0 [ 1663.969112] alloc_skb_with_frags+0x93/0x590 [ 1663.973637] ? __might_fault+0x12b/0x1e0 [ 1663.977723] sock_alloc_send_pskb+0x72d/0x8a0 [ 1663.982338] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1663.987730] ? iov_iter_advance+0x261/0xe30 [ 1663.992086] ? sock_wmalloc+0x120/0x120 [ 1663.996080] ? copyin+0xb5/0x100 [ 1663.999460] ? _copy_from_iter_full+0x23c/0x800 [ 1664.004142] ? kasan_check_read+0x11/0x20 [ 1664.008310] packet_sendmsg+0x1a16/0x6440 [ 1664.012483] ? find_held_lock+0x35/0x130 [ 1664.016569] ? __fget+0x340/0x540 [ 1664.020055] ? sock_has_perm+0x209/0x2a0 [ 1664.024153] ? packet_notifier+0x840/0x840 [ 1664.028410] ? iterate_fd+0x360/0x360 [ 1664.032223] ? proc_fail_nth_write+0x9d/0x1e0 [ 1664.036748] ? selinux_socket_sendmsg+0x36/0x40 [ 1664.041468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1664.047033] ? security_socket_sendmsg+0x8d/0xc0 [ 1664.051818] ? packet_notifier+0x840/0x840 [ 1664.056079] sock_sendmsg+0xd7/0x130 [ 1664.059821] __sys_sendto+0x262/0x380 [ 1664.063662] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1664.068451] ? kasan_check_write+0x14/0x20 [ 1664.072721] ? __sb_end_write+0xd9/0x110 [ 1664.076824] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1664.082380] ? fput+0x128/0x1a0 [ 1664.085697] ? ksys_write+0x1f1/0x2d0 [ 1664.089525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1664.094396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1664.099177] ? do_syscall_64+0x26/0x620 [ 1664.103174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.108575] __x64_sys_sendto+0xe1/0x1a0 [ 1664.112662] do_syscall_64+0xfd/0x620 [ 1664.116483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.121691] RIP: 0033:0x459f39 [ 1664.124899] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:55:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x2, 0x0, 0x0, 0x1000}, 0x20040885) 03:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:55:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) [ 1664.143839] RSP: 002b:00007f5fa4ad2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1664.151581] RAX: ffffffffffffffda RBX: 00007f5fa4ad2c90 RCX: 0000000000459f39 [ 1664.158978] RDX: 000000000000006c RSI: 00000000200001c0 RDI: 0000000000000003 [ 1664.166270] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1664.173568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5fa4ad36d4 [ 1664.180856] R13: 00000000004c83b6 R14: 00000000004de528 R15: 0000000000000005 03:55:27 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4b47, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:27 executing program 5 (fault-call:7 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1664.313584] net_ratelimit: 21 callbacks suppressed [ 1664.313592] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.318677] protocol 88fb is buggy, dev hsr_slave_1 03:55:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1664.437457] binder: 5612:5613 ioctl 4b47 20000080 returned -22 03:55:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:55:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4b49, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1664.594389] EXT4-fs (loop2): inodes count not valid: 2046820480 vs 128 03:55:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1664.765117] binder: 5632:5633 ioctl 4b49 20000080 returned -22 [ 1664.873605] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.878745] protocol 88fb is buggy, dev hsr_slave_1 [ 1664.883599] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.888838] protocol 88fb is buggy, dev hsr_slave_1 03:55:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x8, 0x0, 0x0, 0x1000}, 0x20040885) 03:55:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:55:27 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000fff3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 1664.953662] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.958784] protocol 88fb is buggy, dev hsr_slave_1 03:55:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:55:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:55:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1665.241188] EXT4-fs (loop2): inodes count not valid: 4279173248 vs 128 03:55:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:55:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e51600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:28 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000040004000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1665.433641] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.438857] protocol 88fb is buggy, dev hsr_slave_1 03:55:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffffc3}, 0x0) 03:55:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x10, 0x0, 0x0, 0x1000}, 0x20040885) 03:55:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:28 executing program 4 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee606d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffffe4}, 0x0) 03:55:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1665.843450] EXT4-fs (loop2): inodes count not valid: 67108992 vs 128 03:55:28 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000000a04000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee607d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:55:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x4b47, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x3, 0x0, 0x1000}, 0x20040885) 03:55:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1666.311852] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 03:55:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee636d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1666.410962] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1666.442893] binder: 6043:6047 ioctl 4b47 20000080 returned -22 03:55:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 03:55:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x4b49, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1666.468986] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1666.512800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a700039360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:29 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000023804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1666.651080] binder: 6161:6166 ioctl 4b49 20000080 returned -22 03:55:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 03:55:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000800600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1666.927488] binder: 6179:6188 ioctl 541b 20000080 returned -22 03:55:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x7, 0x0, 0x1000}, 0x20040885) 03:55:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1667.122912] EXT4-fs (loop2): inodes count not valid: 33554560 vs 128 03:55:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000800700002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:30 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000033804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000803600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x2) 03:55:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x2000022c, 0x0, 0x0, 0x0) 03:55:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x3) [ 1667.781270] EXT4-fs (loop2): inodes count not valid: 50331776 vs 128 03:55:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x300, 0x0, 0x1000}, 0x20040885) 03:55:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) 03:55:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x1, 0x50, 0x1, &(0x7f0000000340)="9fa010b3ba244eafa88e0c15d2e3240cbef9f70ef08cd131db5fd7b289686d0d12f063e55b6b6a2519f1d6f2845df2a10597967de538b915906b4184cdd2a8c177a291d810f8d16353f3d9f57513f603"}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x9d, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/157}, &(0x7f00000002c0)=0x78) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:30 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000043804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000e80), 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000080)="ae5d0e1f91ff0a640b29d113541eb89b764927310d8c02a280dd8550bd2bd9663e1af187b4c96f54d5a4c4f426d1", 0x2e}, {&(0x7f00000001c0)="5230520a839c86bbc3b5f2c21d4a81342670e62d8203f131274b84a4005f201f5ac37b5668c54923806d89678ba9618f79e7b44e22404baab5d6da75d0a237229b82e83fdab16696fac3d3056c644bdde80a5d0f6680a734a71ad4d522ee5268aa09dc5908dbb1574391d14328f956985b7a045f8cb717b4b97ee940b5a509920b7f1ef98c7adb52bc16b5d43f7cbe2bb6d6e98920c45efa9d641eda51969b9a316e651af171d5f43b8347e37b32729697cf678a3fe7d8c4f3d25872178ce0c146a4db6b2768f3791be046b6507111f5f6ca9340ea0807ca7ff7c5faf99f497c8c187dcd14a619", 0xe7}, {&(0x7f00000002c0)="b08e95ebb688012e1041875dd253aec2bbb9851f5e00ef37eb5fc59274908dfd4933be5bbc5022568cbddccc265f3f34e75e54e3b54d4c6e82c19f3e0eb8270e82195a5481205054571ce0adaf7da4e9e68eb68c50d57812cdf0f9896797c0d87c73a5268e57d2feae090d161a073511864fb07d3114d3ef3c2b5c4bf3f6d9ea4bc0aa1a4584f5087d853ed311076b86dfdffcd022035e858e3233765dee8f845befd53e8ac91d0d692e76ff8025fc8505e68cc50310", 0xb6}, {&(0x7f0000000ec0)}, {&(0x7f0000000100)}], 0x5, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4000004}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) dup3(r2, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) sendto$inet6(r2, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1668.159542] binder: 6576:6578 ioctl 40086602 20000080 returned -22 03:55:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x5) 03:55:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40087602, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6) [ 1668.378768] EXT4-fs (loop2): inodes count not valid: 67108992 vs 128 [ 1668.490383] binder: 6598:6600 ioctl 40087602 20000080 returned -22 03:55:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x700, 0x0, 0x1000}, 0x20040885) 03:55:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000053804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x7) 03:55:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:31 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x9) [ 1668.978274] binder: 6630:6631 ioctl 80086601 20000080 returned -22 [ 1669.012641] EXT4-fs (loop2): inodes count not valid: 83886208 vs 128 03:55:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80087601, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xa) [ 1669.258214] binder: 6651:6653 ioctl 80087601 20000080 returned -22 03:55:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x1000000, 0x0, 0x1000}, 0x20040885) 03:55:32 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000063804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$packet(r2, &(0x7f0000000400)={0x11, 0x38, r5, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40000) accept$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendto$packet(r7, &(0x7f00000000c0)="2c30c1341eabdc98f45523e7900737dc8754a9d361787398ebecf4a1569d2faa99d6d344dbdd2843f18f66365ae516efcb46dbc61e01bbc2f2c329ed47da34e930f34aba2f9e20b29ae4039c8d771dd77a3079caf37c6558e0f626918b5ce1338b933d963d29efad4fd531647f735b8624710456641f043ed87a9c55dcd66b43a715646e7e01efb4fbd3c60b21f531d60373f7c3459f6d8a9174169adbc640dcea55fd599970f555ad6c5a3752c54d2cf64657534b558a0494726d4c20b4bd02a3fcbd2dc15f9818991c2c56d80d155e630786", 0xd3, 0x20024000, &(0x7f00000002c0)={0x11, 0xf8, r8, 0x1, 0x1, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffd62) r10 = dup3(r0, r6, 0x0) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xc) 03:55:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1669.593653] net_ratelimit: 24 callbacks suppressed [ 1669.593661] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.603904] protocol 88fb is buggy, dev hsr_slave_1 03:55:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1669.637405] EXT4-fs (loop2): inodes count not valid: 100663424 vs 128 [ 1669.673614] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.678750] protocol 88fb is buggy, dev hsr_slave_1 03:55:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xe) [ 1669.753610] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.758779] protocol 88fb is buggy, dev hsr_slave_1 [ 1669.791970] binder: 6689:6691 ioctl 40086602 20000080 returned -22 03:55:32 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000073804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x3000000, 0x0, 0x1000}, 0x20040885) 03:55:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x40087602, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = dup3(r0, r1, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) 03:55:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf) 03:55:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1670.080668] binder: 6712:6713 ioctl 40087602 20000080 returned -22 03:55:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1670.203307] QAT: Invalid ioctl 03:55:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x10) 03:55:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1670.278963] EXT4-fs (loop2): inodes count not valid: 117440640 vs 128 [ 1670.367236] QAT: Invalid ioctl 03:55:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x48) 03:55:33 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000083804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1670.553595] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.558724] protocol 88fb is buggy, dev hsr_slave_1 [ 1670.578953] binder: 6748:6750 ioctl 80086601 20000080 returned -22 03:55:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x7000000, 0x0, 0x1000}, 0x20040885) 03:55:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2400000a140000000000080000000008000100", @ANYRES32=r5], 0x24}}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @local}, &(0x7f0000000240)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r9}]}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9a9c5c30b94ed09d8fb065001800010000000000000000000a14000000000008", @ANYRES32=r12], 0x24}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@empty, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r16}]}, 0x24}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004f00)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000005000)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000005500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000054c0)={&(0x7f0000005040)={0x44c, 0x0, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x13c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8ce1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x13c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x5, 0x80, 0x40}, {0x6, 0x26, 0x2, 0x8}, {0xffe1, 0x40, 0xb5}, {0x9, 0xe5, 0xd8, 0x3ff}, {0x80, 0xff, 0x1, 0x3}, {0x1, 0x6, 0x79, 0x8000}, {0x100, 0x80, 0x0, 0x1}, {0x0, 0x7, 0x1f, 0x3ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1a6a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) dup3(r0, r1, 0x0) r18 = socket$inet_udp(0x2, 0x2, 0x0) r19 = dup(r18) r20 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(r20) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) setsockopt$packet_int(r19, 0x107, 0x7, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0x80087601, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1a0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4c) [ 1670.832481] EXT4-fs (loop2): inodes count not valid: 134217856 vs 128 03:55:33 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000093804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1671.001168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20153 sclass=netlink_route_socket pig=6782 comm=syz-executor.5 [ 1671.014476] binder: 6773:6784 ioctl 80087601 20000080 returned -22 [ 1671.050056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1671.056767] IPv6: NLM_F_CREATE should be set when creating new route [ 1671.063421] IPv6: NLM_F_CREATE should be set when creating new route 03:55:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x60) [ 1671.113589] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.113623] protocol 88fb is buggy, dev hsr_slave_0 03:55:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1671.168394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1671.175077] IPv6: NLM_F_CREATE should be set when creating new route [ 1671.181644] IPv6: NLM_F_CREATE should be set when creating new route 03:55:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x68) [ 1671.358456] EXT4-fs (loop2): inodes count not valid: 150995072 vs 128 [ 1671.365379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1671.381244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20153 sclass=netlink_route_socket pig=6880 comm=syz-executor.5 03:55:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xa0010000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x8dffffff, 0x0, 0x1000}, 0x20040885) 03:55:34 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0xfeaa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) socket$inet6(0xa, 0x80000, 0x50) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) 03:55:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6c) 03:55:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfdfdffff, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1671.852975] EXT4-fs (loop2): inodes count not valid: 167772288 vs 128 03:55:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfffffdfd, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xb800) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0xffffffffffffffb7) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x42, 0x9, &(0x7f0000001680)=[{&(0x7f0000000240)="1856dd126e2c9abd2a504ee4760f6a55cbc64f8f4fd12c8a7b95e39b2163bde8aa7a5c35307fb1f1edea4bd9b74b8a690833a80ba6bd101831b79825b0da72086e92eeb1d5591987dcea26621f7a9a8ada005e741809dff55700dba7a243bcf58f619ade1bf38a8b84670213dcb98cd9164d5de19df2edc2cfb6cf079b957bcfea17727df3a7c4d95aea5b6e3cac995511013b111ddc993e4f11e5bd42a1a1e89202402b840abd2204936a4e09fdb6760979632d88d03240110147db4ae8105cbb514d34b86be860fb8ea6bc956b0d397c1f62b6cb6fdfd013e2206eb51f849b845c734ae9430d5a47feee8dd384545cb375923f", 0xf4, 0x2}, {&(0x7f0000000100)="72ecd7", 0x3, 0x3f}, {&(0x7f0000000540)="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", 0x1000, 0x9}, {&(0x7f0000000340)="b417260b10fbd7d9946a3f0d7b1bd2e6324265711d65ee37e8b54f65d4b34c482eb639807d02a68405656c5bb6025607aaf9f2821066da057c1eedb5fcc696b40f81e6ae39c73d7cb963e5e26a6a0c903320cea4f2df478dcbc7d8b425f3c3ad8016172da0f683037e39333dc7660e41eb0f39b34082dffc22b763414761547e92bc6ff2939a89493e9465a99ce934ad94f3ec43b4a3334dc64a85f4c5b1078333e1d9399402aa90dd4856580a66d2b859", 0xb1, 0x3}, {&(0x7f0000000400)="6e070af56b0e2fe7dec799b9078a1f0b65f9f7d7c8d9cca07b29da70697548d6e166f444dd0e00f91f3b1104694d9f3ff535860427627d27ca3fd1fa7ca5acf72244017b029cb2937f76a3a310a8855b0c01b9d5718f38811642d399bbca4975eac2be1f7bb5a25bd7de043f3f98da93ae59aab8a4df1838a63f2e6b4f80d9a2e69d25947bbdafba471c0aef58e25bc3a69334a0068411588f04943da0e64ad5ef6ebad8f93c52f7506bd45857632cce09ddd15eb044a333dc915fd3b9184a", 0xbf, 0xff}, {&(0x7f0000001540)="a273d787828978f01bc178822f9d1e5f84250595251d0afb86612e833ab95bb95ac9aaa9c70bf5b7307548b50795badd8d0631d7767a5b6f736253488fab74662fa1fbeda44ff479c74758ec63598092235f735e3e03b58a35f3038c8bf1767ca6e7e1347f6a0f4e257d22c02e522801181c6f8e12d00b53a97aa986ba3d35ecda03e793b343f62e53e203a6d36a2e00d6768e17ce043bfef4ef25b882", 0x9d, 0xff}, {&(0x7f0000000140)="9ddfc83eb34bed50bc58c36502ef0fec0fc3a1d9a9bfdb2099", 0x19, 0xfffffffffffffffe}, {&(0x7f0000001600)="096d34baf9ab4fedda515b981a30a4879d20b13341506935c66fb610a43878bfdf3f2f7b36f4cb22853ab5dcf1bd469a14835943a512fd8cd1e91612ddd65f9c4f4ee335807f", 0x46, 0x1f}, {&(0x7f0000000180), 0x0, 0x8d3}], 0x1000, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:34 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000223804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x74) 03:55:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xf0ffffff, 0x0, 0x1000}, 0x20040885) 03:55:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1a0ffffffff, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x7a) [ 1672.428598] EXT4-fs (loop2): inodes count not valid: 570425472 vs 128 03:55:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x8, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000a34bd6a9851739a70bd5c73d92fbcc001800010000100000000000000a1400000000000800000000080001006da8a29858d6d3073850bdbbebff9ab726d438d682427bea32c63d865724dc800d0f8fe255d356bd6031569a45f87ca7d96ff9816f492ff3ce5b922593e893de78ef98bf2bc0c9ee158371c6a584d571286144b8be31c394e71af3648682671eee45db3e49e61a59804181fbb46b903c3c5c155be7a198a6de5a6ea7014870aa6c8b4706a95581d110362c7629221e38cb8e9c8e", @ANYRES32=r5], 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8a2860528f32e539, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r7, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r7, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r8 = dup3(r7, r1, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x100000000000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1a0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000233804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1672.687554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54859 sclass=netlink_route_socket pig=7099 comm=syz-executor.5 03:55:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf0) 03:55:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfdfdffff00000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1672.861667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54859 sclass=netlink_route_socket pig=7108 comm=syz-executor.5 03:55:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xffffff7f, 0x0, 0x1000}, 0x20040885) 03:55:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x159) 03:55:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xffffffffa0010000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xa0010000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1673.159418] EXT4-fs (loop2): inodes count not valid: 587202688 vs 128 03:55:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x15c) 03:55:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630b}], 0x0, 0x0, 0x0}) 03:55:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfdfdffff, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:36 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000002c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @remote}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x93d) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'ifb0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1673.438477] binder: 7150:7153 unknown command 0 03:55:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x16e) 03:55:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfffffdfd, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1673.466913] binder: 7150:7153 ioctl c0306201 20000080 returned -22 03:55:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xffffff8d, 0x0, 0x1000}, 0x20040885) 03:55:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630c}], 0x0, 0x0, 0x0}) 03:55:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000002180)=0x5490, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r6}]}, 0x24}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'\xed\b\x00\x00\x00\x00\x00\x00\xaa\x00\x01\xff\x00', r8}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = dup3(r0, r1, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="24040000000001000000000000000000dfff000010000000000000007f000000", @ANYRES32=r14], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000280)={'team0\x00', r14}) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x0, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) finit_module(r7, &(0x7f00000002c0)='team0\x00', 0x2) 03:55:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1b8) 03:55:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x1a0ffffffff, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1673.767138] EXT4-fs (loop2): inodes count not valid: 738197632 vs 128 [ 1673.874995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1673.881593] IPv6: NLM_F_CREATE should be set when creating new route [ 1673.888548] IPv6: NLM_F_CREATE should be set when creating new route 03:55:36 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000002d3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1674.032549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7294 comm=syz-executor.5 03:55:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x100000000000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630d}], 0x0, 0x0, 0x0}) 03:55:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1f4) [ 1674.146490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1674.160106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7305 comm=syz-executor.5 [ 1674.212231] binder: 7307:7310 unknown command 0 [ 1674.263877] binder: 7307:7310 ioctl c0306201 20000080 returned -22 03:55:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000040)={0x11, 0x11, r2, 0x1, 0x20, 0x6, @dev={[], 0x1e}}, 0xfffffc76) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xfdfdffff00000000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) [ 1674.316990] EXT4-fs (loop2): inodes count not valid: 754974848 vs 128 03:55:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xfffffff0, 0x0, 0x1000}, 0x20040885) [ 1674.498295] binder: BC_ACQUIRE_RESULT not supported 03:55:37 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000483804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x8041, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1674.528905] binder: 7329:7331 ioctl c0306201 20000080 returned -22 03:55:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1fc) 03:55:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0xffffffffa0010000, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) [ 1674.713685] net_ratelimit: 24 callbacks suppressed [ 