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.628011][T30959] ? do_syscall_64+0x26/0x6a0 [ 921.639559][T30959] __x64_sys_sendmsg+0x78/0xb0 [ 921.644327][T30959] do_syscall_64+0xfd/0x6a0 [ 921.648842][T30959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.654731][T30959] RIP: 0033:0x459819 [ 921.658635][T30959] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.678421][T30959] RSP: 002b:00007f02c7c37c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.686845][T30959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 921.694832][T30959] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 921.703239][T30959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 921.711213][T30959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02c7c386d4 [ 921.719733][T30959] R13: 00000000004c75e4 R14: 00000000004dcb80 R15: 00000000ffffffff [ 921.727888][T30959] Modules linked in: [ 921.731883][T30959] ---[ end trace 3fa02759141e93fa ]--- [ 921.737420][T30959] RIP: 0010:tcf_ife_init+0x260/0x1850 [ 921.742797][T30959] Code: 00 00 48 c7 c7 80 a5 da 88 e8 5c a9 a6 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 921.750499][ T3900] kobject: 'loop2' (00000000c8aa644d): kobject_uevent_env [ 921.762556][T30959] RSP: 0018:ffff888099106eb8 EFLAGS: 00010246 [ 921.762571][T30959] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110152b4d30 [ 921.762579][T30959] RDX: 0000000000000000 RSI: 1ffff110152b4d37 RDI: 0000000000000282 [ 921.762587][T30959] RBP: ffff888099107060 R08: 0000000000000002 R09: ffff8880a95a6988 [ 921.762605][T30959] R10: fffffbfff13494e7 R11: ffffffff89a4a73f R12: 0000000000000001 [ 921.769831][ T3900] kobject: 'loop2' (00000000c8aa644d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 921.775808][T30959] R13: ffff88808d7c2480 R14: ffff8880991078c0 R15: 0000000000000000 [ 921.825956][T30959] FS: 00007f02c7c38700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 921.834934][T30959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.841592][T30959] CR2: 000000000046ee30 CR3: 00000000947f7000 CR4: 00000000001406e0 [ 921.849624][T30959] Kernel panic - not syncing: Fatal exception [ 921.851407][ T3900] kobject: 'loop2' (00000000c8aa644d): kobject_uevent_env [ 921.856759][T30959] Kernel Offset: disabled [ 921.868392][T30959] Rebooting in 86400 seconds..