1674.713694] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.723989] protocol 88fb is buggy, dev hsr_slave_1 03:55:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x620001, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0xac0, 0x2, 0x3080b6a392e966e1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630b}], 0x0, 0x0, 0x0}) 03:55:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20e) 03:55:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046307}], 0x0, 0x0, 0x0}) 03:55:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x100000000000000, 0x0, 0x1000}, 0x20040885) [ 1674.963446] EXT4-fs (loop2): inodes count not valid: 1207959680 vs 128 [ 1675.024125] binder: 7484:7487 unknown command 0 [ 1675.030246] binder: 7484:7487 ioctl c0306201 20000080 returned -22 03:55:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r5 = dup3(r0, r4, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2b2c02) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f00000000c0)={0x0, {0x10001, 0x6}}) 03:55:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x300) 03:55:38 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000004c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630c}], 0x0, 0x0, 0x0}) 03:55:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046312}], 0x0, 0x0, 0x0}) [ 1675.273610] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.273645] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.278868] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.304422] binder: 7523:7529 unknown command 0 [ 1675.332616] binder: 7523:7529 ioctl c0306201 20000080 returned -22 [ 1675.353621] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.358774] protocol 88fb is buggy, dev hsr_slave_1 03:55:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffffff53, 0x440) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x68, 0x0, &(0x7f0000000240)=[@register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @request_death, @decrefs={0x40046307, 0x1}], 0x5f, 0x0, &(0x7f00000002c0)="4c761425245f8f433b0b31795f8fe654b7e6e740266d9a067661c5472413b0b061022fee0fc0878a51c6dc013ef516955620853dd9757a794f1cf91aedcdf8554e702b3e006f84dc1f36ab377cd19ca4f0e5c979541d08635774c71bb1f1aa"}) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x630d}], 0x0, 0x0, 0x0}) [ 1675.447603] binder: 7536:7539 unknown command 1074029330 [ 1675.464630] binder: 7536:7539 ioctl c0306201 20000080 returned -22 03:55:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x500) [ 1675.534370] binder: 7543:7544 unknown command 0 [ 1675.546431] binder: 7543:7544 ioctl c0306201 20000080 returned -22 03:55:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) [ 1675.590579] EXT4-fs (loop2): inodes count not valid: 1275068544 vs 128 03:55:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) 03:55:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x300000000000000, 0x0, 0x1000}, 0x20040885) 03:55:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="45bc914af03ba29144b2de0b604969fee28c543277d14dd40107f111957668a58be2f6e75006c41d4bc8dd1eb542e74e8b0ae05c0c965619c0c24598b1adf82096663bd94a46f2d5d5864314aba41605fa7cd3e81aef48b28dda22b583952c5fd3f2902ce8d782289926f24ad409f1376ba47e454a6f473ea9b53cdcc02e", 0x7e, 0xfffffffffffffffb) keyctl$describe(0x6, r2, &(0x7f0000000240)=""/240, 0xf0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:38 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000603804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x600) [ 1675.828374] binder: BC_ACQUIRE_RESULT not supported [ 1675.833466] binder: 7564:7565 ioctl c0306201 20000080 returned -22 [ 1675.833622] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.845103] protocol 88fb is buggy, dev hsr_slave_1 03:55:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x4008630a}], 0x0, 0x0, 0x0}) 03:55:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) [ 1675.913597] protocol 88fb is buggy, dev hsr_slave_0 03:55:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1676.096783] EXT4-fs (loop2): inodes count not valid: 1610612864 vs 128 03:55:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046307}], 0x0, 0x0, 0x0}) 03:55:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x700) 03:55:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40086310}], 0x0, 0x0, 0x0}) 03:55:39 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000683804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0x40548f, 0xffffffffffffffc8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'ip6erspad0\x00', r2}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @remote}, 0xf) r5 = dup3(r0, r1, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5e85fe0654786a701009360c8180355a95ba514d40008efa0793f1600002fd08d49a47eff71bc4131fe4c1f990300a90000000000803e774afd6e9ef5837dc65a2367e39e21", 0x6c, 0xc089886a77d9995, 0x0, 0x3a6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r11, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r11, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r11, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000000340)=@generic={0x3, 0x1, 0x800}) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="01000001e32a4f3e84c82a9ca135b797078b650238aa62d4bc824fdc09df998dba823612af8285c2d9365432772912d77e6c4e3758845032ec0ad49f65ab721cc208e9862d4da67f78e91a329820e6eb75e7783f9a3d31e43a705ebfc591ba3f9d40807785ccce3b019301c8e5fb9ac3e39e6972610d2e8b1ec39e792c0b6f3980325fb54cd12c1fd76f2ca63c15e999535a66b5b6317ae392750af766b8fc30afd5bb10e1ffc9a4c8676bdffc8f3d30eb5fda36430c8cf36bcc4c81847959141bb917e342bcacdea4a9c37cdf4545e0ff865de79c3e3a7528794798c47086", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r14, 0x84, 0x0, &(0x7f0000000140)={r16}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000300)={r16, 0x10000}, 0x8) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffd, 0xbc580a76e925dedc, 0x0, @buffer={0x0, 0xac, &(0x7f0000000080)=""/172}, &(0x7f0000000440)="30348b87", &(0x7f0000000180)=""/30, 0x2, 0x6, 0x2, &(0x7f0000000480)}) 03:55:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x700000000000000, 0x0, 0x1000}, 0x20040885) 03:55:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046312}], 0x0, 0x0, 0x0}) 03:55:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) 03:55:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x900) [ 1676.607183] binder: 7723:7725 unknown command 1074029330 [ 1676.658885] binder: 7723:7725 ioctl c0306201 20000080 returned -22 03:55:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) [ 1676.776909] EXT4-fs (loop2): inodes count not valid: 1744830592 vs 128 03:55:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amid\xff\x0f\x00', 0x6, 0x20000) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnetconf={0x1c, 0x52, 0xa00, 0x70bd27, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) 03:55:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xa00) 03:55:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x400c630f}], 0x0, 0x0, 0x0}) 03:55:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x4008630a}], 0x0, 0x0, 0x0}) 03:55:39 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000006c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:39 executing program 5: setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='syz_tun\x00', 0x8, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1677.096644] binder: BC_ATTEMPT_ACQUIRE not supported [ 1677.102483] binder: 7854:7858 ioctl c0306201 20000080 returned -22 03:55:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xc00) [ 1677.320675] EXT4-fs (loop2): inodes count not valid: 1811939456 vs 128 03:55:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x8dffffff00000000, 0x0, 0x1000}, 0x20040885) 03:55:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40086310}], 0x0, 0x0, 0x0}) 03:55:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40106308}], 0x0, 0x0, 0x0}) 03:55:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xe00) 03:55:40 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000743804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40106309}], 0x0, 0x0, 0x0}) 03:55:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) 03:55:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xe02) 03:55:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000016c0)={r7, 0x101}, &(0x7f0000001700)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000001840)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0xffff, @ipv4={[], [], @broadcast}, 0x7d5}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="49649d6a6ccfd09980c306d19c2f2de70fac27257acd2d954dfa6b04cf56b542df9200f98dbdd78bcb9a37b8dea3ac8cbf7a670ecb86607c2964298e8817562876027c631a821790c1d1e9044b9f8842ae3a8fd2c15d734a873609a14cd4f14e04366affc4104af6a0d2f5", 0x6b}], 0x1, 0x0, 0x0, 0x800c}, {&(0x7f0000000180)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000240)="21502685436b07dfa7e6d3dd5812a3741bc98ed0bd20b32aec49162e4c3a2ac990458a22fb096bc964c348b22e8a507dce3c0e96c527211a6ba7a2787d775143ab7fd836adc88e78ed8f9491599101807f97c9d7bb24246924e3abb96e76a718c48edadcd01064f973b342bb50c9094e4427175300494b6d52ec6ad5381862b71c663b74905649f59a6e6848f3585b1f2ad6b558ec33f33d0deaa49ea9f849a57e2ac56542455727e18785a3947a3ff99e6e7c64451c01e19a4edb2231a73701f68a6ab30b9d25a9023523945ef43c084e53eafb862163cb4fc6bafbe1bb5e63ac4e7c48ebce1ed8846b348e3a7a72bcc1", 0xf1}, {&(0x7f0000000340)="7bc6c8afaa20bc0f110f0f7db100f4c012f3e4a0a0c99025c53d4ee00dac1a2b9b43906897a97df940ab8ce95a49436fa8bd85425be62171dd265638c2b617160ece3b0c17b2c4c41fcedfa9fc5160789120d76dc7b9e579008bfa51e669b876fa503f80a08bbb618bc96a57e2cad0c513117f2d76", 0x75}, {&(0x7f00000003c0)="7e46c7778c80ee3f1cd4ac1c5400de25f1a0e3ad9944398e3dfe929de95ca74c6c3d20fc643817189a6ba86f205cc0d668b1383e52fff2f5e0cf191ab31b3752ed0906cb4fb9463374766d225598bbcfeb91fb8f4a54b8789dc54e035476af9ad6bf5f19abf2eb2a40312daa144c9ac0fecac40ca2ce16f1cc235191b25e73e2205c888cf9f949e84cba25d41a64fd3488c7384a488c0d0a2d5a6a753b699a241ddd9670f9db651d4f9a0a3bc917cc0d89dfc06671ce7e032fe6e218aa46e40dcb01080034e2804d10f4917690601d8c71a136a12f63880d3f0eb0f9fd025050baf5ac5739d6311f", 0xe8}, {&(0x7f00000004c0)="c74ea3eb4d53437d1ba10deefbe20230e667746914732e3d8520709b8ee5c73b6b", 0x21}, {&(0x7f0000000540)="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", 0x1000}], 0x5, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x2, 0x1, 0x99, r4}}, @init={0x18, 0x84, 0x0, {0x7ff, 0x7, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x68, 0x4004041}, {&(0x7f0000001640)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000021c0)="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", 0x1000}], 0x1, &(0x7f0000001740)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @rand_addr=0x8}}, @init={0x18, 0x84, 0x0, {0x6, 0x200, 0x6405}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x80, 0x8000, 0x3ff, 0x6, 0xffffffff, 0xffffb2c0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x6, 0x1, 0x8001, 0xfffffffd, 0x4, 0x2, 0x2, r8}}], 0xe8, 0x1080}], 0x3, 0x8010) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = dup3(r9, r10, 0x0) setsockopt$packet_int(r12, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r9, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x400c630f}], 0x0, 0x0, 0x0}) 03:55:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf00) [ 1677.894490] EXT4-fs (loop2): inodes count not valid: 1946157184 vs 128 03:55:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xf0ffffff00000000, 0x0, 0x1000}, 0x20040885) 03:55:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40406300}], 0x0, 0x0, 0x0}) 03:55:41 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40106308}], 0x0, 0x0, 0x0}) 03:55:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1f00) 03:55:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40200, 0x0) execveat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000001c0)='\x05\x00\x00\x00\x00\x00\x00\x00vboxnet0vboxnet1\x00', &(0x7f00000002c0)='\x82yz_t\x00n\x00', &(0x7f0000000300)='syz_tun\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='.\x8c\xdfkeyryring\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='syz_tun\x00', &(0x7f0000000440)=']em0\'[)(-\x00'], 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ae80eaacd51a"}, 0xfffffffffffffe0d) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000540)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x80, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000004c0)='dummy0\x00', 0x7, 0x2, 0x5}) r4 = dup3(r0, r1, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20000, 0x0) write$eventfd(r5, &(0x7f0000000280)=0x21, 0x8) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/195) 03:55:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40406301}], 0x0, 0x0, 0x0}) 03:55:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40106309}], 0x0, 0x0, 0x0}) 03:55:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x2000) [ 1678.441320] EXT4-fs (loop2): inodes count not valid: 2046820480 vs 128 03:55:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40486311}], 0x0, 0x0, 0x0}) 03:55:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x48}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x3, 0x5, 0x200, 0x0, 0x6519, 0x9}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r11, 0x7fffffff, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @remote}, @ib={0x1b, 0x1, 0x0, {"1410d7c00a1a911771f3369d3bc5e987"}, 0xffffffffffffff00, 0x1, 0x4}}}, 0x118) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000080)}, 0x10) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:41 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000006404000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0xffffff7f00000000, 0x0, 0x1000}, 0x20040885) 03:55:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40406300}], 0x0, 0x0, 0x0}) 03:55:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40486312}], 0x0, 0x0, 0x0}) 03:55:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x3f00) 03:55:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40406301}], 0x0, 0x0, 0x0}) [ 1678.999540] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 03:55:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e6006f98", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0x9}, 0x8) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000240)=0x4) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r13 = dup(r12) syz_kvm_setup_cpu$x86(r13, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$SG_GET_SCSI_ID(r13, 0x2276, &(0x7f0000000280)) r14 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r14, r14, 0x0, 0x24) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000002c0)=0x139) write$P9_RREAD(r6, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r15 = dup3(r0, r1, 0x0) setsockopt$packet_int(r15, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1679.068949] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1679.110933] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1679.146137] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40486311}], 0x0, 0x0, 0x0}) 03:55:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4000) [ 1679.216258] audit: type=1400 audit(2000001342.080:299): avc: denied { dyntransition } for pid=8412 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0 tclass=process permissive=1 03:55:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x3, 0x1000}, 0x20040885) 03:55:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:42 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000006504000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1679.338199] audit: type=1400 audit(2000001342.200:300): avc: denied { set_context_mgr } for pid=8525 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:55:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40486312}], 0x0, 0x0, 0x0}) 03:55:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0x1a0}], 0x0, 0x0, 0x0}) 03:55:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x2, 0x12000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x7, @perf_config_ext={0x5, 0x4a28}, 0x40, 0x723, 0x1, 0x9, 0x6, 0xffffff50, 0xfff}, 0xffffffffffffffff, 0x9, r2, 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x4000040, 0x0, 0x0) 03:55:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x7, 0x1000}, 0x20040885) 03:55:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4087) 03:55:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x300, 0x1000}, 0x20040885) 03:55:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0x1000000}], 0x0, 0x0, 0x0}) 03:55:42 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$bt_hci(r0, 0x0, 0xed037c32da5eb702, &(0x7f0000000240)=""/186, &(0x7f0000000100)=0xba) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0x1, 0xfffffffffffffd59) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = dup3(r1, r2, 0x0) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0x1a0}], 0x0, 0x0, 0x0}) 03:55:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4800) [ 1679.879677] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1679.993618] net_ratelimit: 25 callbacks suppressed [ 1679.993625] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.003737] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.016445] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1680.029394] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1680.073658] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.078856] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.088666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:43 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000000a04000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xa0010000}], 0x0, 0x0, 0x0}) 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x700, 0x1000}, 0x20040885) 03:55:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0x1000000}], 0x0, 0x0, 0x0}) 03:55:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4c00) [ 1680.153613] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.158771] protocol 88fb is buggy, dev hsr_slave_1 03:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xfdfdffff}], 0x0, 0x0, 0x0}) 03:55:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[]}, 0x0) r3 = accept4(r2, &(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x80, 0x1c0800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) syz_extract_tcp_res(&(0x7f00000002c0), 0xffffffc1, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000400), &(0x7f0000000680)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x7f, 0x7}, 'port1\x00', 0x28, 0x20000, 0xfffffffd, 0x9, 0x401, 0x5, 0x8, 0x0, 0x2, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r12 = dup(r11) syz_kvm_setup_cpu$x86(r12, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r13 = socket$inet_udp(0x2, 0x2, 0x0) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockname$packet(r14, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0xff3c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14) r16 = dup3(r0, r1, 0x0) setsockopt$packet_int(r16, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r17 = socket$rds(0x15, 0x5, 0x0) bind$rds(r17, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r18 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000cf91e8d14e39df48807c9b6e09de690594666a9f9aa3aa4502a4e59f4a83c196efd87f82758ccdbfe530f8e22c1dc79090ad2ebd0fd3a60a46f7684c6cbb6872cf04885d53e074c3d62068751ed395572e40c9d37c6d33498590334349e42fa2e6553730626af572310a3419cc7669b0b182e237520d80238e9f4894b18dac746ea61d00696194de3463ef7b391a35e31d374f9e72ad1081827fbbd51e511a1510e5446a1153078bef0a264fffeb7de3beadcca9d0b4ca7da73f27998bd124cd524155bc6a5e1d5", @ANYRES32=0x0], &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r18, 0x84, 0x6d, &(0x7f0000000880)=ANY=[@ANYRES32=r19, @ANYBLOB="780000007462fe2312ce17645b68c2844480484177ec0ed44bd2634bae4c6ca5fcfe1ddb755a6e2e74c1b907f82ca370c11ba956465242aec02102e8e66b33c8974b611fe2a3859aa03001b620d77c506eeb624a571106c54b52970f00aab475f78e785b625ccc9bdfb53fba3df40cebce34b80a5e3ae4ad53e638131ae356b7d7b5e2840de84724cf6d5b26953ccbc899f1c2b2abf57461076697804aba80a8c7035c90192edafb5c8ce9948f1d785f4e57ab2adada3aa1f334c6ddd9b47e3226b0c4b1f99b28e740e9220103c9d1a48965ece79d9bce03782fb4d9e18299648dd6d1ae7b62bc702382233b3c3d81204ca384863621a9f4"], &(0x7f0000000540)=0x80) r20 = socket$rds(0x15, 0x5, 0x0) bind$rds(r20, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) dup3(r17, r20, 0xc0000) 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x1000000, 0x1000}, 0x20040885) 03:55:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xa0010000}], 0x0, 0x0, 0x0}) 03:55:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x5865) 03:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xfffffdfd}], 0x0, 0x0, 0x0}) 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x3000000, 0x1000}, 0x20040885) [ 1680.485509] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1680.572596] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1680.632100] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1680.645292] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1680.653161] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1680.693381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:43 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000006404000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xfdfdffff}], 0x0, 0x0, 0x0}) 03:55:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x5901) 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x7000000, 0x1000}, 0x20040885) 03:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xffffffff}], 0x0, 0x0, 0x0}) 03:55:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0xfffffffffffffcca, 0x1, 0x0, 0x0) 03:55:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x5c01) 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x8dffffff, 0x1000}, 0x20040885) 03:55:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1a0, 0x0, 0x0}) 03:55:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xfffffdfd}], 0x0, 0x0, 0x0}) [ 1680.963590] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.968723] protocol 88fb is buggy, dev hsr_slave_1 03:55:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xf0ffffff, 0x1000}, 0x20040885) 03:55:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6000) [ 1681.276286] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1681.285815] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1681.307063] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1681.330120] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1681.359989] binder: 8683:8684 ioctl c0306201 20000080 returned -14 03:55:44 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000006504000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306, 0xffffffff}], 0x0, 0x0, 0x0}) 03:55:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xffffff7f, 0x1000}, 0x20040885) 03:55:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1000000, 0x0, 0x0}) 03:55:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6558) 03:55:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1a0, 0x0, 0x0}) [ 1681.513606] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.513657] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.544584] binder: 8695:8700 ioctl c0306201 20000080 returned -14 03:55:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xffffff8d, 0x1000}, 0x20040885) 03:55:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xa0010000, 0x0, 0x0}) 03:55:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000080)=""/33) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000240)={0x10001, 0xe748, 0x6, 0x4, [], [], [], 0x9, 0x1ff, 0x3, 0x0, "4daa6c643ece247f1118913fc147e8f5"}) r10 = dup3(r0, r6, 0x0) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r12, 0x5204, &(0x7f00000000c0)=0x6a32f88e) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1681.714407] binder: 8707:8717 ioctl c0306201 20000080 returned -14 03:55:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xfffffff0, 0x1000}, 0x20040885) 03:55:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6800) [ 1681.830806] binder: 8722:8725 ioctl c0306201 20000080 returned -14 [ 1681.936088] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1681.968191] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1681.968205] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1682.032353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfdfdffff, 0x0, 0x0}) 03:55:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1000000, 0x0, 0x0}) 03:55:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x100000000000000, 0x1000}, 0x20040885) 03:55:45 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000000002010019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6c00) [ 1682.176879] binder: 8748:8752 ioctl c0306201 20000080 returned -14 03:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfffffdfd, 0x0, 0x0}) 03:55:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x300000000000000, 0x1000}, 0x20040885) [ 1682.234351] binder: 8749:8754 ioctl c0306201 20000080 returned -14 03:55:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6e01) 03:55:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xa0010000, 0x0, 0x0}) [ 1682.390483] binder: 8765:8767 ioctl c0306201 20000080 returned -14 03:55:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x7400) 03:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1a0ffffffff, 0x0, 0x0}) 03:55:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x700000000000000, 0x1000}, 0x20040885) [ 1682.530491] binder: 8776:8777 ioctl c0306201 20000080 returned -14 [ 1682.588637] EXT4-fs (loop2): inodes count not valid: 128 vs 640 03:55:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfdfdffff, 0x0, 0x0}) [ 1682.647508] binder: 8784:8786 ioctl c0306201 20000080 returned -14 03:55:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x8dffffff00000000, 0x1000}, 0x20040885) 03:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x100000000000000, 0x0, 0x0}) [ 1682.795007] binder: 8794:8795 ioctl c0306201 20000080 returned -14 03:55:45 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x7a00) 03:55:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfffffdfd, 0x0, 0x0}) [ 1682.927715] binder: 8799:8801 ioctl c0306201 20000080 returned -14 03:55:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfdfdffff00000000, 0x0, 0x0}) 03:55:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xf0ffffff00000000, 0x1000}, 0x20040885) [ 1683.090366] binder: 8814:8820 ioctl c0306201 20000080 returned -14 03:55:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x1a0ffffffff, 0x0, 0x0}) [ 1683.195824] binder: 8822:8823 ioctl c0306201 20000080 returned -14 [ 1683.234140] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 03:55:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x8100) 03:55:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0xffffff7f00000000, 0x1000}, 0x20040885) 03:55:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xffffffffa0010000, 0x0, 0x0}) [ 1683.270031] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1683.329293] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1683.387657] binder: 8830:8832 ioctl c0306201 20000080 returned -14 [ 1683.411401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1683.422879] binder: 8838:8840 ioctl c0306201 20000080 returned -14 03:55:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2}, 0x20040885) 03:55:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x100000000000000, 0x0, 0x0}) 03:55:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1a0, 0x0}) 03:55:46 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xb801) [ 1683.641667] binder: 8849:8852 ioctl c0306201 20000080 returned -14 03:55:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xfdfdffff00000000, 0x0, 0x0}) 03:55:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1000000, 0x0}) 03:55:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf000) [ 1683.906429] binder: 8866:8868 ioctl c0306201 20000080 returned -14 03:55:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xa0010000, 0x0}) 03:55:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0xffffffffa0010000, 0x0, 0x0}) [ 1684.041426] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1684.054540] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1684.115535] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1684.146403] binder: 8879:8881 ioctl c0306201 20000080 returned -14 03:55:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf401) [ 1684.165069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfdfdffff, 0x0}) 03:55:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3}, 0x20040885) 03:55:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfff, 0x8000) statx(r3, &(0x7f00000000c0)='./file0\x00', 0x400, 0x40, &(0x7f0000000240)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='veth1_to_bridge\x00', 0x1, 0x2, 0x7fff}) r5 = dup3(r0, r1, 0x0) r6 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$KDDISABIO(r6, 0x4b37) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r7, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r7, 0x4) write$P9_RFSYNC(r3, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1a0, 0x0}) 03:55:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xfc01) 03:55:47 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003805000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfffffdfd, 0x0}) 03:55:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xfeff) 03:55:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1000000, 0x0}) 03:55:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xff0f) 03:55:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1a0ffffffff, 0x0}) 03:55:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xa0010000, 0x0}) 03:55:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000240)={0xfffffad8, 0x1000, 0xd63, 0x4, [], [], [], 0x8, 0x6, 0x3, 0xad, "60a3845dba6ea9059367c018f7daf19d"}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e21, 0x1, @empty, 0x9}}, 0x1, 0x7}, 0x90) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)=0xf242, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1684.789107] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1684.862239] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1684.901815] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1684.966544] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x4}, 0x20040885) 03:55:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfdfdffff, 0x0}) 03:55:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x100000000000000, 0x0}) 03:55:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xff7f) 03:55:48 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003806000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) sendto(r3, &(0x7f0000000080)="c24775fd3bb290549fcf361a224f26fba8c7a5f26262cd6e8e6dc60e355769045a6c0156e42c08d255c072b097a165f49d2fb7e777369ede9227203b23187f1f482b64ac81945a1bdc3510eba64cc85d6553", 0x52, 0x4000000, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfffffdfd, 0x0}) 03:55:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfdfdffff00000000, 0x0}) 03:55:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xfffe) [ 1685.113601] net_ratelimit: 24 callbacks suppressed [ 1685.113610] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.123727] protocol 88fb is buggy, dev hsr_slave_1 03:55:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x1a0ffffffff, 0x0}) 03:55:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3f, 0x0, 0x8000}, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a63) 03:55:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x5}, 0x20040885) 03:55:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x100000000000000, 0x0}) 03:55:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xffffffffa0010000, 0x0}) [ 1685.550332] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1685.574073] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 03:55:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a64) [ 1685.635656] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1685.673605] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.673641] protocol 88fb is buggy, dev hsr_slave_1 [ 1685.678733] protocol 88fb is buggy, dev hsr_slave_1 [ 1685.694887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1685.753637] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.758772] protocol 88fb is buggy, dev hsr_slave_1 03:55:48 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003807000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0xfffffffffffffd48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r5, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x40, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000240)=0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$CAPI_MANUFACTURER_CMD(r10, 0xc0104320, &(0x7f0000000140)={0x7, &(0x7f0000000100)="7bf1e2d66442446e070a6b40fca641f5d57cb5f5f81f1fce8829fbbb973a519cf95af1716add1900"}) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:55:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000000c0)={0xffffffff, 0x7fff, 0x80, 0xf819, [], [], [], 0x5, 0x401, 0x8, 0x1000, "634d7711c736ca16c373b1596ed927bd"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl(r2, 0x100000001, &(0x7f0000000340)="145e7e508f3922f6476338e1124c038fd769d372bcd0047fd31850472e70406f6b2f0ad6b18335ca3711fbc8c8148ad9999e3d303f316d8071162388af6be28642f3dcf18424a0843db4fceb3384aebdc7658fe0bcaacaa70828c80e26d510ef3e0dd231b4325b0f408f0a4c77113369a2972f1edb7956449e9ef22d1bb9bcd43a57f2de7d762a822e90a232849835ddd262a6d5bda313f9970e1d26fa1a907ec3bba85bfb7456b48b3f1aae412c40ee5cbaa96b936f3a5abb732cf4496f2495afef3ed7c7064ee88e658401842479") r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3c4dd4d5272c7c46a7a90f212c066544e3b7dfc0133d0fd16bc2527d06f528c56d7aaa56f6d90e828432b1268b1905a0e8a9c8a0e2de3e607b8fe028f1dc41f5c0c2999722102dbdbbf7a05f2e6465c0dc5d855042d17dad7f6ea45ba78b37896efbaca052f46529b1bced9459dcf3c3"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x318, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="064c05400000caa7"], 0x32, 0x0, 0x0}) r7 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xdc, 0x103040) fcntl$setsig(r7, 0xa, 0x32) 03:55:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xfdfdffff00000000, 0x0}) 03:55:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a65) 03:55:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r2, &(0x7f0000000140)={0x30}, 0x30, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="066304400000008aa52ac89ee32af4f96fb7005900fce5f3c0d8dc0e3438db42bab4618e39a31db138e50bacfa1043e426df31c44988679a342e61f8aba3a20a5494c2410432d53772a691835b"], 0x0, 0x0, 0x0}) 03:55:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x6}, 0x20040885) 03:55:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a66) 03:55:49 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000fda35d55d44366211b28cbd3c958d6fcc41927d0bce6bd7fd289c55181973e418ff18db8fa9bb268533c9bd2928952d3cd1ae510ec541749cc5bd8d0553360"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0xeba11aafc3f5bb0) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000001c0)={0x3, @bcast, r6}) dup2(r4, r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x20080060) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000002000000"], 0x0, 0x0, 0x0}) 03:55:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0xffffffffa0010000, 0x0}) [ 1686.233608] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.238743] protocol 88fb is buggy, dev hsr_slave_1 03:55:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={r7, 0xaa6d, 0x4, [0xfff7, 0x3ff, 0x40, 0x0]}, &(0x7f0000000140)=0x10) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) getgroups(0x1, &(0x7f0000000280)=[r8]) [ 1686.313619] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.348052] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1686.386254] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1686.410231] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 03:55:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1686.472849] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:49 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003808000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06630440000245410000294f5fb58e891706ee1b"], 0x0, 0x0, 0x0}) 03:55:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0xf, 0x2, 0xfa83, 0x80000, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x3, 0x3}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a67) 03:55:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x7}, 0x20040885) 03:55:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a68) 03:55:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05620440c5124dc54ea53ff5e3d1133e3b2124c2107b4283ddf0cf648d13446ae4ecf0f03dac77a51b14e324fe5419367c24b5dc6182865212c4d7e57799d70bba6d60906941474696f2cdcda5aef685042a541796ec915e25801cfbe48d8403d09418b270ce55c450cd5a95333fc4c4ed9a373b7dd5574ada420bf662dfd8e895941ec7c8ca53d358e3a36cc51c7576c03427e975ad5f78b175d72ac9cf2d8aa6cf63a8ea0b5f8ff232b32927c9fb5247725bd35eb206962c3ad938420e24eded8c6b59a42b84"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5568a05d2cacb3d870e8d9d9da405741ec9152fe92326539f33a8e0db5d51b29eae3bad84f870a8943aa9d29a9ed57df8d8ecdc5ebcbc1e9c456c8f34504e4bc7e19e34597226d514ee7c5e1b196ca2390b7bb633372d09a12081a8c73b2193ef41a30a2cc0fecf5a9f875e137fe91b8979035b5705662bd"], 0x0, 0x0, 0x0}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b4", 0x4d, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0x0, 0x0) keyctl$get_keyring_id(0x0, r6, 0x0) 03:55:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4(r3, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$sock_proto_private(r9, 0x89e1, &(0x7f00000002c0)="f81719ca1aa12874aee980d682d158cbb9938757ab6297f2e9a8f0f9112a2b42a111caf53814b2fbeff173865f1c4e28a6ec2e5870dfa5cafa297dd896667918b3b0f5ab586506b29ede8039953326dc3e325695275ebd520062264667d635d6917648c4a4fb5305cf61d3ba7ec046014a09aeb262") sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xfd92, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @dev={[], 0x23}}, 0x10) [ 1686.959837] binder: 9280:9282 unknown command 1074029061 [ 1687.002808] binder: 9280:9282 ioctl c0306201 20000200 returned -22 [ 1687.038413] binder: 9286:9288 unknown command 0 03:55:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a69) [ 1687.044726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9287 comm=syz-executor.5 [ 1687.060865] binder: 9286:9288 ioctl c0306201 20000200 returned -22 [ 1687.077560] binder: 9280:9282 unknown command 1570793557 [ 1687.083079] binder: 9280:9282 ioctl c0306201 20000080 returned -22 [ 1687.102947] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 03:55:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0xeed66693e1346216, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000100)={0x1, r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1687.143807] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1687.161065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9293 comm=syz-executor.5 03:55:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/158, 0x9e, 0x2, 0x3}, @fd, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) [ 1687.204660] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1687.261716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:50 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380a000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6a) 03:55:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0016e5a9"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x9f, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cef21ab87a2f628f474eb29fec06742471ca8fef35efca460b0f2c2004cf175f99393afe1c47590dd6a9bde75913357d4cdff606118e1a95781ae82ee70e8b16b195a3f9d1157a1b6889d10338a6e59907c4910352e1bba858f76f0b224b1ad9211ac1c255023c9e35c42d668662b8c90fa8236bae0d82afe221f84d91998f854429424bac89c91981dfe095a46b7c2928527780a673914e3d0d0e3bb037e7"], 0x0, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x3, 0x4) 03:55:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304409eb87517980223481074aa"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r6, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r6, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000340)="e14c244a27cc56d7347fb05c166453830dd03865b369251c5352572753363ecfe27c31b7203bc65b2881432083cd69be6f4733a648995dd4816783879fedc0eeaa11345c949f8842ebf04eae3cfe5489140f43e150812460fdae46edba514012559ace45d0dd7f059dab7eea700c73a8af789d634ca1a32231394f16a271b281cb72aa784117379738cd02e1f9f135bf1634dabba5f578e010220bd181612bd199dc5b0f8d676ac9d38cda1ecc96d86e13f52caec9f448d65c450bcbafa58c6e503fb23d4b7de0214cecd480ff04be", 0xcf, 0x800, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x9}, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r5, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r7+10000000}, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x1) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1687.504192] binder: 9313:9315 unknown command -1444604416 [ 1687.509811] binder: 9313:9315 ioctl c0306201 20000200 returned -22 03:55:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x8}, 0x20040885) 03:55:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000018c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000019c0)=0xe8) r7 = socket$isdn(0x22, 0x3, 0x4a) r8 = getpgid(0x0) kcmp(0x0, r8, 0x8, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) lchown(0x0, 0x0, r9) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r11, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r14 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r15 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r15, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r16 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r16, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r16, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r16, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r16, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r16, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r17 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r17, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) sendmsg$netlink(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)={0x50, 0x28, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x10, 0x49, [@typed={0xc, 0x80, @binary="0c420dd02d644071"}]}, @typed={0xc, 0x2b, @str='syz_tun\x00'}, @nested={0x24, 0x80, [@typed={0xc, 0x1c, @u64=0x20}, @typed={0x14, 0x1b, @ipv6=@mcast2}]}]}, 0x50}, {&(0x7f0000000540)={0x12d4, 0x3b, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x4, 0x79}, @nested={0xf8, 0x8b, [@generic="1416756311683c1e74e46b3f5afe2eb85c5372534198877d82148536e0da990b43d59e1a189a6206696e0f4cf0c81a3f100388f8c9553e7e5eb4ea285c9244642b231c637196283ce368702016136d137424f034fc73d2652e5cffe17159c271417d871efbe069651a57336da371cf3fc09b487c322e5f20e6d75d5cc6f279b0bb4c31c331e67fe5fd17ef194e889dcb67fb19b3b7192e1854e46e1a8f1170a7aacacab0f06096547586ecf576bea9bbaa209848ece461616541c987f120be1b20f9af73a007d433b5a4210211553b6ed14ffddd1b5d3bd5", @typed={0x8, 0x57, @u32=0x8000}, @typed={0x14, 0x7d, @ipv6=@dev={0xfe, 0x80, [], 0xf}}]}, @generic="e6b01c490c402059", @typed={0x84, 0x61, @binary="6ad121e43b82ec27501652cc964e83bebca50dfb8387acc78372b9d51249c41fcde429fc947b2f819749bbf6ea060eb5bd0b3c953594d9690af8c616400cead6034ac385f462a915ab8b83d116d8d11559bf774c44a3aabab086d15354dc0eda1f1bab472fb9f01fb343977e97b356d6f8f19e80c8beb6db3b6387d8b828"}, @nested={0x134, 0x6c, [@typed={0xb4, 0x60, @binary="415a46f7088ee99a63f76dcc3ede43fae48e79bb51f34d699ead184cbfe1feee67765dea25a74e6f282e4af9fedc03f2b9c59df25d98e68460650696621dfbfd599f3b5bc17ff0d88dd7a0f03fd18f6a1af1c85860961d96ae9a98622178e37b57f7c2025b793c949d655568b973753f289cdf53bb3047997cf97cc2c723c03d6aaff991cdf7efb1619da8a0d7f8e9d49df5900c15bb11ad81470c6b8101b786de6c3bee17013a6011dcec7f27"}, @typed={0xc, 0x66, @u64=0x100000000}, @typed={0x8, 0x82, @ipv4=@empty}, @typed={0xc, 0x3, @u64=0x14f1ad7e}, @typed={0xc, 0x88, @str='syz_tun\x00'}, @generic="9827ff6ca30cb2bda8b6decec146ddfe2773a00398f5cc3ce44b76fd5606e02072a08bed4aeb68d5883bc0e23ece195c37eae87cd4512f3d7f5bca18e06fe3206c4a80d7411fe78c807d476a9a"]}, @generic="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", @typed={0x8, 0x6f, @uid=r4}]}, 0x12d4}, {&(0x7f00000021c0)={0x12dc, 0x2c, 0x300, 0x70bd25, 0x25dfdbfb, "", [@nested={0x15c, 0x29, [@generic="efd2a46a86725ad65a4d3936f84b123530036336a9289a78efaccc3b649ad975488ffb8b590e0de53a39e7a2404ed65770d51b7c333984379ccc13c9965879252bc1962905e104b381777152567881f1a8e9d27d9805d567521ee1", @generic="3e2bac8c794a48dc0509f5c61f413cf5ff34ab7505a52afe030fa4f3b45858d548bcb0ef09cb379db15cb35ea82c446628523c67f55e55d838ebcc327c5f66ee0cf15b1b693b84be94e7c4ecb0bf21f4199cff21594a8844830f509a8bd29c998e3d44a83042cd3396d649a9556985b540e407d284e950090d99eacde41036ac34e674d3718038abc156a13c6e59e17507a310713d32a602868e473b35baf14c96806ff7bf09143407c9d363f9396b50a4562586e801634b7e05ec76ebf1533d37dd2a429cbe05ca2c82c7db0ed3", @generic="3e3b76426569af06a34a28599bf10c0ac3852aebd51e0c19b6363a3ffafd58f1094244b37728a659651466a67be5"]}, @typed={0x40, 0x69, @binary="741dc99f10f800cefaa3334344e8a4383a1ec19f5f16ac51d7c235ef52a929f17d0a47a22f11667beac98e5b74ab9dbed57809a8d24b175f2e4452"}, @generic="eb53cd9c93d4e0a1cb5468b86a418fa3fca1113c4df9c51ecc4734232fcbab802b71496655b77cbb9bac7e14f43b2d0c52dab415d64fa7d7d103bcc60b264bf5ddee142eb44cb3c7f4dbea630f2327b0a9f28089638c382844203e9844c35a897dfa893fa87ed6d4fdb1f22e699a61fd3427c16d66e31d9dc2a29de8003547b05d080e7229e044ba8997abf7904ca30ec28e82001c06fd6aa6e6193575981a402bc87d6b215d2401a7f8b2ead49ea401f07a536d684165b4e1dce6ae39ea827db3b24e9d9fc6f8", @generic="0e25ba5f8dc3643607af82647885418fc985fc41502a22dd20dd5e1076b787826c53f56f748945f50546a09f1b553c281214ce705f272d153027ce8129c4f30131abdd5788a71a0a35999861130c4e58ceb20146469998c2c1", @nested={0x1010, 0x6e, [@generic="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", @typed={0xc, 0x5f, @str='syz_tun\x00'}]}]}, 0x12dc}, {&(0x7f0000000340)={0x1b0, 0x3e, 0x300, 0x70bd29, 0xbd1d, "", [@generic="75327caaf1f53878a7e46ac76e14c2b5d0ffd0bc6c4b08d1bfa4715393e340f0f5a306287b80a7e846c125135cc4960f96f503d9bbbd5f186d380d6cddb49c65034c1829d445b39d4cb810fa89245a7e941151fcbbcb622a94b9ed8c41236bea9d511c23f35f71288149070363ac78f846", @generic="53a3931374090c7054d65673c748674e5439f7587797b1e65dfb749d2eee5f8f3211d01da90999504508627af04eaf8c8421ebd96e725932926b7e1ee21553360c8238fc447c93688fcd8da7f92c466a4840217386bdc6247c3ab2001dca3d790ca4c33a15d10e", @typed={0x4, 0x3c}, @generic="7ebc3b7903452096ab1e35fb1a92827e2446c79016c5451e4071b51b42bd454a819d7b28ca200cb1dd4aaeccadbcb2edb8a3d40c30a77d399807052ae064db7aa0f056322d6eab73b3c13c26375c09aa871dbfbfee4c1e2dcaf15204dbc03b52f2cc0065a2f3d2378c5271992b092f60aa039defb331b3cbe68a0a9aa46a6d987fecc0a5e3cc05ecbe0bfc4c5aaefe1ca2b8e400a107b6069a45710dbf2acd18d3b6c31a6f2d46cd06bebf52b26284e83c9e8033a29e1d7fb7153b", @typed={0x8, 0xe, @pid=r5}]}, 0x1b0}, {&(0x7f0000001840)={0x70, 0x41, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="700d90fc1d2df56a7d4971491b", @generic="a35c754d5937c2e94d79fff66c2275359cfbb9c7b2c57cb4292f24928587871baaa09daab7c36623aaaddfc4e7941720347135cad34e03463626214541f5b7f488f69bb5b1a3b7b80f3513cff07eb64028"]}, 0x70}, {&(0x7f0000001a00)={0x510, 0x11, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@generic="81136805b3374367d2a3b013ca7172b2b16801b29ba2f655a37629120ad380a4e5d4c2a8f3e7877df343f5bf42b514a997b19eac0a74002e6dd7980525409378b7d53093e6309304054faf3cf83728a58d20322ed0b4d006463e2501aac91a150a", @generic="085bdcb7c15dca02034f989fbd38949a437cfe9729e9dcc7f98bcc39f44db0e2395e1825266db1a522f4eef791cb2458ddd8a45aecd8ab5b3cacbb55bbb1b238fc05841857fbe3a8f62e4b3330e35fc97d653014bd84cb983e082c78456b5f50f117270508079edefb96b204854f2110749f2dea052fcdc597ab68fd65380cda3d6cbf99a5f372bee50aec1e677477573f784be716939269f2c4dc", @generic="c482b1b1023a657deadeaec9570c828dc446506203f023859169b79f7ea25a2fa19abaa1cdd7b97ef0c9036005ae12904875692f0ebedafced7ddd017503f6b5de689d5c78dbefa82a8ad225a6356b8a0cbde557cabe0d34b05a409626dbd641eb18b9db4f7570b4d6a5ee6a6ffee20f1c47a6", @nested={0x78, 0x7, [@generic="3f2fdfb48abec1f602b07dbda53b663b1bb7a0f9b1ca88aa55ee43a3279195af4adb6d18bdb7ec3495e8342f4b0140049eea215455b96110f82fdde9738c8151e9747471fa067c7c71e60fa1a60760df3d6f13dd463c3e1677ac6ff7b3dffaefcd6b82bebbe8ec56d3293ae5049fbf4f8685da34"]}, @nested={0x88, 0x3, [@typed={0x4, 0x37}, @generic="421e71617698965186b15c13799ca610c8c4ea6795a3f8a8170e88046d50215a133ed7ad8a914b8ef9a6bf3b1e835a8fbfb1", @generic="b31fd21ea9eac9925aa3a937f6d94f9404b07c4cba78ba13872749d38fc0f429be9c62be487bccb249d844d7f487bbb030f2eb99c6e1", @generic="54d3a4b70f2e2e829b7a5b80bc22", @typed={0x8, 0x53, @u32=0x7fffffff}]}, @generic="1197ce01e733feb61a38e74e256c48b5b1c8de1a8f3e1f03f511363fb24f445530c89fa646fe0b17162b12fc7f768931c415eb2cf0730923f059436b71dcdb9b5411c177ce2b036caaf0bb9aa05dee45aa1e48aa442718a7c197b10fd5", @generic="517187828b5e4d30ddf283869dc4e0ed94fae51b0cade6bb573aca7c3a3315c10c91920f89897ba09ef065adf2c67d22f532d9398a9580a92875dda6336c6ab65a66ee7c436d23373e00b88cca273ceacf0617f002111ecab264889caea65e78176ebaa78b52ce6a2d662a694212200ab50e1ae022f819e222f427001a4a55a307e571ae288888ea70db63ca427e1e21e51b19203e3dec5d9767d85dbd97d3879dc9adbda51cbbd2a0c0e5ce4d9746a0e71d54b459b2f20bebca9228e54b47", @typed={0x8, 0x0, @uid=r6}, @nested={0xf8, 0x8b, [@generic="29171742d670c862717ff68c17ffdeff3dc8ee84f5f4f9b5c201de04dc5680e63e21f77bc4ef5ca9d7e117ae41d52261701050613e7d6f598d06b46338c920da1ee13a76a14901a6eccfc5b9b7159cd4a4a6a57712c29d5cf7467d6cfffb9e178b380c2905e0ecc8b01c4f3112cf6e313987d9d7066dad93c200e48dfdf1978e392a4791bb35df1b1d23e920f0dfc33ee2deb930d37af98275c6f1c2fa307c2b6d6b6cb0b746bd1f39bad316e4179b9ee8c5d9ade097a6df57f25cbe7c4152a2", @typed={0xc, 0x8a, @str='syz_tun\x00'}, @generic="5a38a0e2d5bf8f7477de49dd184f55ca34455edb2e238bf6eb249c4826d0", @typed={0x8, 0x52, @ipv4=@remote}]}, @generic="2f89afcd574db99d76b79b75c54de9abc572c725161afbd15f7428d9a472b0966f3510c4ff4e036b857ea04cd30e89f4e104d41613963235837628446496a2a7e3f92ed953d1a1d7f94115772aaa60cc962aa4bc7b3592b6f97c8f8762c1d0d2f03b6fa972b03d3292ec4f965a6ce18310ee3f04"]}, 0x510}, {&(0x7f00000034c0)={0x1160, 0x16, 0x300, 0x70bd27, 0x25dfdbfe, "", [@nested={0x10e4, 0x56, [@typed={0xc, 0x34, @str='syz_tun\x00'}, @generic="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", @generic="6a47bd845f5c153cc44fc10cf2df4c0699d8620be7fac5bb9b83730b60faca8ef6cc0f7a1b08e5abcaa5c6f5774905c113533fad4170ad6b2f29941ac44580617a9a51ea6fb037f6ce869340140304a06a5d50dd15f7c23eb87115aa4c2cd68fcf1fabbef3aa4c68b1e03b61c5a7d04c84ebda074dfed196f972d32f8c72200b7643470aed9d20f4b062bb3cb6ce69a5cc44186da497d051", @typed={0x8, 0x3, @fd=r7}, @generic="2982f5b9129ea0c0009deb3075715f31e8a48f21ab9f0c54c6ce09762307cfbf407061c80449d2123c3ba96028d467d29e"]}, @generic="10c1e4", @generic="18f6bcf75dfbfcf160a79064df4c7c395bbcc72d6bcc723acbaddb35dece166ce7ae1dae197a81a4e7c8756a381d4509a0d26c44263e99abc738417622221d1407f8c1b3379882d4ab506602201d8d9f14eb66f01536462f3fa8ef2eafec6a9fd33c58ca985a97"]}, 0x1160}], 0x7, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x30, 0x1, 0x1, [r11, 0xffffffffffffffff, r12, r0, r0, r13, r14, r15]}}, @rights={{0x20, 0x1, 0x1, [r16, r17, r0, 0xffffffffffffffff]}}], 0x88, 0x24000001}, 0x4000000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @link_local}, 0x14) r19 = dup3(r0, r1, 0x0) setsockopt$packet_int(r19, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6b) 03:55:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80220, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f00000000c0)=""/174, &(0x7f0000000180)=0xae) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6c) 03:55:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b"], 0x1) splice(r4, 0x0, r7, 0x0, 0x80000001, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1687.933958] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1687.953111] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 03:55:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x803) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="131055e0"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) open_by_handle_at(r5, &(0x7f0000000340)={0xfb, 0xa083, "0e0d5d1109c4eaef3ebf9740dc4fedba3e444adb4fe2b4586e521c812d1f38c1675c38f443893d573583f5a016822102592aa812b5d02220279e1b8681e36ecef98459f2c2eb8cc7c51fa2168ff0127d5eab5a0c3c3d66ca82a41d196ccfcf0c66568d11adcd4050e912cc833b0f23c58160deea49df6b1c5f8f4c2562b0bf9f49e80e797f24ae6877912b2c20e937ec8d1d23f2004df9f24320be9ae2338141c95d15af4e8570d0ff6927beba8925e01ac32607620f66a59764aee60a152387626031628dac98549f3a262e166daafe1ade4e7d7621e7e2cdcd962263588281523b1523dc2d4d13c3d104a44f99f675cd30c7"}, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="090000c2de000000"], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x9) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x20000000008, {0x7, 0x1f, 0x91, 0x13010, 0xb6, 0x4, 0xb9ca, 0x889}}, 0x50) sysfs$3(0x3) r10 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r11 = dup(r10) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) getsockopt$inet_int(r6, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000440)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r11, 0x54a3) [ 1687.995721] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 03:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6d) [ 1688.057047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:51 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003810000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x9}, 0x20040885) [ 1688.174797] binder: 9457:9459 unknown command -531296237 [ 1688.195777] binder: 9457:9459 ioctl c0306201 20000200 returned -22 03:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6e) [ 1688.233167] binder: 9457:9459 unknown command -1040187383 [ 1688.260204] binder: 9457:9459 ioctl c0306201 20000080 returned -22 [ 1688.558680] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1688.597707] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1688.641387] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1688.679389] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/de\x05\x00\x00\x00nder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 03:55:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000001b", @ANYRES16=r7, @ANYBLOB="1a132dbd7000ffdbdf250200000014000100fe8800000000000000000000000001010800050005000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) r10 = getpgid(0x0) kcmp(0x0, r10, 0x8, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r10) fcntl$setown(r5, 0x8, r10) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$ax25(r9, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = dup3(r0, r1, 0x0) setsockopt$packet_int(r12, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a6f) 03:55:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) creat(&(0x7f0000000040)='./file0\x00', 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xa}, 0x20040885) 03:55:51 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003812000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a70) 03:55:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xf93, 0x10d000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1689.187201] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1689.211267] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1689.221421] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 03:55:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000080)={0x3, 0x9, 0x0, 0xd0e1}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = dup3(r0, r6, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1689.280583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 03:55:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a71) 03:55:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05770440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x80000001, 0x1, 0x81, 0x7, 0x1, 0x2, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x101, 0x0, 0x8, 0x2, 0x6506}}, &(0x7f0000000040)=0xb0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r7, r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:52 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003814000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a72) [ 1689.460079] binder: 9630:9632 unknown command 1074034437 [ 1689.482998] binder: 9630:9632 ioctl c0306201 20000200 returned -22 03:55:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2c03, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x4, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001800010000000000000000000b140000000000080000000008000100", @ANYRES32=r7], 0x24}}, 0x0) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in=@rand_addr=0xfffffff9, 0x4e23, 0x200, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x2f, r7, r8}, {0xe8d8, 0x51, 0x8, 0x0, 0x8e24, 0x3, 0x80, 0x5}, {0x5, 0x10001, 0x9}, 0x0, 0x6e6bb5, 0x2, 0x1}, {{@in=@multicast2, 0x6, 0x3c}, 0x2, @in=@broadcast, 0x3504, 0x3, 0x0, 0x80, 0x12, 0x1, 0x1}}, 0xe8) 03:55:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x2) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0x9, 0x40, 0x1}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x410100, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000000c0)=0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xb}, 0x20040885) 03:55:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x4000000000) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = semget$private(0x0, 0xd, 0x0) semop(r7, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000080)) semctl$GETNCNT(r7, 0x1, 0xe, &(0x7f00000000c0)=""/138) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r8, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r8, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup(r8) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r10, r6) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a73) 03:55:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ab6df2a9"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1689.877841] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1689.924086] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1689.943438] binder: 9764:9766 unknown command -1443730005 03:55:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYRES32=r2], 0xffffffffffffff83, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = dup2(r3, r0) ioctl$KDENABIO(r4, 0x4b36) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440000000f625f71cba00"], 0x0, 0x0, 0x0}) 03:55:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a74) [ 1689.968344] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1689.980679] binder: 9764:9766 ioctl c0306201 20000200 returned -22 03:55:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) bind$packet(r7, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffffffffe32) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x7) r9 = dup3(r0, r1, 0x0) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304400000d1441369fd0a0000"], 0x0, 0x0, 0x0}) [ 1690.037566] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1690.141954] binder: 9776:9777 unknown command 5 03:55:53 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003864000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1690.183872] binder: 9776:9777 ioctl c0306201 20000200 returned -22 03:55:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000240)={0x1, 0x2, {0x7e, 0x4, 0x9, {0xffef, 0x3}, {0x8, 0x30e}, @period={0x0, 0x9, 0xfc00, 0x0, 0x0, {0x3, 0x7b, 0x3, 0x2}, 0x1, &(0x7f0000000140)=[0x5d]}}, {0x57, 0x8, 0xa85, {0x5}, {0x423e, 0x400}, @period={0x5a, 0x3, 0x32e8, 0x3, 0x2, {0x3, 0x3ff, 0x0, 0x40}, 0x8, &(0x7f0000000180)=[0x1ff, 0x3, 0xbd3, 0x64ba, 0x3, 0x8, 0x4, 0x0]}}}) migrate_pages(r6, 0x2, &(0x7f00000000c0)=0x80000000, &(0x7f0000000100)) 03:55:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a75) 03:55:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0xde) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r7, r6}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xc}, 0x20040885) 03:55:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x548f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x140000) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1690.393596] net_ratelimit: 24 callbacks suppressed [ 1690.393604] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.403915] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.473606] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.478754] protocol 88fb is buggy, dev hsr_slave_1 03:55:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a76) [ 1690.526519] EXT4-fs (loop2): inodes count not valid: 128 vs 256 [ 1690.553652] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.558802] protocol 88fb is buggy, dev hsr_slave_1 03:55:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="01630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:53 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003865000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x20, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = dup3(r0, r1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r12 = dup(r11) syz_kvm_setup_cpu$x86(r12, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='\x7f\xe0\xfe1\xef;\xb8\xd2\x00', 0x1a984, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) r16 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r17 = dup(r16) syz_kvm_setup_cpu$x86(r17, r15, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x64, 0x1d8) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r18 = socket$inet_udp(0x2, 0x2, 0x0) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = accept$netrom(r3, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1070696473202b726a6d61200800656d6f7279202b72646d6120776d656d6f79202d70696473202d72646d61202b637075209686bfc98aa1ccbae1"], 0x33) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x60, r20, &(0x7f0000000240), 0x9, 0x8) [ 1690.733390] binder: 9927:9929 unknown command 1074029313 [ 1690.761449] binder: 9927:9929 ioctl c0306201 20000200 returned -22 03:55:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a77) 03:55:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440e4a7e85e6cca8d9e7e4f301755632420f97726b780d02b66883b48001757e5384514b7e7b000f1dd193069ee00a21dabcddcc0ef7fc65c19421bca46b7bd646a89d808aa659921ce37cf0f088a246379d4e2f16c634e82f17b2c6fea601de053ac03e595a1b76342ca373de78532ce781acf4a038efaca386abf5721d2d073b8e61294"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xd}, 0x20040885) 03:55:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r10 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f00000000c0)={r10, 0x579956e4, 0xfff9, "e8396acf7957b826e556668b942c94eef848237b02f3b76384c608ac71f13dd0de7b0d719302940a3a23f8021539b480925caa000700a93cd4b8ed7ce757b115a7f79a1cd5bd04df301906b00966d8d65de3b88e6281b9683eef35ce397328d39ff73cb74919a6b9909572f1ecb70cf333591b334aafc3caad9844586d3f9857f47f26d541e9e8fd01832e88c9ecba3e5bab56f2e303be75e389d672f0889001ed07"}) 03:55:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a78) 03:55:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x9d3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1691.112571] EXT4-fs (loop2): inodes count not valid: 128 vs 256 03:55:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:54 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038fc000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1691.268165] audit: type=1400 audit(2000001354.130:301): avc: denied { setopt } for pid=10065 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 03:55:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1691.363591] protocol 88fb is buggy, dev hsr_slave_0 [ 1691.368767] protocol 88fb is buggy, dev hsr_slave_1 03:55:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r6, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r6, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0xa, 0x4) 03:55:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a79) [ 1691.507058] binder: 10084:10086 unknown command -1 03:55:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x108, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/187, 0xbb, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/201, 0xc9, 0x1, 0x30}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x2}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd, @fd={0x66642a85, 0x0, r4}, @flat=@handle={0x73682a85, 0xb, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x2000}, @exit_looper], 0xe5, 0x0, &(0x7f0000000740)="9865247264cfb74c4d1612169437590ff30f3ffaaedb87776648f1ad3b9b9a37ea42f4e4cd4abbc0fecbbb19c7c9d9b7dded41a020e298301bb924b92cba57f2f79e485d0bbd14a14d421491d2c1980874cb5504448258c9cedb144baaab464179ba6333ae1bf96c604930a97df827a238c97ec9074f9fe74f806366d369a30ccf9b02399f9b47856ef96033929236ffec65f89fe10ee59b0d34f7d88584fd9d380eaccf6c77219e4954ec2d593f1e4b899ab7f5496f4d8e4cadea390724eefcf5e32aa2f522ee441304cb17585b728a193c15dc7100ac24f49ae7162d4085e2d633589387"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1691.542947] binder: 10084:10086 ioctl c0306201 20000200 returned -22 03:55:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = gettid() tkill(r3, 0x22) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)=ANY=[@ANYBLOB="e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/229]) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1691.610817] EXT4-fs (loop2): inodes count not valid: 128 vs 512 03:55:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7a) 03:55:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xe}, 0x20040885) 03:55:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r6, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r6, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8938, &(0x7f0000000100)={'hwsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @hyper}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="64f60000"], 0x0, 0x0, 0x0}) 03:55:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) write$9p(r5, &(0x7f00000000c0)="46bd023902200351bfca79afd6fc9b184a9eca96770a3968e3e22063adae4948956e87f52ce37d9107c934ec4df0ae58ed45b86f55fb6c5fd58b47a7fb4eabd01748866e36848c31588cca1cbc1f6d6e7b4dcc97a97e45168e2f489d6140bbc247bf59ecc28c7db946652f72c95c9ff3dabdb59e1c548e41d210207148370eb86770d6242a4be19164cf87151c7a3194cd8dfb65ab5a2bd167271a68102b03da94ff40d714e9f1a9133dc82d4530", 0xae) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06c1044000000000"], 0x0, 0x0, 0x0}) 03:55:54 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802010019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr="873c70af1c268d11861b567814dd1f6a", 0x40}}}, 0x84) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1691.913607] protocol 88fb is buggy, dev hsr_slave_0 [ 1691.913643] protocol 88fb is buggy, dev hsr_slave_1 03:55:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7b) [ 1691.954969] binder: 10114:10117 unknown command 1074053382 [ 1691.960664] binder: 10114:10117 ioctl c0306201 20000080 returned -22 03:55:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7c) [ 1692.137794] EXT4-fs (loop2): bad geometry: block count 66104 exceeds size of device (66048 blocks) 03:55:55 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803010019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:55 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x4a800, 0x80) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000240), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, r5, 0x1, 0x1, 0x6, @local}, 0x14) request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='em1ppp0.\x00', 0xfffffffffffffff8) r6 = dup3(r1, r2, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000280)) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xf}, 0x20040885) 03:55:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7d) [ 1692.508863] binder: 10150:10154 ioctl 8912 400200 returned -22 03:55:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x9, @mcast2, 0x1}, {0xa, 0x4e21, 0xffffffff, @mcast2, 0x5}, 0x8000, [0x6, 0x1, 0x8, 0x75, 0x9c8, 0x5, 0x5, 0xddbf]}, 0x5c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r8, r0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06635b420bcc3cffff0f00000000"], 0x0, 0x0, 0x0}) 03:55:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7e) [ 1692.661471] binder: 10164:10165 ioctl 8912 400200 returned -22 [ 1692.746059] EXT4-fs (loop2): bad geometry: block count 66360 exceeds size of device (66048 blocks) 03:55:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8, 0xffffffff, 0x20, 0x0}, &(0x7f00000000c0)=0x10) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x401}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = dup3(r0, r1, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1692.799737] binder: 10212:10224 unknown command 1113285382 [ 1692.844342] binder: 10212:10224 ioctl c0306201 20000080 returned -22 03:55:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x404) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:55 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804010019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000440)='team_slave_1\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000240)='bc\xfc\r\xe7\xff\xff\x00\x00\x03\x00\x00\x00\x00\x8a\xd2') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000180)={r4}) r5 = accept4(r4, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x800) setsockopt$ax25_int(r5, 0x101, 0x0, &(0x7f00000001c0)=0xb7, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0xc}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4020100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r7, 0x120, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x6800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7a9687f48a6e2009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x3be, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x4000810) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r9, r0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x10}, 0x20040885) 03:55:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a7f) 03:55:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000240)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) write$P9_RREADDIR(r7, &(0x7f00000003c0)={0x68, 0x29, 0x2, {0xfffffff7, [{{0x40, 0x1, 0x6}, 0x0, 0x7f, 0x7, './file0'}, {{0x0, 0x2, 0x5}, 0x1, 0x7f, 0x7, './file0'}, {{0x84, 0x3, 0x5}, 0x5, 0x1f, 0x7, './file0'}]}}, 0x68) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = dup3(r0, r1, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x401, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040401}, 0x4000000) 03:55:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a80) 03:55:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x35a, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) getsockname$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) [ 1693.412617] EXT4-fs (loop2): bad geometry: block count 66616 exceeds size of device (66048 blocks) 03:55:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:56 executing program 5: socketpair(0x22, 0x80003, 0x7, &(0x7f0000000280)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self\x00', 0x2000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) r4 = dup3(r1, r2, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f00000000c0)={0x9, 0xffffffff, 0xffff8000, 0xfffff509}) r6 = dup(0xffffffffffffffff) fstat(r6, &(0x7f0000000140)) r7 = socket$rds(0x15, 0x5, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000880)=""/4096) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100), 0x10) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:56 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801020019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1693.687185] binder: 10328:10331 unknown command 0 [ 1693.692098] binder: 10328:10331 ioctl c0306201 20000080 returned -22 03:55:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a81) 03:55:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1694.123693] EXT4-fs (loop2): bad geometry: block count 131384 exceeds size of device (66048 blocks) 03:55:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x300}, 0x20040885) 03:55:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a82) 03:55:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r4, &(0x7f0000000100)={0x11, 0x11, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = dup3(r0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r7 = getpgid(0x0) kcmp(0x0, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r7) kcmp(r6, r7, 0x0, r0, 0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:57 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r1, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="542404004f523c7c8203ceabd3c9369eef2e16280610e105d3690332b25f91e52e13726a001039471a45aa5db0481ad6bea0f84dce183c7dcdcb9a1fdea5e56a6871080a275105b7a78ba17d46a348b843f8f99f58b5c0"], 0x0, 0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r6, r2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000180)='/dUv/cec#\x00', 0x2, 0x2) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20010, r8, 0x0) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1694.276793] binder: 10369:10373 unknown command 271444 03:55:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a83) [ 1694.312731] binder: 10369:10373 ioctl c0306201 20000200 returned -22 03:55:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:57 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802020019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x1, 0x9, 0x3ff, 'queue1\x00', 0x80}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x1402) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup2(r5, r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="969497df0b9e4281"], 0x0, 0x0, 0x0}) 03:55:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a84) [ 1694.555320] binder: 10391:10393 unknown command -543714154 [ 1694.579537] binder: 10391:10393 ioctl c0306201 20000080 returned -22 03:55:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x500}, 0x20040885) [ 1694.746105] EXT4-fs (loop2): bad geometry: block count 131640 exceeds size of device (66048 blocks) 03:55:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1d1200, 0xd0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x1ae9, @mcast1, 0x3}, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @remote}, 0xfffff000}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x6b5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x800}, @in6={0xa, 0x4e20, 0xffff0001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}], 0xac) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r2, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000340)=@urb_type_interrupt={0x1, {0x5}, 0xee, 0x0, &(0x7f0000000100)="7a1c11ea339948b3edb2dbf0729765e0f59669ae1ab6fde1e450572967c255682f56a642129d669ba3532f056623fea0aabcc7575743be72720e28cca33667ce2ca5df0fbcc9c65da5c389996d3fa194b647d563d2f003b5498dddfa6d040ee73389240a0bf0a6bd64930fe10f90c9b9531e3167b1e346c231c37e7b5113e97bd8f95d1f936e", 0x86, 0x1fc00, 0x9, 0x0, 0xffff111a, 0x884, &(0x7f0000000240)="65fb7fa95c6a28e4e18fc73cd62caeed9175e3dc0f430906587109fc21c602aa23a6da02e855759c1e1cd0ea95be03eb623577b455ed133d4b1f6b9ceee09bf224019f88d06baa98d3020dc69ea497a9a984c0a6454171015d1f00a7c5aac2934948e52ffdc34f74824fcbf274fa2c59c79b6ce174e0c8306fede3c8491545c0d4d3029058c6c4ac8236cddf09210985b6f22004e05cc806a43cc53ab53bfbc3c65aa7e7a9a2169012967e0796eaef4cc285ef89dd02d4cd7b580490fd2c4a4535ccd0912a0090e49d03dc2c6a"}) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) 03:55:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a85) 03:55:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000040)) dup2(r2, r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:57 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803020019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a86) 03:55:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f15dcf51c4d5ba93839705630040"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r8, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x67, 0x1, '\x00\x00\x00\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESHEX=r12, @ANYBLOB="2c726f6f746d6f64653d3030303030303030302057492c0325d05f14500f30303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r12, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) r13 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x22001, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r15 = dup(r14) r16 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x810, r16, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r17 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r16, r17, &(0x7f0000000240)=0x202, 0x4000000000dc) r18 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r17, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ee9e47f5", @ANYRES16=r18, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000b8", @ANYRES16=r18, @ANYBLOB="000528bd7000fbdbdf250300000008000100000000000c000800ffffff7f000000000c00040002000000000000000c0006000100000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0x9, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r18, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x14004000) r19 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r20 = dup(r19) ioctl$sock_bt_hidp_HIDPCONNADD(r20, 0x400448c9, 0x0) r21 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r22 = dup(r21) ioctl$sock_bt_hidp_HIDPCONNADD(r22, 0x400448c9, 0x0) r23 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x4, 0x80000) r24 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x89003, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x4c, r18, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r20}, {0x8, 0x1, r22}, {0x8, 0x1, r23}, {0x8, 0x1, r12}, {0x8, 0x1, r24}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2080}, 0x8000041) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x101800) sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc1100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x60, r18, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x576ab24b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000051}, 0x60408d0) r25 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r26 = ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) r27 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r28 = dup(r27) syz_kvm_setup_cpu$x86(r28, r26, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$CAPI_GET_MANUFACTURER(r28, 0xc0044306, &(0x7f00000000c0)=0x9) 03:55:58 executing program 0: r0 = getpid() rt_sigqueueinfo(r0, 0xd, &(0x7f00000000c0)={0x0, 0x800, 0xfff}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xff, 0x0, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="3ae618a0060d1f8033f7b06b105cdd95a86d0c622d6a133c8bbf51ece82cd6a61cd30e5d37fb891e7f2b76b01103996fa25822402f2276d6fef8a567c19c5d6edf5b57c5a4c18df4079c16e2d39761dd448bda8368845895406763bad6501f3430c8bf49b2662bb9c5f47d405af5260ee1b176a002b1bfcee2ef8bcc8116c50789b5851673d73b1f494f1e80d7249ecf8ad61a1ab47fd271eb58d056d1ac51fb72cd00e1352838aab65d58ab14d748d18b55ba766743940397d1", @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYPTR], @ANYRESHEX=r4, @ANYRESOCT=r5], @ANYBLOB="676fb3b407499b5792e4b1759d5e874ab7bec78cd6b15c8d32daf23cf17635cbcfa6e24a98c66920851059cd72f9142d0e4936681b5641aa7aa68e0a0f1478c86ff194743b595d31675b89ed9b43c9244875130554079c6327f5c3d6b38b73c54261ed0eeef012670d4f8a400d4ed97f73b020d1b5a5f3b4cd99aa011089ddb76a2b30a431c1f18092f2b24360611a6cf24d16609006304cde4d49d617cb68aac310b694e86efdb0c4af2aac8a5701a3a212cb230fccd5d13d135e3c65802a0559281c4f4d1607b4f3af841dfbba8b11a7c54098194cbea20a347ae893e2448abf6fec9a719b8321c3f52ce0303be8e31324bb118b", @ANYRES16=r6], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0xfe, 0x0, &(0x7f0000000580)="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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r7, r1) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1695.137688] binder: 10434:10435 unknown command 1372544497 [ 1695.143384] binder: 10434:10435 ioctl c0306201 20000200 returned -22 03:55:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000080)={0x83, 0x8}) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1695.274299] EXT4-fs (loop2): bad geometry: block count 131896 exceeds size of device (66048 blocks) [ 1695.304658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a87) [ 1695.349342] binder: 10444:10446 unknown command 536871232 [ 1695.383677] binder: 10444:10446 ioctl c0306201 20000200 returned -22 03:55:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x10000, {0x0, 0x7530}, {0x0, 0x0, 0xf8, 0x5, 0x86, 0x3, "0ec563b2"}, 0x1ff, 0x4, @fd=0xffffffffffffffff, 0x4}) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = dup2(r8, r0) socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a88) [ 1695.513587] net_ratelimit: 21 callbacks suppressed [ 1695.513595] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.524218] protocol 88fb is buggy, dev hsr_slave_1 03:55:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x600}, 0x20040885) 03:55:58 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800030019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000080)) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x159) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2800, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00'/16], @ANYBLOB="0100e60500ff000000000000000001000000000000000000"], 0x48}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bond\x00', 0x4}, 0x18) sysfs$2(0x2, 0x80000001, &(0x7f00000000c0)=""/67) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x171203, 0x0) r9 = getpid() fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r9}) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 03:55:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a89) 03:55:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="44e65e622ce5c75e"], 0x0, 0x0, 0x0}) 03:55:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sync_file_range(r2, 0x0, 0x5, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8a) [ 1695.931775] EXT4-fs (loop2): bad geometry: block count 196664 exceeds size of device (66048 blocks) [ 1695.949611] binder: 10587:10589 unknown command 1650386500 [ 1695.966153] binder: 10587:10589 ioctl c0306201 20000080 returned -22 03:55:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0x548b, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={[], 0x1c}}, 0xa6) r4 = dup3(r0, r1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffff, 0x634140) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x20, r9, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, '\x00\x00\x00\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf41a}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x58, @remote, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x16}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}}}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @loopback}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x800}, 0x20004150) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x2) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:55:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1f, 0x0, 0x4}) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1696.073625] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.073665] protocol 88fb is buggy, dev hsr_slave_1 [ 1696.078748] protocol 88fb is buggy, dev hsr_slave_1 03:55:59 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801030019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x700}, 0x20040885) [ 1696.153623] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.158784] protocol 88fb is buggy, dev hsr_slave_1 03:55:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x9c, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8b) 03:55:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xfffffffffffffe18, 0x0, 0xffffff97, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0100"/24], 0x48, 0x8000}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1696.370689] binder: 10718:10721 ioctl c0306201 20000200 returned -14 03:55:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8c) 03:55:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) write$UHID_INPUT(r7, &(0x7f0000001780)={0x8, "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", 0x1000}, 0x1006) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 03:55:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair(0x10, 0x0, 0x8, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000540)=[@mss={0x2, 0x5}, @window={0x3, 0x6, 0x5}, @sack_perm, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x2}, @mss={0x2, 0x5}], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = dup2(r3, r0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r7, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r7, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2400000008000000000000000a14000000000008000000b42adf28c7", @ANYRES32=r10], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'sit0\x00', r10}) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000005c0)={@rand_addr="5c8ced406953d319632282f07a1d4060", r11}, 0x14) r12 = dup(r5) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x800000, 0x0) write$vhci(r13, &(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, "8990f490cbfd1f5fa2a3bcfe65187662fed03f91063c27eded464afbfc55e0fddabcc5831995eba89198cbafce358caedc6f63b27b483e21ea90ab94d54b5daf07760bc1e160f3ac1a32af26034da6e1ac8be1e10fbd10ceeae4656b021d6e44f00fa188fcf8f8548d7b06ff0f4333d520c1f4854f401c648429d12400c70bb361938afbb2e09157357536671248c69e21f4d17a808ec2255f768a444386ca6882da450264706b47a8489c"}, 0xac) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="5a09cab27d0bca4594cc9f251979c13583fca9edace8e1ea0cc05a652d0d6b71d7dd6b47e02f0ab43e06c8479a3f7b0a12f075eb0e49c737275a589487a5f7dc574368f1e9bd75d7422700df7231793b85ca5cd3dd61dae37f4dca9d437dd57187b32f06ffb241a68055f018", 0x6c}, {&(0x7f0000000140)="b2fcc7b854b32bc414708f8a3c9a7ebccf7ef0df99eee91344a341453e7d6fb23c15b4b1c69ac4874f9dba0846f2f431d0668b770345129384c629cef28ae08b704ceaef5890118d28958de0e78a5b0dd644ab4691875bfae841969093acbb3a1bc7838a27080f63", 0x68}, {&(0x7f00000001c0)="6142ff2d4854e079db135b41d47f16242053d59e561511383226f29fbdc8a443fcff4d589b55baf0b2222bad", 0x2c}, {&(0x7f0000000240)="327432bf", 0x4}, {&(0x7f0000000280)="3bbdc1f2b1a6d857d82576c657eb399f7f7d1bbd234013929aa7d7d7a68775595055b6128c6de4762f96d52d3e97046a96eefda770d615231c1f84a3a60f312b8f30f6112a8449b773ba343da4b18f0419334170b273a67ab28d4c1f658fc5a2ac8792679880", 0x66}], 0x5}, 0x4008080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1696.537613] EXT4-fs (loop2): bad geometry: block count 196920 exceeds size of device (66048 blocks) [ 1696.633653] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.638822] protocol 88fb is buggy, dev hsr_slave_1 03:55:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, 0x3, 0x7f}, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) r5 = getpgid(0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000180)={0x5}) kcmp(0x0, r5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r5) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x80, 0x1a, 0x40, 0x0, 0x7f, 0x800, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd98b, 0x4, @perf_config_ext={0x57, 0x4}, 0x7c1a70b705bfcbc4, 0x6, 0x2, 0x6, 0x5, 0x9, 0x2}, r5, 0x1, r4, 0x7) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1696.713611] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.753419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pig=10747 comm=syz-executor.0 03:55:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8d) 03:55:59 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802030019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:55:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x900}, 0x20040885) 03:55:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = dup2(r7, r0) ioctl$VIDIOC_G_JPEGCOMP(r8, 0x808c563d, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8e) 03:55:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='\x00\x00\x01\x00', 0x0, 0xc02) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9f31b9def0292a"], 0x288, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:55:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x2, 0x3f, 0xa2b6, 0x7, 0x5, 0x1, 0x901d, 0x400}, &(0x7f00000000c0)={0x8, 0x4, 0xcd, 0x20, 0x5, 0xfffffffffffffff7, 0x8, 0x1}, &(0x7f0000000100)={0x6, 0xfffffffffffffc00, 0x7, 0x9, 0x8, 0x7ff, 0x6}, &(0x7f0000000140), &(0x7f0000000240)={&(0x7f0000000180)={0x3}, 0x8}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000280)={0x0, 0xd6}) [ 1697.076051] EXT4-fs (loop2): bad geometry: block count 197176 exceeds size of device (66048 blocks) 03:56:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a8f) 03:56:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f00000000c0)=0x1) 03:56:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f00000004c0)={{}, 0x8, 0x2, 0x100}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x400, 0x4, 0x40, 0x80}, {0xfffc, 0x2, 0x74, 0x8d}, {0x18, 0x81, 0xac, 0x7fff}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = dup3(r0, r1, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x7a, 0xfffffffffffffffb, 0x17, 0xe, @buffer={0x0, 0x84, &(0x7f0000000240)=""/132}, &(0x7f0000000180)="edce8dbf33404a6637c9551ddab2b0a020838d25ced432", &(0x7f0000000300)=""/184, 0x1, 0x10000, 0x0, &(0x7f00000003c0)}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000580)=0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r8, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r8, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x6, @random="65e1f7f83aef"}, 0x8, {0x2, 0x4e20, @multicast1}, 'veth0_to_hsr\x00'}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000005c0)={{0xe85fcf12fe2c1c94, 0x10000, 0xe, 0x2, 0xfe, 0x40, 0xf9, 0x6f, 0x2, 0x1, 0x40, 0x40}, {0x2000, 0x0, 0xf48c48898448ea8f, 0x8, 0x59, 0x5, 0x5, 0x9, 0x1, 0x5e, 0x20, 0x7}, {0x100000, 0x3000, 0x3, 0x3f, 0x80, 0x7f, 0x5, 0x81, 0x5, 0x5, 0x5, 0x3f}, {0x4000, 0xd000, 0x4, 0xad, 0x20, 0x3f, 0xcd, 0x3f, 0x6, 0x1, 0x9, 0x6}, {0x0, 0x1000, 0x9, 0x7, 0x6, 0x3, 0x3f, 0x8, 0x8, 0x67, 0x81, 0xfe}, {0x3000, 0x3000, 0x0, 0x7f, 0x0, 0x1, 0x80, 0x8, 0x2, 0x1, 0x7f, 0xda}, {0x100000, 0x2, 0xc, 0x5, 0x28, 0x3f, 0x35, 0x6, 0x5, 0x81, 0x5, 0xfd}, {0x10001, 0x9e7fec56f7a0bee, 0x3, 0x6, 0x9, 0x9, 0x31, 0x6, 0x28, 0x0, 0x0, 0x5}, {0x0, 0x3000}, {0x11800, 0x3002}, 0xc0010012, 0x0, 0x4, 0x4400e, 0x2, 0x400, 0x5000, [0x257, 0x9, 0x1, 0x3]}) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1697.269361] binder: 10877:10880 ioctl 8912 400200 returned -22 03:56:00 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803030019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a90) 03:56:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:00 executing program 4: io_setup(0x2, &(0x7f0000000040)) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440de73c75c0dcd3d8bc1950008291b2cb05bc607b78f876803b667d5a25c44629083388241fb6ff6fba2e2cc8fb0f3955380733d5606035d15bd21f706e9cb36d5148327d8601506fc7b584cdb08007256f153e7f0bc62c8670bda82a795090942ff53efae0d59b13b42333a0ae2f72417129c83df4e13681a115ad8c9a3"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) r4 = dup2(r2, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000180)=""/72) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08631040030009000000020000000000002c9bfdc38e1bcedd6df8b59e84b5dadb8b87ffc54b5762cb53785148e9e9e79e2248a7f30b32cc4866c2ecbe8831fdb653b92e588b910f0a5cfe5f9e3044efda329c82df977609b45a2aecbc7676f4fc953c3d8fb5e495b9f99fa72770e24dbf651f518fdf37ae57930000c0079de13b672762670ed7ad10356c15781777917640bd9f2b2fff583771bff4ba404335ea77109bcbf14997042533935efd5f7bc597ea470795c9d6422fc4b6b06768000000"], 0x0, 0x0, 0x0}) [ 1697.761999] EXT4-fs (loop2): bad geometry: block count 197432 exceeds size of device (66048 blocks) 03:56:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xa00}, 0x20040885) 03:56:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a91) 03:56:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x6143, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000100)) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$DRM_IOCTL_SG_ALLOC(r10, 0xc0106438, &(0x7f0000000040)={0x7ff}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000080)={0x10000, 0x0, &(0x7f0000005000/0x1000)=nil}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @random="979f600a6d21"}, 0x14) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r13, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r13, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r13, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r13, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f00000002c0)={0x5, 0x3, 0x0, 0x0, 0x1f}, 0x14) r14 = dup3(r0, r11, 0x0) setsockopt$packet_int(r14, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r7}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@mcast1, 0x14, r7}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:00 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802040019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a92) 03:56:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) read$usbmon(r5, &(0x7f00000000c0)=""/62, 0x3e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ee6cd7b9"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = dup2(r6, r0) flistxattr(r7, &(0x7f0000000040)=""/30, 0x1e) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="e28100e66d949156"], 0x0, 0x0, 0x0}) [ 1698.032771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1698.039465] IPv6: NLM_F_CREATE should be set when creating new route [ 1698.046145] IPv6: NLM_F_CREATE should be set when creating new route 03:56:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x29, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1698.321513] EXT4-fs (loop2): bad geometry: block count 262712 exceeds size of device (66048 blocks) 03:56:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06632dd800000000"], 0x0, 0x0, 0x0}) 03:56:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a93) 03:56:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xb00}, 0x20040885) 03:56:01 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803040019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1698.581642] binder: 11280:11283 unknown command -668114170 03:56:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304400000001cc0ec0cc08fb660a6241aaf8d65"], 0x0, 0x0, 0x0}) 03:56:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'nr0\x00', {0x2, 0x4e20, @multicast2}}) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup(r4) setsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000000080)="ad2e0818848cacc06314e8e29ff48783845c88484882cb09753f20c44c78872ffe47a098882514f6e253ffbb91b82c9630942b47aef5f3a6c8392c23d3efe1393b2e65bf30d21df95febcc4a5e77008132dacca557d00f6db600277c7396c55d60c3a5a50614f72d68dd3efce5b1e980e44c7806bc4008eb19ee5961281b3ca72163eff22ec2e0dda3a47e22ba113b7df9e0d961e211104ff0279ca52954abee99f123379701c3293dba12683b42be18b19e9d3c4277c90f8c91d45fbb3ece325eba4d8630b7c41576c27de674b433b7aeed0065c3673b8e01b7f56a499539f80ed9acedc3", 0xe5) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x7) getsockname(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000002c0)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltclass={0x64, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0x7, 0xba10ff9ef022a9c0}, {0xffef, 0xf}}, [@tclass_kind_options=@c_clsact={0xc, 0x1, 'clsact\x00'}, @tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x8, 0x5, {0x2, 0x6}}, @TCA_RATE={0x8, 0x5, {0x0, 0x80}}, @TCA_RATE={0x8, 0x5, {0x5}}, @tclass_kind_options=@c_cake={0xc, 0x1, 'cake\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r6 = dup3(r0, r1, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1698.652224] binder: 11280:11283 ioctl c0306201 20000080 returned -22 03:56:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a94) 03:56:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, r4, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r4) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)=r4) dup2(r2, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="066304650d000000"], 0x0, 0x0, 0x0}) [ 1698.906901] EXT4-fs (loop2): bad geometry: block count 262968 exceeds size of device (66048 blocks) 03:56:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1698.999163] binder: 11313:11314 unknown command 1694786310 03:56:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a95) 03:56:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x80000000, 0x400000) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x200, 0x200) getpeername$inet(r4, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d000000ca6b802baac272935174201fc64cc9b227cab75c60db6940518f93942f42bd9d0bce9957c7889c352e62b282cbf000c1cfbef6a1dc2156f6ab9115b193d81c35be37efa854e96a042fb7fa2f33a4da67a695e4ff450287bfd9863661d2c9f98b630d1e746fcfec69f20f7d6031fc46c5fff0ea822fabadbba60303fc41263d86e3e465df2c79a1c6812d87fcf01eed28b3dc7837697f3baa0c9203b62847413409f47d18c4a73d7062df92c6ccb7edad33b313456047a573cb6dfbb818a2bc655f5017209038eee3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={r9, 0x252}, 0x8) r10 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x44103) bind$packet(r10, &(0x7f0000000040)={0x11, 0xaa31a60669d22dcd, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r15 = dup(r14) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc26) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r16, 0x84, 0x0, &(0x7f0000000140)={r18}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f0000000280)={r18, 0x9ec3}, 0x8) r19 = dup3(r0, r1, 0x0) setsockopt$packet_int(r19, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x4, 0x0, 0x0) 03:56:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xc00}, 0x20040885) [ 1699.056661] binder: 11313:11314 ioctl c0306201 20000080 returned -22 [ 1699.142222] binder: 11320:11323 unknown command 8 03:56:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440ce430800000000000000ea463eec8090649b642a99dc7fbb347491b2604d116df49f15515808ece2538c421cd1b66b249a32412bfc9cfcc32882559010b2f0907795e1ca8c21d072bd598044c5af3a81c8f629c7cee8963bef2795826ad1371d99920a09d1e2dccafb2ab379e3e69d688bc21eb881dfb72539916e12d7424f5f8260ff0166347d36cbfc5a3abb1424248c13d9098359fb015cc4e774270d55acda8a76f721349f17752750048e882a19943ecc3b04a99d919d18a4cd6c39e38e903db4d5be6e1a881a37"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:02 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800050019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1699.185671] binder: 11320:11323 ioctl c0306201 20000200 returned -22 03:56:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a96) 03:56:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe59, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpid() kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$peek(0x3, r5, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$LOOP_SET_CAPACITY(r10, 0x4c07) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="065a045001000000"], 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x585000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r14 = dup(r13) syz_kvm_setup_cpu$x86(r4, r14, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffff5, 0xa2651a1f875d0b79, 0x0, 0x0) r15 = socket$rds(0x15, 0x5, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) bind$rds(r15, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sync_file_range(r15, 0xfa9, 0x3, 0x3) ioctl$TUNSETVNETLE(r14, 0x400454dc, &(0x7f0000000040)=0x1) write$cgroup_int(r14, &(0x7f0000000100)=0x4, 0x12) 03:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='\x9d\xc8\x86\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0x4e20, 0x6, @ipv4={[], [], @empty}, 0x1870}, 0xff, [0x5, 0x80000000, 0xffff, 0x698d, 0x3, 0x5c7a, 0x6, 0x80000001]}, 0x5c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r8, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r8, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) finit_module(r8, &(0x7f00000003c0)='eth0\x00', 0x2) r9 = dup(r7) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x2}], 0x10, 0x0, &(0x7f00000000c0)="634bec0b49dbff58330a0e9bb03f4e39"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x88, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5634257bec3e5359c7e6c295ded1dab82b7b152522275e313884f9543fcd4592b9a08e2195b3531e444a2661d8e265300f24c394f0fb46d088ab0db21919d143ceb18630373e8238f5c31f198b530161b22598c30e003eff7ad81e94d6af2efd1a65eaa2eea8fdbfd17f3b8a0a3f3ce1d173beee92ec0ead8344f800"/136], 0x0, 0x0, 0x0}) 03:56:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="c6eae41c366aeaf20498f3d4f519", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r7}, &(0x7f00000002c0)=0x8) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3ff, 0x40) setsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x80, &(0x7f0000000240)=0x7ff, 0x4) bind$inet(r11, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r11, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r11, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r11, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'sit0\x00'}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r13 = dup3(r8, r9, 0x0) setsockopt$packet_int(r13, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000001c0)={0x0, 0xffffffffffffffec, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x4}}, 0xffffffffffffffc4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x10c0, 0x0) r17 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r17, &(0x7f0000000380)={0x12, 0xfffffffffffffd4f, 0xfa00, {&(0x7f00000003c0), r15, r16}}, 0xfeb2) write$RDMA_USER_CM_CMD_NOTIFY(r13, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r15, 0x18}}, 0x10) sendto$inet6(r8, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1699.527500] EXT4-fs (loop2): bad geometry: block count 327736 exceeds size of device (66048 blocks) [ 1699.558892] binder: 11344:11345 unknown command 1342462470 03:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a97) 03:56:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xd00}, 0x20040885) [ 1699.594630] binder: 11344:11345 ioctl c0306201 20000080 returned -22 03:56:02 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801050019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a98) 03:56:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1, 0x4) 03:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10402, 0x0) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x501200, 0x0) openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x345000, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000100)=0xfffffffc, 0x4) r5 = dup3(r0, r1, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1700.134276] EXT4-fs (loop2): bad geometry: block count 327992 exceeds size of device (66048 blocks) 03:56:03 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802050019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xe00}, 0x20040885) 03:56:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a99) 03:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) write$selinux_user(r7, &(0x7f0000000040)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u\x00'}, 0x2c) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05e30440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) connect$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x5, 0x80, 0x68, "08d5bd9363f828e1746ca03ba5b0ff309ab4abbcecf9d34d65d4ac41e4b37834317625d8499f68adb02232fdf7d288d0590d60515412caec27fa0d45628219", 0x15}, 0x60) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = dup3(r3, r4, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9a) [ 1700.504595] binder: 11522:11529 unknown command 1074062085 [ 1700.521634] binder: 11522:11529 ioctl c0306201 20000200 returned -22 03:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1700.684073] EXT4-fs (loop2): bad geometry: block count 328248 exceeds size of device (66048 blocks) 03:56:03 executing program 4: syz_mount_image$nfs(&(0x7f0000000500)='nfs\x00', &(0x7f0000000540)='./file0\x00', 0x6, 0x6, &(0x7f00000009c0)=[{&(0x7f0000000580)="6abfe0a00353832f98fb3d232e78b147d4da523b84f67d3a1335066ba687b5a91cc7070acc6b881aadb7ad567838463453b381d48383786c358ba5cf3f7bbf46ee0c390926c3913f6b49bb7e002b69f282e69e5f913b6a6b7b56268cbd38f65f28fe72a939caee390d9dca4cb4ebf5fe2337f19541ff33f01b1d593305251b32698837db8c882ecc95e1b1a9e755e5150bab844de0dd627ea539b5009f8fedef708efa10611981e57f2be1e6b0f712865f0df26b3900ca679153e2d6e1bf04277fc2d36b588d12c29ba4e12eb39f1ab0c831cd862f461d8558a6898d8c39778cb0fe53eb23a4", 0xe6, 0x4}, {&(0x7f0000000680)="79952ed05f256a0ae66064e8d8572fc01ecb56e360e4b611e7ef677c73610a07484197e317207315fd78c9cb4c4b40dea2a168daa60a3b132129f7be8ca22571f05218d1a842de", 0x47, 0x8}, {&(0x7f0000000740)="a3328695a2c1f08ec73f7c003614ffa1a7f0b7b680ec36588018ba6ad94d8054100c398f056256421d1f493da3a9fd115e5e19c07442eb30b5f7560828b5c03e8431361871441a1298654f2af4dbcfae4de0f087f8190bb773b60c9f4b63771b7bad92b09269d1bb6e7b103b44ededfe2cdcf3c1a1898c3bc11d2f939c", 0x7d, 0x10000}, {&(0x7f00000007c0)="6669482d4ac5e87b2381ef5169b315f889df1233f612c3", 0x17, 0x4}, {&(0x7f0000000800)="81d3ecae66269a2acfdedb4358507e748eeeb4dce6c3021ae9874592a7d4f8bedf994317e410d2aa5f77a7232d89d5646977dacb6eeb1c2b95fe05fce940ea08c25908bfa6f773fad5b03a558cad99e26062fac9a17543336fadebe19c0ed8bb90a33db4032face346800f8f89d6674ae064077027bf37f6fd256dfc128d5b9e2040cdd65bd39bea02d58ba48388bd8164e0b491c6149c8351d8b068b8e514c3dc3c49f5fc207f70b5e06316b6bc776a6c25c6ee951cdebc5f80819eedc89f3775055215de37474c0a951ef61ba61684337907314ca9", 0xd6, 0x7}, {&(0x7f0000000900)="64d252e9a0fc35748b0b68a13992ce1772ef94a2aa08fcaa48603ae105d55687156d9c1d9e2f656b9a62c3a8a5a7ef269bbed9e12c583a8e448919d00993dce3e83d6ee51de8c53d0044e79a14692b429ee77f1eed8caf51e5da3a3bb2597d05ec8efce32c4b4623fbfedec739df34af885a9ad1f3278feeed15f8537b39c7e1c62426925eb6e5ec45b4c149d789352915a3068bf0c9a8bee98f11cc1fd73f4fa8a2be2d4048be810fae9e73718777045bcff281386040eb594b64", 0xbb, 0x10001}], 0x2000004, &(0x7f0000000a80)='/dev/binder#\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d09e044037aaebc3a7eadc40e9188b06f270c024db8f65ede91c8dff62ec1773b319319b6e18c365109c9e5f33cbf48afbb0c9c4c90e42a89f57ffa233f7018721d96ed23baf06755d9c3971f5dc96a4289fe84efb86a955cb2b642f9e100fb384cba62c96d589a4028bf41686cd9f4f8de5175ce0c0bd6136d6"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x38}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={r10, 0x3}, 0x8) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r13 = dup(r12) syz_kvm_setup_cpu$x86(r13, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r14, 0x84, 0x0, &(0x7f0000000140)={r16}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r16, 0x3e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f00000001c0)={r17, 0x2, 0x6}, &(0x7f0000000240)=0x8) [ 1700.793623] net_ratelimit: 23 callbacks suppressed [ 1700.793631] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.798807] protocol 88fb is buggy, dev hsr_slave_1 03:56:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x7, 0x0, {0x4769460d6765ec06, 0x2, 0x28, 0x0, 0xffffff00}}) 03:56:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9b) 03:56:03 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803050019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1700.873621] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.878803] protocol 88fb is buggy, dev hsr_slave_1 [ 1700.886366] binder: 11548:11553 unknown command 1074044624 [ 1700.911498] binder: 11548:11553 ioctl c0306201 20000200 returned -22 03:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = dup3(r4, r5, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1700.953619] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.958751] protocol 88fb is buggy, dev hsr_slave_1 03:56:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0xf00}, 0x20040885) 03:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='logon\x00', &(0x7f00000000c0)=@secondary='builtin_and_secondary_trusted\x00') 03:56:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/221, 0xdd}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000000440)=""/22, 0x16}], 0x3}, 0x4}, {{&(0x7f0000001640)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/22, 0x16}, {&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000001700)=""/20, 0x14}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000001740)=""/71, 0x47}, {&(0x7f00000017c0)=""/39, 0x27}, {&(0x7f0000001800)=""/116, 0x74}], 0x7}, 0x7}, {{&(0x7f0000001900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/164, 0xa4}, {&(0x7f0000001a40)=""/210, 0xd2}], 0x2, &(0x7f00000031c0)=""/4096, 0x1000}, 0x5}], 0x4, 0x0, &(0x7f0000001c80)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = dup3(r0, r1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r5 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0xd38d25506081a582, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x7) 03:56:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9c) 03:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc00) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000005a55312ea3026c61767fd268"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) fchmod(r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1701.329374] EXT4-fs (loop2): bad geometry: block count 328504 exceeds size of device (66048 blocks) [ 1701.400661] binder: 11590:11591 unknown command 0 [ 1701.454482] binder: 11590:11591 ioctl c0306201 20000200 returned -22 03:56:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9d) 03:56:04 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800060019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) getitimer(0x2, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000000000a20eae22eb0dc946a80bd0c350bf09ad2dc051a7946253bc5052480d837a7efe3a98113214f54bad9158412df7fa47c397a77b334544e63c4558f02f6cb05f03cee74f5708ec41e4b7c4db9cd430a613a22614934916c009e9f66551c07b66a2e01ebfc524de84652ecff1105c6b737e629ad22d648e2d"], 0x0, 0x0, 0x0}) 03:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r3 = getpid() r4 = socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_elf32(r4, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfb, 0x5, 0x8, 0x5, 0xfffffffffffffff9, 0x3, 0x3, 0x200, 0x48, 0x38, 0x21f, 0x5, 0x1, 0x20, 0x1, 0x1, 0xff, 0x6}, [{0x70000000, 0xffff4f9e, 0x1, 0x7, 0xb6a2, 0x3, 0x1, 0x1f}], "abef0fa99f07383167e1ca7494ef81b11efaec343fad873a3c4981586d0661b454bdd53bcd61a49c5d02f9", [[], [], [], [], [], [], [], [], [], []]}, 0xa83) get_robust_list(r3, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)}}, &(0x7f0000000180)=0xc) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x100000, 0x33a000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f00000001c0)={0xd000, 0x1000}) 03:56:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1001}, 0x20040885) 03:56:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9e) [ 1701.753595] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.758775] protocol 88fb is buggy, dev hsr_slave_1 03:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1701.836951] EXT4-fs (loop2): bad geometry: block count 393272 exceeds size of device (66048 blocks) 03:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = gettid() sendmsg$nl_netfilter(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000001780)={0x3664, 0xe, 0x6, 0x40, 0x70bd2d, 0x25dfdbff, {0xc, 0x0, 0x3}, [@generic="bc9e6b70e5caf4566ae1e9432ff848c288404fabb549854557520bb5d43cc5ab1b71e0f67b406254c299f4355666fe95d57bf47099828b193e0d5eea01838ed8e24e69546937b2c85b713d5fa938a8bd64c6eb2e98452b92f1cc2cac721ead929019274284450c682a863647713a091741741ee6f0d21ceb921ea6ae45c960fad0695c76ffaab01116b547586bc144a0b3229ed0008f6273b7472fbdebf6b078ce53f13f75f070af659810e43ec6549803bc07f51e9954ab509f09b4ba6d974105adbb", @nested={0x1114, 0x26, [@typed={0x1004, 0x29, @binary="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"}, @typed={0x14, 0x52, @str='ppp1ppp1em1(%\x00'}, @typed={0x8, 0x0, @fd}, @generic="a4bf7c44d73bfeaf940941fa179df38be02be5b9243c96d1596ef113b119e74d417bf618010ce9a9ea73fa1dae59ae2edd6aa6969784eddbd2f3871a9a44d398bf99ad793282475425287fbe68164f10025af32b462664c9e28827ac21f3effc54348e0cacc760619535bdc54d0a27c3f092aa3b19593ba4a1b79587d878cb2bc0269e8fc6", @generic="2620108539f5815dc8a66fe3d7628c698f1a03b4e33c3e5265305101830531d04684a5d0744ba15a4a39f2c9b084cad6d69f9cd848d5e2155b83afe320681d57233192e6a5687286c87ec420f4d039cd553a00180ffa54e653b3c07fe6a1d80df6ddaaa73eec9340c93c7a"]}, @nested={0xf8, 0x54, [@generic="230aa621a0b9c61fef8b722f9964850aff11aacfde5d74478217e29cbda10738f94aa19a46d1cfa2dc92ebb9f2d3790f4b7a554a0ddefb3c480a822126c67cbdfc61dd237d3f36ee694475208930ff73902bd346bfca50a7ba6b4e972bb53bbdc116e6fcb57acdbfd10a166ad4336299f567ec26008b04ef39bf9ce7e17aa375a2638d03b0d1056560ffce0eb849fce10159852a95206a5ecd97f8f99fc120a472541ae862ff42ce371fbc764e9d02c200c822e4dc877ca08f89b392aeba14cf99b155f22d7387de51ee5cf2956a1447c0659e1a20f2039eedc22d5f356f74835dea09df2315eac57091", @typed={0x8, 0xa, @pid=r7}]}, @typed={0x14, 0x31, @ipv6=@rand_addr="8f0c9f801d788ce117577755a6121235"}, @generic="c2a0320efc505d4423941b053ec68d963b7b23dc903322ecb4bc6cd436a6306bab4baaeeff", @typed={0xfc, 0x7, @binary="d8ae7295ace24bcd0a9d62aa0a494a6412f7ee29e2234533b5a3320d6faa81be7ae4b0fb6566341f411ce9a6d00b394b4b272dc31ec884bb80a315ec80ee32ea34ef6334dc4a4090a881df48f925879eadd858e81a68528ce2bc7bafd3b7acdc748f864d55600feed122fe657f610ec7c925575fcbdd693e9a56f78ed5ceac3ce811d54d4e019dd57e046243ec6f4b68182995e676346a6095d46e5ef56453b45d29befd486754b7cc3c2acccee142af7e79e0744589edd4489e66dfeb945dfd92e4fe85f66754d4d656e034ff776859e37520ba50d5b6f96dd3d956f5339d876f48f33318b464c3e30ca2583cf90f005aec757b3bec"}, @nested={0x2040, 0x48, [@typed={0x14, 0x101, @str=':em0/nodevem1)\x00'}, @generic="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", @generic="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", @typed={0x14, 0x23, @ipv6=@empty}, @typed={0x14, 0x10, @str='/dev/binder#\x00'}]}, @generic="3b88c094b15476fc4e0e71c4bbdf4e0e870ba6efbcda", @nested={0xb4, 0x48, [@typed={0x14, 0x46, @ipv6=@dev={0xfe, 0x80, [], 0xe}}, @generic="39992102daea21b9617c183da35f6ad8a525c2efa652de835cad0cb88ad20dbfc8b87a709f99ada924e43652af38f2f1b96bb4654b486f223ec8c16b1018b9fdc4f2e2079055084f3ccc58b534b205b821aa52070aa9b8b2ba8cf74ed5bb4288bcd9fe84f02d0b56c89e9cef11770b4f445e12d3cef6d3c54b4930a064525f64867c84993181dc3c821f9f8132f793793c2e0a25d55f3dc5", @typed={0x4, 0x8b}]}, @nested={0x140, 0x69, [@generic="5dece7d24dfa921d4b4de05fb3f15e6f690aad6639ba4c59b75b5787f443f8c4b55306bc0106adc226ad65a12d2ff5b6781e5f2be2c54846d79bb83a24df365a561e551d5dc9ad20158d5c7c46eca855bc86853249c5867f908b3ca7797a4ba0", @generic="1d7cec34d354ae9f226f9b20ca5635c019305363d5ad78701ac67895241d913e321c1a5e39d6ab94318524f43f5876a9db78c05a5a20d94abe9f3387c504e8156b50b66bdf9e3605030a4ac68f5d1d5e6708d1f2a155b99ffd9db092ff7ad1f5df2e5b30208f6635cac6104a32d376c83526a501820bdbf7fa7b0fa9ee7469ec242aca68fad66df8317783c6604c2cd9338b1a7b11bb8fd01495f111ff5d99ce760fedf4d6c4bf98bb7a93102db269482b4be884089996738a630c4fc2a28a3bfc609f2c8bb3a8d5ad9c4562ce6d73ebd93e679b7fa5acff49a6c6"]}]}, 0x3664}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@int=0x107, 0x4) 03:56:05 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801060019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12a9f) 03:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x501102, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05631c87946fffd6a73652f4bab00440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x800, 0x521000) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3d0100010000000000a2067ae97c39c21fc3be4c04"], 0x0, 0x0, 0x0}) 03:56:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1002}, 0x20040885) [ 1702.313595] protocol 88fb is buggy, dev hsr_slave_0 [ 1702.318742] protocol 88fb is buggy, dev hsr_slave_1 03:56:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa0) [ 1702.366298] binder: 11746:11754 unknown command -2028182779 [ 1702.393079] binder: 11746:11754 ioctl c0306201 20000200 returned -22 03:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0x980000, 0x0, 0x100, [], &(0x7f0000000100)={0xa10903, 0x6, [], @p_u16=&(0x7f00000000c0)}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xe50c7893d219e729, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) readahead(r9, 0x9, 0x0) write$UHID_INPUT2(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0000002c03303751e01f9b0a008e9b5a8c999cc5ac60657aa2a3223e4420bd619cef210c6e7b834d5613c392f80877d6ae8126cfc58caf18254bb6d04afaf8056877811abee20e584287b92179a108a1160a4f027f6afa4cfddb32e05990e2e8d9ea96d2ea5a784f028295973fe536b93d38fe9309b7da60f7d8132308285b51030386a77bda6eb5deb52cc5d3c75b46e208a2776334746359c02f3cb1201455ce347b708ae548b95a05f73621189f398a4a6c58da87e4ce988901c03f02e904fcfb132a7472f5b15fd017122586d405f6fdbd5f"], 0xd96aa7e1fa343996) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r10, r0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1702.556700] EXT4-fs (loop2): bad geometry: block count 393528 exceeds size of device (66048 blocks) 03:56:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) accept4$alg(r5, 0x0, 0x0, 0x80000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x263768b3a6a03d7f, &(0x7f00000000c0)=0x82e2, 0xfffffcfd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x6000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000100)={0x5, 0x4745504a, 0x2, @stepwise={0x0, 0x200, 0x1ff, 0x0, 0x3, 0x4}}) r9 = dup3(r0, r6, 0x0) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:05 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802060019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa1) 03:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r3, 0x7c, "66db5249c35fd4e7a1f558630809371d4062f7949853900bd9099c620464b3c1ffce1321507d7274fa49a41643772eb976958f3229bdcf695684b3e9f683e7aed8776b62f37a7c3041e568f16bfce93c66e3df36081decae5f284c8950101efa6711d4bd30c36650fc9d34151e4bf0f88c5061dea991e8ead66dc001"}, &(0x7f00000002c0)=0x84) r4 = dup2(r2, r0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video36\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000b060752d551335f963879f573f1e09c35b7418e5c8aed386e3b6dafcfcd534a9203215fc8aa1e238732ae46ad178e100eefb9b47367c65d71407d2caf5e56a6ae3a2c61ef50cbc473059fb079a370e165a9f7d6196c454207840a45e1fe80270e2814567b79fb09439e2f5122b23de20a8b7ce01e100a489edc7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0xff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x4c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x1f, @dev={0xfe, 0x80, [], 0x28}, 0x80000000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e1e, @rand_addr=0x3}]}, &(0x7f00000001c0)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x202200) ioctl$BLKRAGET(r6, 0x1263, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r8, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r10) r11 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)='bdev\x00', r10) r12 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r12) keyctl$KEYCTL_MOVE(0x1e, r8, r11, r12, 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0663044008000000"], 0x0, 0x0, 0x0}) ioctl$TIOCGPTPEER(r3, 0x5441, 0xffffffff) 03:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="b9"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:56:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa2) 03:56:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1003}, 0x20040885) 03:56:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) setsockopt$sock_int(r1, 0x1, 0x1b, &(0x7f0000000080)=0xda1d, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:06 executing program 0: ptrace$getregs(0xe, 0x0, 0xfffffffffffffff7, &(0x7f0000000400)=""/86) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000004a97a43174344dcef6ea78be0411cf0281b567bd661f28e0b23f375eb0d2916f4626bacac848f1b76774248ab5713a4f4e1b0de721feb2f8d041c25f8dec264c4891a5502416d46f0f68a518bd85c1f58e3158acf4b243fb52439f0c14b70a680687e8f9ed6630b8718e60d0287acaf0a0961a365c4687ad72305999a0429ab22ddb1e602c8f770b4e04a51915e92de5ab031fc6a9e87a0894d4edcc91a9c3545c844b11963ff6a403fe462dbb16d59c2a4cbb0ccacf6b1a1737343db81ffbb01747d4f1be2249fb35acc4103297b94a2f38a8b1c234a8fcc70406"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000480)="1b726241e20b5c3f4a2f7af9d77bd1aa2d5631edd9c01a69520396355ae55bbc837d41bde475b9f0481b36c69bafcf7fdec963d955a4c3da3eff0d6a74e14bbd98e63e438e78741abdc7ab4e94f8b23f5e43dd7a200dacf1") r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_mreq(r7, 0x29, 0xa, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50010420}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@bridge_getlink={0xac, 0x12, 0x480, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x800, 0x200}, [@IFLA_IFALIAS={0x14, 0x14, 'team_slave_1\x00'}, @IFLA_VF_PORTS={0x70, 0x18, [{0x30, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2c7178a6d4cb33b512678104a54e4fb8"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x81}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x3c, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x20}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x80}]}]}, @IFLA_LINKMODE={0x8, 0x11, 0x3f}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1703.188541] binder: 11903:11907 unknown command 185 [ 1703.213584] binder: 11903:11907 ioctl c0306201 20000040 returned -22 [ 1703.236936] EXT4-fs (loop2): bad geometry: block count 393784 exceeds size of device (66048 blocks) 03:56:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa3) [ 1703.304908] binder: 11915:11917 unknown command 7 [ 1703.322415] binder: 11915:11917 ioctl c0306201 20000200 returned -22 03:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x302, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:06 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803060019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030401000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49247eff71bc41313e770afd6e9ef5837dc65b2367e39e21", 0xffffffffffffffcf, 0x0, 0x0, 0x426) 03:56:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa4) 03:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire={0x40046306, 0xfffffffd}], 0x32b, 0x0, 0x0}) 03:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630440010000005f28c4a4410f21860e4d80bb4dacc23278b03a5836f6125536359b08b1338efad1e5921ad9a53cdc7e8cff6f44347d21c77b1f889e2356733ed6d5a05781804720f25b8a6fa03d1670b655789826fa5b8409af7992c2c18602a4b55f226809719efc881370647f0fb04f4a0e5a75bf1ec8c878c0bdbb142db09353178440f988a646fb2d6ac66c01e47c70acc67b4fc61a97600e537ecbece8559b98a778ae4be79496ae0488d85df774f91064de18a86bad006e008f8c3873e246401aff395b2dcd2a7bb3544dd4961accaa08f0cdcc42f50f289685136c6f7487"], 0x0, 0x0, 0x0}) 03:56:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x100000001, 0x2a27a08a3f2536c6) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xfffffffffffffcf3) r8 = dup3(r0, r1, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1703.737674] EXT4-fs (loop2): bad geometry: block count 394040 exceeds size of device (66048 blocks) 03:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1004}, 0x20040885) 03:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x4, &(0x7f0000000140)=0x2) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000000000edd6e7dbe7f4ea70683d60e0b69117f50540a64e6085da2f8f7b8a4ca74c8f55aa9347c8f46d4beb3515ce0ed32ed06919d36f407c7cf3c8189d8430798739d8adf87ea3696b9450"], 0x0, 0x0, 0x0}) 03:56:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa5) 03:56:06 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800070019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) write$P9_RXATTRCREATE(r4, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r8 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r9, r5) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/det/vid\xe5\x00\x005\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x40042) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304403a8f90b9cb242ebebc94448bf7eba13df4925bb9d07e3760ab6fd808f971923ffc448db49863aa7b077db6"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r8, r0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa6) 03:56:07 executing program 5: r0 = socket$packet(0x11, 0x6, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) dup3(r0, r1, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x3a45a202f8a4154) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1704.332685] EXT4-fs (loop2): bad geometry: block count 458808 exceeds size of device (66048 blocks) 03:56:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa7) 03:56:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$rose(r3, &(0x7f0000000180)=@short={0xb, @dev, @bcast, 0x1, @netrom}, &(0x7f0000000240)=0x1c, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setreuid(0xee00, r7) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r8}]}, 0x24}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r13 = dup(r12) syz_kvm_setup_cpu$x86(r13, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) getsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f00000004c0)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000540)=0x14) r15 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000580)={'veth1_to_bridge\x00', r14}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @link_local}, 0x14) r17 = dup3(r0, r1, 0x0) setsockopt$packet_int(r17, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:07 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801070019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:07 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1005}, 0x20040885) 03:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = semget$private(0x0, 0x2, 0x13) semctl$GETZCNT(r3, 0x4, 0xf, &(0x7f00000000c0)=""/165) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa8) 03:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000140)) r3 = semget$private(0x0, 0xb468c366fa2cad51, 0x40) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x6]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000000c0)=0x80, 0x8) dup2(r4, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCLINUX7(r9, 0x541c, &(0x7f00000001c0)={0x7, 0xfb}) [ 1704.847573] EXT4-fs (loop2): bad geometry: block count 459064 exceeds size of device (66048 blocks) 03:56:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r10, &(0x7f0000000300)=@nfc, &(0x7f0000000100)=0x80) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000140)={r12}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r12, @in6={{0xa, 0x4e23, 0x2, @rand_addr="b335cfaf732614d2dfb1fd1daa73c19e", 0x9}}, 0xff, 0x1}, 0x90) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) r16 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r17 = dup(r16) syz_kvm_setup_cpu$x86(r17, r15, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$EVIOCGABS2F(r17, 0x8018456f, &(0x7f0000000380)=""/129) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1ff, 0x20}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @link_local}, 0x14) dup3(r0, r1, 0x0) r19 = socket$inet_udp(0x2, 0x2, 0x0) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) setsockopt$packet_int(r20, 0x107, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x402) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000040)) 03:56:07 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802070019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aa9) 03:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ifreq(r2, 0x8917, &(0x7f00000000c0)={'bcsf0\x00', @ifru_addrs=@llc={0x1a, 0xfa4a, 0x2, 0xaf, 0x8, 0x81, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3ff, 0x100040) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) r4 = dup2(r2, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4000, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) poll(&(0x7f0000000140)=[{r7, 0x1104}, {r3, 0x1001}, {r8, 0x2000}, {r4, 0x404}, {r9, 0x4000}, {r10, 0xb280}], 0x6, 0xfffffffa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aaa) 03:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304e3"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1705.408917] EXT4-fs (loop2): bad geometry: block count 459320 exceeds size of device (66048 blocks) [ 1705.557573] binder: 12473:12476 unknown command -486251771 [ 1705.563279] binder: 12473:12476 ioctl c0306201 20000200 returned -22 03:56:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1006}, 0x20040885) 03:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x282400, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x3, 0xff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x433040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={[], 0x1e}}, 0x14) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = dup3(r0, r6, 0x180000) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:08 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803070019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0xfe98, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES32=r0], 0x222, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r10, r0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aab) 03:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="f9620440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aac) 03:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x0, 0x4}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1705.913611] net_ratelimit: 24 callbacks suppressed [ 1705.913627] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.923736] protocol 88fb is buggy, dev hsr_slave_1 03:56:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20000, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0xfdfa) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x15, 0xc, "be9570f3bf0633343a9cea33ed0126223c04519689a7afbaaf72ce95f9b8fa6f98333ad009a0578d5d81857ec4aec9a56b55fa40095ee57b11ee32a18a141d57", "4e318925d19b592bc5ada97b55a124d6b4bec13f4af6be44a03a8cf83aa8b7e8", [0x6, 0xff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r7, r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1706.103918] EXT4-fs (loop2): bad geometry: block count 459576 exceeds size of device (66048 blocks) 03:56:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aad) 03:56:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1007}, 0x20040885) 03:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r7, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r7, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x544b242def3a1c0f, 0x0) poll(&(0x7f0000000180)=[{r6, 0x10002}, {r3, 0x10a4}, {r7, 0x6d6b0e4da324105a}, {r5, 0x71f97dd26e378c30}, {r5, 0x200}, {r8, 0x81f3}, {r0, 0x1000}], 0x7, 0x80000001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 03:56:09 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801080019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aae) 03:56:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x6, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000540)=""/4096) [ 1706.473593] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.473631] protocol 88fb is buggy, dev hsr_slave_1 [ 1706.478723] protocol 88fb is buggy, dev hsr_slave_1 [ 1706.553634] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.558830] protocol 88fb is buggy, dev hsr_slave_1 03:56:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b4", 0x4d, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000080)=""/40, 0x28) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0xfe, 0x6, @link_local}, 0x7) r4 = dup3(r0, r2, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="e862104200000000"], 0x0, 0x0, 0x0}) 03:56:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aaf) 03:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1706.771865] binder: 12652:12655 unknown command 1108370152 [ 1706.780792] binder: 12652:12655 ioctl c0306201 20000080 returned -22 [ 1706.830258] EXT4-fs (loop2): bad geometry: block count 524600 exceeds size of device (66048 blocks) 03:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@remote, @local, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@ipv4={[], [], @broadcast}, @rand_addr="a0998885e2293801b0469f039978c6cb", @mcast1, 0xfaf6, 0x3, 0x7, 0x500, 0x7, 0x4000080, r5}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab0) [ 1707.033615] protocol 88fb is buggy, dev hsr_slave_0 [ 1707.038855] protocol 88fb is buggy, dev hsr_slave_1 [ 1707.113621] protocol 88fb is buggy, dev hsr_slave_0 03:56:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1008}, 0x20040885) 03:56:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x10040) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100022}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffcf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = dup3(r0, r1, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="85630440625496712105c4fdf045039ac1de5714aaa11d4a9768205f27aaf4397c73dc096d168624f94a4925148e3e779da7"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8002, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:56:10 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802080019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab1) 03:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x920) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f00000000c0)=""/204) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0xfb, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="bb20cc8bb45646f468beff157f5d880c0b6ea62955faba95975541bd8b049062dd33786d4f9d8562360c8d5b2e0fd1c46c6d5db18c8b4a4dcaf47eab31567d69af0ea95ba21755c500aab658c88a7a36fa0f616e11bd3e05f141007d09b34946dde5123317ba384efc708617648745fccefb11492d0d7e5a8cf5a79993fe7abd855eafea138e8cc528c052cfd5e2eef7a216d1f94bad8221e999e32cbe13359e31e6bd117ce77f04c88e12c7ab0e77b6005fdbcd9b326c157da2684b4f620c5ca6390ebd8effb78138884514dbc029ccbf9afead6f8e0faff2a06ec1dc837902770122", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=0x0, @ANYRESHEX=r3], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRESDEC=r9]], 0xfffffffffffffe62, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r10, r0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1707.285868] binder: 12681:12691 unknown command 1074029445 [ 1707.296979] binder: 12681:12691 ioctl c0306201 20000200 returned -22 03:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x6, 0x5, 0xa9, 0x1, 0x9}, 0x9}, 0xfffffffffffffd32) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab2) 03:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000180)=""/100, 0x64}], 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket(0x10, 0x80000, 0x9) setsockopt$inet6_dccp_int(r4, 0x21, 0x5, &(0x7f0000000100)=0x3, 0x4) dup2(r3, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup(r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="33630451efc569b4feb9424799"], 0x0, 0x0, 0x0}) 03:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xffffffffffffffee, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0}) [ 1707.502472] EXT4-fs (loop2): bad geometry: block count 524856 exceeds size of device (66048 blocks) 03:56:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000004040)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004000)='ifb0\x00', 0x0, 0x9, 0x20}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) r6 = geteuid() syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="a006edee2602a746e964077c58d16f992390f5de018209fc6ddfc188f7dd3bfcb536f88b59363e9bd1ba0a2457ad4a6a4546298d12f5b6cea2d9f1e2ba822f94e87ba3e4a71ae016424c4aeb2ef3", 0x4e, 0x3}, {&(0x7f0000000240)="c9f2cf8d31d04f1319ff0d5856ee8d18c9857208ff538065fceef90ea2949f8219b0dfb1297d183b19d98aa2275fa72e8e1adaf280379b0f7e014eda2bb517796fbf5f8e763f844c94025f67f95b78c5016d", 0x52, 0x7ff}, {&(0x7f0000000180)="3671d97aa1d9cd96cffab5e1649f372c8489d33cab0e068ea81d332d", 0x1c, 0x8}, {&(0x7f00000002c0)="0365ae65b0ced68912de601a6fb9cfcd65d79bb8954bf6407150fe67206316f806b00713f00fb458f74a044c41fa3508129fc5196cac4547656e56df99fcc7c6b09d7379927ce3e1b5e52e9d0e4b2f10b082492d792f3962100a61ee1cfa597061cd2a70e71250450d173d1838e799997e361e5519550bfcde5d40726a9ff076b494100f32fb8190f8c117af1c806176dd96874e7da2460814651a5cce2f5765c27319e5e3d677e93e6266446b", 0xad, 0x9}], 0x2040, &(0x7f0000000580)={[{@utf8no='utf8=0'}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}], [{@fsmagic={'fsmagic', 0x3d, 0x9a}}, {@permit_directio='permit_directio'}, {@smackfshat={'smackfshat', 0x3d, '#'}}, {@uid_gt={'uid>', r4}}, {@fowner_lt={'fowner<', r5}}, {@obj_role={'obj_role', 0x3d, 'syz_tun\x00'}}, {@euid_eq={'euid', 0x3d, r6}}]}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = dup3(r0, r1, 0x0) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab3) [ 1707.613471] binder: 12709:12710 unknown command 1359242035 [ 1707.646319] binder: 12709:12710 ioctl c0306201 20000080 returned -22 03:56:10 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803080019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe31, 0x0, &(0x7f0000001740)=ANY=[], 0x8b8263a8c9863045, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab4) 03:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r4, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x2) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0x61b, 0x4) 03:56:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1009}, 0x20040885) 03:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r4, &(0x7f00000000c0)='comm\x00') dup2(r2, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440035e8ef20ff9c0efcf7333dfef499faa346b8d940f4830897899a800ee94caf67a4aa299a2aab5b8ea53c923ada7cdee68b3119ddf4523e8908d6e22d99730cd7983c9c58edbc950d88836f51de0da67612baf348f1e413707956b022166ee61a63ef865f1636d984b5875f5115725162da434672157220c040e7007145709802057b96ef96a804578b61f2bc34f58bedf"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1708.102464] audit: type=1400 audit(2000001370.960:302): avc: denied { relabelto } for pid=12845 comm="syz-executor.5" name="HCI" dev="sockfs" ino=428622 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:crypt_device_t:s0 tclass=socket permissive=1 03:56:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$eventfd(r4, &(0x7f0000000080)=0x7, 0x8) r5 = dup3(r0, r1, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) [ 1708.314975] EXT4-fs (loop2): bad geometry: block count 525112 exceeds size of device (66048 blocks) 03:56:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab5) 03:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000040)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6e, 0xb, @perf_config_ext={0x0, 0x80000000}, 0x200, 0x38, 0x0, 0x0, 0x0, 0x2, 0x20}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:11 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800090019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab6) 03:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r3, r4, 0x16, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xfd93c589c109f252, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e23, 0x4, @empty, 0x1f}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r8, 0xbef, 0x20}, &(0x7f0000000240)=0xc) r9 = mq_open(&(0x7f0000000280)='syz_tun\x00', 0x0, 0x2, &(0x7f00000002c0)={0x1000, 0x1000, 0x10001, 0x7, 0x7f, 0x8000, 0x9, 0x7a60}) r10 = dup3(r9, r1, 0x100000) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) [ 1708.849962] EXT4-fs (loop2): bad geometry: block count 589880 exceeds size of device (66048 blocks) 03:56:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = dup3(r0, r1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0xffff, 0x8, [0xfebb, 0x10001]}}) sendto$inet6(r0, &(0x7f00000002c0)="0304004d008a00030060000000000047fff57b016d27638663cc7c91ed11564f5756373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba509f949e2d5df79181600002fd08d49a4e0d35eda7d5c427cd4f9bf00a900000000008043847027b7f4b051933e770afd6e9e", 0x6c, 0x8000, 0x0, 0x92) r5 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x10800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="d074a274803948976c13ff5f16e084b47b83113588ba5652d22f0a3f45ce2cc29408175660aacc4d0dd8001b700c3af34565f88172e39b2a846b6dbe29606f5e39142139e7f3c134e494b2ac83dc9835239c40acbc2500bb811e7983d43c859df1bcdda547609663d5860d3688387ec779419d5f9a538bb5d5", 0x79) 03:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f00000000c0)={{0xe}, 0x4, 0xc07, 0xe, 0x7, &(0x7f0000000040)="93fbc09c5dbba0e202e1a8e0d742"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:11 executing program 0: r0 = getpid() get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)}}, &(0x7f0000000180)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1000, &(0x7f00000001c0)=""/41) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) recvfrom$inet6(r6, &(0x7f00000000c0)=""/245, 0xf5, 0x1, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xac0f}, 0x1c) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r8, r1) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r11 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) fcntl$setpipe(r11, 0x407, 0x7fffffff80) 03:56:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100a}, 0x20040885) 03:56:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab7) 03:56:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:12 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801090019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12ad00b013bcdb2d09d7f4a9000030c560711e142b211dddcbdee3f63b0b23328f95db23f7abeb6a89ae9f206ea2e97599814e33b54888e164dc0686fddb1ef9a2205e2658000000000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab8) 03:56:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000002180)=0x7d, 0xffffffffffffff6e) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000080)={0x800, "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"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = dup3(r0, r1, 0x0) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r1, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000000c0)={{0x1, 0x0, @reserved="492852df96bf19df06e570c1b766e88d6284f950c4da3d481201b888f6961db9"}, 0x33, [], "9bc32a83d441ce7ba4d85e12bb7364799a96bbe6ad2e6dc31cfb99d5531c844c8d8cf8df68bbf5d56bc0beb74e1df47b200145"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06630440f3ff0000"], 0x0, 0x0, 0x0}) [ 1709.314005] binder: 12941:12944 unknown command -1342132974 [ 1709.347905] binder: 12941:12944 ioctl c0306201 20000200 returned -22 [ 1709.432727] EXT4-fs (loop2): bad geometry: block count 590136 exceeds size of device (66048 blocks) 03:56:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ptrace$poke(0x5, r5, &(0x7f0000000100), 0x1003ff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ab9) 03:56:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100b}, 0x20040885) 03:56:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aba) 03:56:12 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802090019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000002980)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) sendmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="3e18b51b7280dcc07616006865dc5dca64f33af1b5ea2320921678ba2c03da146517225457b0dd25af2fafc85351513c31fecd2f569ef57ce16d44d2e51a013d58bd2edaea762a305c09d135ad9856a64101596b4991769c22bb46b20d37a74a84e251d170b7e8e89316f066203e6269791a1cc91db782fb5fac193de168fce4256b47f82192a9dd3b38a3b093c341e6262f502abd6e49e92ffb29c2f3405cb07f0bb8785f253379a208cb55b224ef651575382767e4a169d7d10a9c2803e2640bf3c0c9f9df1a4eb25a3155348ba505dea7796698006c82a62ab69ec8bb36db68267082e7", 0xe5}, {&(0x7f0000000340)="d22a5045d661dcfa201147457b46c38ce96207f78bf12220fa4892946fcaf5d3ea34d6aa38d3e86d32e72ed3296a29ba27baf458ff0c64379878f35d09342f93958139710d767dd5b9e1b0a97d", 0x4d}, {&(0x7f00000003c0)="a130ec103974e77e1432b505b7a30a195f0823083b657b7376b2ba15b2c7998ccdbfd79e211e9ab44da78226692283ecf8bc47f67ec0046303a69bf3c1e8c12a35530e4a2b056a6d526c998b01331756ab70ecd4f7ef43b48617837d760a82e37a0e633005fe9117e6023782986c416062981d7d210ce2b953ef86b782aa1ce690df52b8ed5545a00eabaa13e2a597bfc4fb6e636fe3c3e6d7c3b59ab3a216a0af7063e04d9454e3cb219e2e18d006835c2f90dfcabf1c32926802424b84329c52c3a13fb2ce9fc2fe854bda43093521fc6e8396899c23c91b4814b52a164240c9fa3e", 0xe3}, {&(0x7f0000000540)="f675bc9168de5de60eb966a6aa77b8ba0465f98aff4ee14921b2c015233ec1c8e5054d88f92595c4cab5490d6add2cd5818447c5b19363cef425a6c7f7d6290b4aba8b2cce2c958e870fa3cd", 0x4c}], 0x4, &(0x7f0000000b80)=[{0x58, 0x10b, 0x8, "1602707773fa59d46a7a26faf2a49e0d705ae41b619c7c419b6b209bef2af6b0f9c4f043d2eef92c9c71b5f26ef3a03bdeec4c4410c95ca5d3193f6e80140f08631ba9"}, {0x80, 0x10f, 0x14, "92b0fc814672f74fbebfbb2b74c7cb64a0f76cdd3950cb6bc7e8511fbcd62c5c7f51d85321f7a38f7a7b121b4c5b9c62b9357f86f28420266f9c3d4ae061687efed4a41e185463a134b53837adb3bee4720df3060bac996b012ebddb110e944464f59afa5073c2b852d4"}, {0x88, 0x11, 0x1f, "32ee956c8c690ce6e07096f3dc105bf9a09ec2051694ce756c5850b3185004f6cf4ef67ccdd95a215e59a1de597d7130aa11787da1bafff796bf49afca98262748dfb681779be5a16c4020d8973be184ea772e8e4b2bd078c71881afa146f455d683fa55ce20255392340f0f01e8f87e386a6d"}, {0xb0, 0x11, 0x6, "c3eb652f6310f37a9b66d8a398fc012062a0caebba2b5a0d379881df3095c7030bcb717762bc112c54b775fbe3bb4c6759b2313f0e1f4e00d59c32e1af40fa603c8427f535a6607d499ee5c7ddc21cce9c03139002e0c38bc402620b85658eb4f7d705a9a8424360e24a8f5855a43709626a7a8f5c51d9f17276c5b1aae41465feda9d07179c1df6bb6410d0e54cc5e574fc0f324f2027d48eab576b120d"}, {0xa0, 0x1, 0x7, "616e117fa2794c219ce68e93f31812c4e28e8437a09a6ad997b5857da087350f0a985cdda579af56740fdee14c44b00b76e9c6eb8df2e1edba7aa34dcf7d7c164550653d91cecbbc0c24212b5707411b80b48922865ab6d7f9bf218a8324f9cf1d586033bd9bd1d5c60066e41962b87a13d27665e6aefe7297d69a23c024a681072a3c20eca1efac1e6c"}, {0x80, 0x100, 0x0, "abdc803cab2ba02a6cab9103f24390d31c8e2c47a44d4d839b08bfa0eccab3f5d041dec519c7b9dbe7697c684cbb71cd9e35620ffa69cf556868fd6ed5aa16f4f94d101442b235e55745a3f8ae49a32130fcbc6787f57e2c8192ae39421601738a1acb4bd7f81c35a2eb5e71"}, {0xe8, 0x117, 0x7, "b3aefcf599f938142df6f1af6d532c4880f99421d5eed6f122c99c953565290a783ecf75a46b070b7826475b5dcc9be742cc77b9d119185dca378281cff149b41a4210d59310e4bbbdbd8d45e61cc102f47022d4d51b76a112e3c365b33449296a330200c6b3ce14ef207c6c6569fcee49459b9ada535fb43eb686be453a541cc012524e70d15180f155a29c4236a17442ebe80fcc49571bd6167cbbde68342a630a970efabdce96791c00252cf032097cb1938e825a07c56e4cf1d1624165e4b273074176b301ce9aa16266386ddb6ce131"}, {0x58, 0x0, 0x7, "b469c673f24404a5457895e02a52612b5cf8ecaeebb3d3e210f8d828dedf36a6e9674fea881f166577227417fc993bf79ba9dfd57c5cf140557b43c76d839b28b9cfbda6d8"}, {0x110, 0x6, 0x800, "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"}, {0x1010, 0x111, 0x40, "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"}], 0x1590}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="29ba", 0x2}, {&(0x7f00000005c0)="94e11400b5b618ac64905e7e3b33668b58dd554455c63b6193dd3c6d41bca16cd30fe87490e19f97a3feb8f2778a5e189205cab8a1a0240e1a3d477637bbc6a388d61ca55dae8b8cb54fdedba610b08e4f7ca706a631e11fdf", 0x59}, {&(0x7f0000000640)="aaecb1cfd3c25cebe3e0d3a35b7676d5abc1220cc96d408136b9cbe28d4d62664674c49405c995f1ca1119537e6f229738da71e1aefe3594ca6ac975af4d7716faac24b110541ea441061c5ac640df0b723d2bf1c2be5105f52973ceed89e014f50241d1020eb61b6bc1e9750125dbdf7956c23d70ba8deb924b9622db4983a827ba12759e94a8bdc5829c678e49afeaa04b0f813aa1d00c6d36851e394fe7df6fbfdb2934f79d441f4ea34678faa5e6ee955c48b73df8259251ab8918685ba8067eec53cfe65758a218db2319e77b639dcd6bea80cbc30d7be1fb2c17ba2cd2", 0xe0}, {&(0x7f0000000740)="47b99a16ba9b9be28ee1c3b7d8ccc76718df74f8f3bf840932eb67bdda0822efbadb97ceb05d08cf979d2070299ce11429628284d33aa45f7de32b23c1f89bc47d", 0x41}, {&(0x7f00000007c0)="4cd3f73996817b783fec2b5fbaefe6d9a0c2736d6fe13437573edeee5c7949d4ecb881ef13aa6f2aeb8cc83b1149d80a47bef1657be4615932044f8354aa9bbf54b6035feb22e577aefc8973f3811189021402e425434c735555c44a37fbf7c7ddbf1f845e72597638eeaa097d2800ec44203b686e62c6df23faf6e4f0ad5cadd193a37fb383bc8770456aa10fb297d8ad4fb60e018daf4c59997da37a6564f78e9e6addf098f7cb55bc023e74552f", 0xaf}], 0x5, &(0x7f0000000900)=[{0xc8, 0x112, 0x0, "27e08019e0df80a279034e6e572e7874a9dfeeb113316ef0e3ed71a07c21fbfaf375aeaad8316ec349e6f80e6eae489831dc2377996a6374d98eb2e53d4ee8394af615b4d93c027c9c1e9b4b57b45782f0fd50ecf70554d3c9f1b0fbb2cee8900b8b364e4e0023bfc010dd68ef6d3dd9214f7b1e9aa0ce458f4fd5d83d970fd4a6c3ed279295c1f15b3604f4275c4cc2eb1df50d81e6ed38854cbe23c01d78bc170354142e56629565e4ac2fc7a5f836308b92"}, {0x30, 0x112, 0xffffffff, "d146a52e4b3c952fae42d1526026e8a6aeff62a3fa06716d3d"}, {0x28, 0x16, 0x0, "35f24f89d9348db93a1c9ff310ce77dd08fdec"}, {0x98, 0x110, 0xea6, "334eb69ffe19cf8a58730e4a81627011edff3d555aaa6896cadb06fdc5d839f2180800556149d71ef2ec77fac17d2ef08a7e3c52bc844aef3c2b7f5128cfb3fc5872f6b00653bda86e61ee8d9f6df299ab98ebcf85e7188ba1bd7862cbae5d88ff4bbb5880eb8a7c9a180057a949d5a7d2ad84ee313eefb6b9ecb7ed67f9915979fd92"}], 0x1b8}}, {{&(0x7f0000000ac0)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x1f, 0x1f, "228b1e241f410b1d4413369c40a2d6d5fc392124a5f1db8d6420b1b87a910874d6a2e47b93426d5419a65af19353b413cd06e57abdb6a76bc647535e6f5c9b", 0xa}, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)="ff13b1548d9d194ba0ddf5420cb6f9e1f74c8cd160207182d87d1c55c7f1365282d656fa9dddaf5933f948bf3cb64b57e759b5ef6458a9782a3c3181b773de45f940a274aeefb56e17ace4fe61ac34b6baffd431bfd4661edbf6947c7252d630a9cdc0f6ddb91d051317d1875dab1d3d76ca05fd423a995ec5a1d337a923ecc744357175a886ae9f427ab1cb4946ee52a6177d", 0x93}, {&(0x7f00000004c0)="05d5a044886e2ed7ce8a8c140ab06887541027738fc224e8f19beb315a61c0ebb96b0b18eacd0613c8a5", 0x2a}, {&(0x7f0000002280)="aa2511f85bfd4091863bdeb405e2d0f2acae3ad030f94bb5c9b5f6b572aad5c80d68fefe303d7e5f63619a8d472a189f73378e235e37d4b9fc80f59db6f3d44047efac30f2cae6968f17983f913ee983223aa0f9321de682238e494c29903a1edf3286091831d8e0bf4fcd62a390e7a8d36c241853779cac8c2e75e25b7e51e87ba0c013bdad1c8cba5bec00978015df96847d6692771599608ed442b9626864febe52ff878c5f", 0xa7}, {&(0x7f0000002140)="1150f0ff33253304273b7f762404d1c5b205c7a60c95e00340007197b8badb37fe84369e62275deca3482cce320430089b0272", 0x33}, {&(0x7f0000002340)="a9e9f152d4899c9cfa65dedd224734836c9ff626c202c01e27adf46dd8b377d318d922b767c9941835895f94b430d993c0aa7dbb4131a5133e0a2a0ff2f4998adf639ba1cac152c4b35b3c062e5ebff2f7ad21a2", 0x54}, {&(0x7f00000023c0)="b6504fa9b3f5b0dbded85dba0931bccd8c7fc40293d64dc09263d20dd05034d504daa24e347f3415bf7f5c5bc59f24f874e6443f01c6ba99aef58116019c5a9e2cf966aabef6f645fb75d9529ed5091f0872d381d451b71911cd069a54c9c7aaec9b64b97fffaa316a6d349dc907706d57a51688b63a06ef3ac41f30d5d705a8b4f1d46964d3c6562ec311b3806f79bee34187100aed215bfcfa39adb82aaec839724f15447e7741d6d54ca1125f", 0xae}], 0x6, &(0x7f0000002500)=[{0x20, 0x10b, 0xffffffff, "2ecb1d190f4c3c0e86ef082a6025bc"}, {0xf8, 0x115, 0x5, "a3b974165373807c099ccbc1587626d8e9a14f3c47591cfdbce3715c84f97cb50972022a096970410e4ac1f28a2ac6934368705b7f0232caf35170da3841449e270b3d9ec41626154aa79b92938da8f0cff56ab774cb69cd91c65b40b85653164f27c16dba2d8cbeeadac129ddf9b1ab9c82a617f37f463e1bba018e94f3f1e80f96b83204fdb0d5aac31b89677137c726f8610079368d1eb05d390333a34bbee92e54a40e2dd0e6edf291e5ef63b1477425ce6c4b284806afe56804be370df4ba6f299ae72907f70c254b11b6696c883f0ad79cba4d6b66463a83955e4facc49357d75a"}, {0x30, 0xff, 0x8, "f6b426d67085667dd79b8df5004c209c2c0eba153b2f87613c725ddea50d2e"}, {0xf8, 0xff, 0x6, "1835c37802c0ddacc43b11ff3be08f85eb2fc01379f8876c194b5e1beb1b5b3efadeab4426d1684c0ec7c6d50f51a5c5358b11791ecea61af815fb2417c17b7df0a962dc24f22741d9ca62b615352f0d9b73a404666ac74848afd90724085bf74e11af8d1d66e427106a8f7a543996ff09edd10b513747e9a2c4ed6f16ed0e2e6da33642e08cfb478588b85b340d4986c1f3b438dc51682380d3a8adb100d4cdf4df61d8d525f0296be0231a4f824dc5a3a4dbdecfae7d2d0439b5e502ed86ff101714981f938abb23a250d8dd370f17331033d6e84ede4f57f6fec50bf81cbaa4f8cc18"}, {0xc8, 0x209, 0x4, "8470f364e8d84ce207d0b531411f2d1e38c6b333ed33d4250f7d93e06f36c717045b230611e74cddf2ee5f9d5f26f1b64a45de8a1372993b2a8a0918f7ba9062e0ef3c16f226facb4dde9e09d38d4ce9008abeb28a11778a41f8868d7424359a18002b7b199ffd6e522dc97ee4008960e67d52bab203108e799d0698d2a218472c776a79dbeaf9576c60f35b5eac44927ce510ae028c332d142378143ec9d56d34eb177bf270d0ff771718874ff4f033a57e72a89515"}, {0xb0, 0x101, 0x3ff, "c6ee873b0dcfc98be05ea66a72c3a0663d9bf2e8e9ff9d5baad4339e0090cb52e11c04505113c42ec8914a37098b9a9c38854ba2d339c802a89789b2078cf838ce2172cce6b7ff4104c1ad47a60bc4792a628e83bf76eaffdcdb7c52d5968bc105be0b89ee219175c4ce64049417c4c9ef7bdd6c3a00117d63d1b01f6110acfe6bb4fb98d91712c517ff1944db2d8feea9515221ae5b08bf3c7caf"}], 0x3b8}}], 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r5}]}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x6, r5}, 0x14) r6 = dup3(r0, r1, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @rose, @rose, @remote, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x48) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000140)={'ipddp0\x00', {0x2, 0x4e22, @rand_addr=0x2}}) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663064000000000a79e5b43ea10dfbb6c19a0c48832c09453e45097a1bdbfb8fb585d53cebe0519c3688732c03a2504712919ad9b0230983853ac6593f2be4f0fc22285993f1a539c6f2c063d5af99bd0b45a0e5b14ca213d3e632fc24672daa93d0e477260f6c60f934b"], 0x0, 0x0, 0x0}) [ 1709.974006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1709.980592] IPv6: NLM_F_CREATE should be set when creating new route [ 1709.987201] IPv6: NLM_F_CREATE should be set when creating new route 03:56:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12abb) [ 1710.044230] binder: 12996:12997 unknown command 1074160390 [ 1710.062781] binder: 12996:12997 ioctl c0306201 20000080 returned -22 03:56:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r3, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r13 = dup(r12) syz_kvm_setup_cpu$x86(r13, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) setsockopt$inet6_MRT6_ADD_MFC(r13, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0xfffffffa, @ipv4={[], [], @multicast1}, 0x3}, {0xa, 0x4e23, 0x97a9, @local, 0x62fa}, 0x40, [0x6, 0x40, 0x1000, 0xffffffff, 0x1f, 0x7, 0x8, 0xffff8001]}, 0x5c) [ 1710.102498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1710.117171] EXT4-fs (loop2): bad geometry: block count 590392 exceeds size of device (66048 blocks) 03:56:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12abc) 03:56:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r2 = dup3(r0, r1, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100c}, 0x20040885) 03:56:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:13 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803090019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05000040"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1710.445431] QAT: Invalid ioctl 03:56:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r4) write$cgroup_int(r3, &(0x7f0000000040), 0x12) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64], 0x48) splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = dup3(r0, r1, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dJ\xa8\x00\x00\x00\x00\x00\x00r#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12abd) [ 1710.573942] binder: 13030:13032 unknown command 1073741829 [ 1710.610012] binder: 13030:13032 ioctl c0306201 20000200 returned -22 03:56:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12abe) [ 1710.724589] EXT4-fs (loop2): bad geometry: block count 590648 exceeds size of device (66048 blocks) 03:56:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x548f, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) ioctl$KDSETMODE(r6, 0x4b3a, 0x8) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = dup3(r0, r1, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21", 0x6c, 0x0, 0x0, 0x0) 03:56:13 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000a0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100d}, 0x20040885) 03:56:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x1, 0x401, 0x5d, {}, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x80, 0x800, 0x148d, 0x800}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12abf) 03:56:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) timerfd_settime(r7, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r14 = dup(r13) syz_kvm_setup_cpu$x86(r14, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$SIOCSIFMTU(r14, 0x8922, &(0x7f0000000040)={'ip6_vti0\x00', 0xfffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:56:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac0) [ 1711.193610] net_ratelimit: 24 callbacks suppressed [ 1711.193618] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.203745] protocol 88fb is buggy, dev hsr_slave_1 03:56:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffed8, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 1711.236484] EXT4-fs (loop2): bad geometry: block count 655416 exceeds size of device (66048 blocks) [ 1711.273665] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.278809] protocol 88fb is buggy, dev hsr_slave_1 03:56:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) [ 1711.353635] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.358767] protocol 88fb is buggy, dev hsr_slave_1 03:56:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac1) 03:56:14 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010a0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @multicast2}, 0xfffffffffffffdcf) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x105, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d40b2459ec4add1727ced4fa408e439a651e55ff63b1f176539ea4fb47770a2667dce5400623f1c3a1a5e9e04fca1e939e37b8532c4459ab15deb43710599c4f8532af6df8429ff680fe49d30390f4284421fea7e76e8246aa9d64631e86bbd6f5646206e70111c6d2f6e7fc806eea15ddc1415765a71c162d56f67510adac9cd86d725f61ec34c8ff8fc41977c82f613d0a26c2b7164b117bdcc8290982e6fbb53c422b4c1dfff65e1c307f6e6b299d086f42c8f31477eea1e3a14eb9", @ANYRES64=r0, @ANYRES16=r0, @ANYRES32=r1, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYPTR64], @ANYRESHEX, @ANYRES32=0x0, @ANYRES64=r5], @ANYRESOCT=r4, @ANYRES32=r0, @ANYRESOCT=r2], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r6, r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xe24e77a733e292b3, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffe2e, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) setsockopt(r6, 0x7a99, 0x7, &(0x7f0000000040)="71c6b5f0930da714e2911521214b3c308d660674ee10d911258f7e4d053c61cb4affc36a73", 0x25) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETX(r3, 0x5433, &(0x7f00000000c0)={0x4, 0x0, [0x3, 0x8, 0x4, 0x7, 0x8a], 0x8b5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000180)="800000003804000019000300e60100f76c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef8f66697dd04c2720b6a494863d82217263299cbf0be9511c6aef56e0fc35e8", 0x59, 0x400}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1711.744141] binder: 13213:13214 unknown command 0 [ 1711.785936] binder: 13213:13214 ioctl c0306201 20000200 returned -22 [ 1711.802864] EXT4-fs (loop2): bad geometry: block count 655672 exceeds size of device (66048 blocks) [ 1711.862200] EXT4-fs (loop5): unsupported inode size: 232 03:56:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100e}, 0x20040885) 03:56:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac2) 03:56:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0663044000000010"], 0x0, 0x0, 0x0}) 03:56:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x401, 0x41714a539c1742fd) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f00000000c0)={0x7c, 0x3, 0x3}) dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:14 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020a0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000180)="800000003804000019000300e60100f76c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef8f66697dd04c2720b6a494863d82217263299cbf0be9511c6aef56e0fc35e8", 0x59, 0x400}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:56:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff58, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0x7) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) dup2(r3, r2) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1712.153593] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.158764] protocol 88fb is buggy, dev hsr_slave_1 03:56:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac3) [ 1712.254858] EXT4-fs (loop2): bad geometry: block count 655928 exceeds size of device (66048 blocks) 03:56:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x100000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) dup2(r2, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1712.333834] EXT4-fs (loop5): unsupported inode size: 232 03:56:15 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030a0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac4) [ 1712.713607] protocol 88fb is buggy, dev hsr_slave_0 [ 1712.713652] protocol 88fb is buggy, dev hsr_slave_0 03:56:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x100f}, 0x20040885) 03:56:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "000110", 0x8, 0xffffff11, 0x0, @remote, @empty, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 03:56:15 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/Mever#\x00', 0x0, 0x402) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac5) [ 1712.795135] EXT4-fs (loop2): bad geometry: block count 656184 exceeds size of device (66048 blocks) 03:56:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[], 0xfdba, 0x0, 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = dup2(r2, r3) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x1, 0x600000, 0x3, 0x0, 0x10001, 0x5564bce7}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r11 = dup(r10) syz_kvm_setup_cpu$x86(r11, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$VIDIOC_ENUMSTD(r11, 0xc0485619, &(0x7f0000000100)={0x20, 0x40000, "2b480698f4991ce6a4cf9884fb18b60d795853c227bb35bc", {0x4, 0xcc4}, 0x10000}) r12 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) 03:56:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac6) 03:56:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x38, 0x0, &(0x7f0000000080)) 03:56:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7fff, 0x210000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_IIF={0x8, 0x1, r7}]}, 0x24}}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r7) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1713.024579] binder: 13406:13407 unknown command 0 [ 1713.073818] binder: 13406:13407 ioctl c0306201 20000200 returned -22 03:56:16 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000b0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:16 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x2a, 0x0, &(0x7f0000000080)) [ 1713.202189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.208873] IPv6: NLM_F_CREATE should be set when creating new route [ 1713.215442] IPv6: NLM_F_CREATE should be set when creating new route 03:56:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac7) 03:56:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x1010}, 0x20040885) 03:56:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000040)=0x1f, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:16 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x2e, 0x0, &(0x7f0000000080)) 03:56:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac8) [ 1713.444921] EXT4-fs (loop2): bad geometry: block count 720952 exceeds size of device (66048 blocks) 03:56:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x1, 0x8}) 03:56:16 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000380)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000440)='\x00', 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) accept4$llc(r1, 0x0, &(0x7f0000000140), 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x4, {0x0, 0x63, 0xde, 0x0, 0x0, 0x7}, 0x2d4}, 0xe) 03:56:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630442"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x18, 0x14, 0x17, 0xf, 0xb, 0xfff, 0x5, 0x42, 0x1}}) 03:56:16 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010b0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:16 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 03:56:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ac9) [ 1713.788085] binder: 13571:13574 unknown command 1107583749 [ 1713.810809] binder: 13571:13574 ioctl c0306201 20000200 returned -22 03:56:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sysfs$1(0x1, &(0x7f0000000180)='+\\!\x00') r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r3, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYBLOB="f74206fbfca63e74e69991176351674c3b445d6a28e3f12955fd992d3f6474f36d", @ANYBLOB, @ANYRES16=r0], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYRES16]], @ANYRESHEX=r4, @ANYRES16=r2, @ANYRESOCT=r5, @ANYRESOCT=r4, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYRES32=r7, @ANYRES64=r1], @ANYRESHEX=r8], 0x324, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) dup(r9) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="066304400000f84b"], 0x0, 0x0, 0x0}) [ 1714.047802] EXT4-fs (loop2): bad geometry: block count 721208 exceeds size of device (66048 blocks) 03:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4857, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2000}, 0x20040885) 03:56:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12aca) 03:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xb, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0xfffffffffffffc8e, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd605de0f600071100fe80000000000000000000ffff000000000420880b000000000000080000000900000000000000000010000000010000000000edff070022eb00000000200000000200000000000000000000000800655800000000"], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) dup2(r6, r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="abef75185b5641d6a6f37686d1ea8f9995fd7948e6d98337ffd7f5e77b5cd22ae43f18c3e43adc88547273969559933ece60ce37088db6358d80627ad4dafe8e188e4e9806027bc95b185754000091f1fd4f2394b34dd1f5f1588078beafe27ee3ac568921908aa38deacd2efbc07b13188486e32320703a7c3d42adab5af649210c78887c882b7bcca1ac29abe9"], 0x0, 0x0, 0x0}) 03:56:17 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020b0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1714.349482] binder: 13707:13720 unknown command 410382251 [ 1714.393389] binder: 13707:13720 ioctl c0306201 20000080 returned -22 03:56:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12acb) 03:56:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='vegas\x00', 0x6) sendto$inet(r1, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) 03:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0663044020000000"], 0x0, 0x0, 0x0}) 03:56:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563040f"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400a00) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12acc) [ 1714.667010] EXT4-fs (loop2): bad geometry: block count 721464 exceeds size of device (66048 blocks) [ 1714.713276] binder: 13836:13838 unknown command 251945733 [ 1714.743648] binder: 13836:13838 ioctl c0306201 20000200 returned -22 03:56:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2001}, 0x20040885) 03:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000140)={0xc7, 0x3, {0x0, 0x3, 0x7648ea04, 0x0, 0x3f}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000000000cc057f722f06bc76b40c3483344a58deb767a6e97da5005a24e29933b670f24c0112a2f2bbe34be08f8a3669c98d239b8599fe69173b0f00d44085ac281cbe71a785e08ac7f26fcc6f9d7eb30a2b87b390d958a4b2bcb3ed42aafe953b442da8934111cd1b"], 0x0, 0x0, 0x0}) 03:56:17 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030b0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101401, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x4, 0x40, &(0x7f0000ffd000/0x3000)=nil, 0x4d0e}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1b, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRES16], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0x130, 0x130, 0x280, 0x280, 0x280, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast2, @mcast1, [0x1fffffffe, 0xffffffff, 0xffffff00, 0x100ffff01], [0x0, 0xff, 0x0, 0xffffffff], 'veth0_to_bridge\x00', 'hsr0\x00', {}, {0xff}, 0x87, 0x9, 0x9, 0x1}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@broadcast}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xde, 0x7f, 0x3}, {0x4, 0xef, 0x9}, {0x2, 0x54, 0x2}, 0x5, 0x8}}}, {{@uncond, 0x0, 0x110, 0x150, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x6, 0x4, 0x0, [0x5, 0x400, 0x5, 0xff81, 0x1000, 0x5, 0x66, 0x1000, 0x1, 0x4, 0x0, 0x8, 0x3, 0x1933, 0xfc0, 0x6d60], 0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x4, "e281796202fde4ecdebf931648aa3dd2de0403ccda3b1e5c93921125b52b"}}}, {{@ipv6={@loopback, @ipv4={[], [], @remote}, [0xff000000, 0xffffff00, 0x0, 0xff], [0xff, 0xffffff00, 0xffffffff], 'nr0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x57, 0x0, 0x20}, 0x0, 0x228, 0x268, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x4, 0x5, 0x4, 0x8001, 0x1, 0x4, [@mcast2, @local, @local, @local, @loopback, @empty, @mcast1, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0xb}, @remote, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @mcast2, @rand_addr="a9c3b0b8d4262efc7ba037528d8fad30"], 0xb}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x2, "78d0f5f932a9111e632adee9c3eb521ff6e0b1431457c0007c85c9013419"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syncfs(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x15d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="99810000000000001de6"], 0x0, 0x0, 0x0}) 03:56:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12acd) [ 1715.094689] binder: 13924:13944 unknown command 33177 [ 1715.139787] binder: 13924:13944 ioctl c0306201 20000080 returned -22 [ 1715.191384] EXT4-fs (loop2): bad geometry: block count 721720 exceeds size of device (66048 blocks) 03:56:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0x6, {0x90db, 0x1, 0x2, 0x4eaf}, {0x1, 0x3, 0x1, 0xfff}, {0x400, 0xe4bd}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ace) 03:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r6, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r6, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r8, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r8, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r9, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r9, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r10, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r10, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r10, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r12 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r12, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 03:56:18 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x2b, 0x0, &(0x7f0000000080)) 03:56:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2002}, 0x20040885) 03:56:18 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000c0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:56:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12acf) 03:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56545b1c8bc17c6247f000c9f36e9e027110eebeff97b69de84a0ddf624ef54e52766992fec9bbdd149c3d207c9e31413326330477a362a07f6541c886dc12a8d84a1ae7639537249d"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1715.893974] binder: 14002:14004 unknown command 475747414 [ 1715.914669] binder: 14002:14004 ioctl c0306201 20000200 returned -22 03:56:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="17b49182ce2d999600a83df59b05175ea3b125efbb382fc55f4008bda71096843039f8d20de709dc8449402201844d1885d58e1af76be38d230be61ef154f2ef85edd4a0017253c737c45d908cea9299bb411ccd03636b33542e0417b73d14503730b57312d2153ec18bdaeecc60b94bd5359b153624f62041e851c97db19bfaf502d59b8e50d1180d1d5c3a67"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x212600, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000440)={{0x3, 0x7f}, 'port1\x00', 0x4, 0x40, 0x8, 0x3e38a738, 0xa13, 0x8, 0x0, 0x0, 0x6, 0x1f}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$EVIOCSABS0(r12, 0x401845c0, &(0x7f00000001c0)={0xfffffc00, 0x10000, 0x20000, 0x10000, 0x2, 0x2ee}) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$EVIOCGABS3F(r10, 0x8018457f, &(0x7f0000000340)=""/206) r13 = socket$inet_udp(0x2, 0x2, 0x0) membarrier(0x20, 0x0) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x100, 0x2, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000006"], 0x0, 0x0, 0x0}) 03:56:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad0) 03:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x5}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00'/16], @ANYBLOB="0100"/24], 0x48}, 0x0) dup2(r2, r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x20000, 0x0) r5 = getpid() rt_tgsigqueueinfo(0x0, r5, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r5) write$FUSE_LK(r4, &(0x7f0000000140)={0x28, 0xfffffffffffffff5, 0x8, {{0x6, 0x6, 0xb42a5bda798eb94f, r5}}}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x2d, 0x0, &(0x7f0000000080)) [ 1716.158223] EXT4-fs (loop2): bad geometry: block count 786488 exceeds size of device (66048 blocks) [ 1716.168481] binder: 14119:14123 unknown command -2104380393 [ 1716.200250] binder: 14119:14123 ioctl c0306201 20000200 returned -22 [ 1716.244903] binder: 14126:14130 unknown command 3 [ 1716.270762] binder: 14126:14130 ioctl c0306201 20000200 returned -22 [ 1716.313620] net_ratelimit: 23 callbacks suppressed [ 1716.313627] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.323823] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.341832] binder: 14119:14123 unknown command 0 03:56:19 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010c0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:19 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x5421, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sysfs$2(0x2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x68}}, 0x0) [ 1716.360347] binder: 14119:14123 ioctl c0306201 20000080 returned -22 03:56:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad1) 03:56:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2003}, 0x20040885) 03:56:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0xfffffffffffffd50, 0x0, 0x0}) 03:56:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[@dead_binder_done, @clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fd, @fda={0x66646185, 0x8, 0x1, 0x10}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @exit_looper], 0x12, 0x0, 0x0}) 03:56:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad2) [ 1716.691343] binder: 14248:14253 ioctl c0306201 20000080 returned -14 [ 1716.775401] EXT4-fs (loop2): bad geometry: block count 786744 exceeds size of device (66048 blocks) [ 1716.873603] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.873619] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.878729] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.883758] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.955372] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.962099] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.996987] batman_adv: Cannot find parent device 03:56:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioperm(0xd17, 0x9, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7fffffff, 0x14000) write$P9_RLERROR(r5, &(0x7f00000000c0)={0x16, 0x7, 0x2, {0xd, '/dev/binder#\x00'}}, 0x16) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r6, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r6, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) accept4$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xf4, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 03:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:56:20 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020c0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:20 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x80005) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffd, 0x0) 03:56:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad3) [ 1717.290737] binder: 14372:14373 unknown command 0 03:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1717.321738] binder: 14372:14373 ioctl c0306201 20000080 returned -22 03:56:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2004}, 0x20040885) 03:56:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) [ 1717.433609] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.438778] protocol 88fb is buggy, dev hsr_slave_1 03:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r2, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x69, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB="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"], @ANYRESDEC=r1, @ANYRESHEX=r2]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000000000ff6c2c49f6c84fe3c84827f38fe814f4b4ecf21e7cf5456b3d1ca1f2f7b75c4d6100000000000000000000d03d37e50534766def66c3529b0a627a45edb71dd5fa289165c40513a9a4bbe69a674c1e9cab317a4d3c18210467255555a3fa259078d805a0d178408a0b4131351929f415beaec51b573b78b40072da796721"], 0x0, 0x0, 0x0}) 03:56:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad4) 03:56:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x12, 0x0, &(0x7f0000000080)) 03:56:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0xa042) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dbfaec70841e61ae9876c74e32e6be0233bf1722775f5596d5f7f42e7bfc0e5ece591751067f841d8a2c4c2d79d79c80ada33b9f4d99c39c08eb2691a36dd33f", "3b8eaf6c207746594b9548e113bc954eb5ca30fec0d6770cda180e67397be20141ab6626f621b259ed57a840719c7c04f320aae8ea16919d73f64dbe380616b7", "7a35901cdde4dd08d629cf910ab0f50b75b8dbcd9c759c607b3667270d7cc78e"}) [ 1717.639786] EXT4-fs (loop2): bad geometry: block count 787000 exceeds size of device (66048 blocks) [ 1717.771364] binder: 14407:14410 unknown command 926363952 [ 1717.799430] binder: 14407:14410 ioctl c0306201 20000200 returned -22 03:56:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 03:56:20 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030c0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad5) 03:56:20 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x31, 0x0, &(0x7f0000000080)) 03:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffff0b, 0x0, 0x0}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r11}}, 0x18) 03:56:21 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) [ 1718.201470] binder: 14536:14540 unknown command 0 [ 1718.211537] EXT4-fs (loop2): bad geometry: block count 787256 exceeds size of device (66048 blocks) 03:56:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad6) 03:56:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2005}, 0x20040885) 03:56:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x70f000) [ 1718.253685] binder: 14536:14540 ioctl c0306201 20000200 returned -22 03:56:21 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000100)=@l2, &(0x7f0000000080)=0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x200]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:21 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000d0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 03:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630443"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="f7ffffff00000000"], 0x0, 0x0, 0x0}) 03:56:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad7) [ 1718.553929] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x4000004a [ 1718.583705] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x4000001f [ 1718.620855] binder: 14669:14672 unknown command 1124360965 [ 1718.633944] binder: 14669:14672 ioctl c0306201 20000200 returned -22 [ 1718.644108] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000033 [ 1718.670543] binder: 14669:14672 unknown command -9 [ 1718.689791] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000024 [ 1718.690878] binder: 14669:14672 ioctl c0306201 20000080 returned -22 03:56:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad8) [ 1718.724089] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000004 [ 1718.748203] EXT4-fs (loop2): bad geometry: block count 852024 exceeds size of device (66048 blocks) [ 1718.765052] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x4000004b 03:56:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000200)={{0xff, 0x2}}) 03:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101001) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f00000000c0)=0x10000, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=0x6a00000, 0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 1718.805537] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000054 03:56:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2006}, 0x20040885) 03:56:21 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010d0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1718.976193] binder: 14692:14695 unknown command 0 [ 1718.990622] binder: 14692:14695 ioctl c0306201 20000200 returned -22 [ 1718.994811] kvm [14661]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x4000004a 03:56:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) 03:56:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ad9) 03:56:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) 03:56:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getgroups(0x1, &(0x7f0000000e00)=[0xffffffffffffffff]) fchownat(r0, &(0x7f0000000d00)='./file0\x00', 0x0, r1, 0x0) lstat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)) 03:56:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ada) 03:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r10 = dup(r9) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x2a50, 0x12, 0xffffffff, 0x3, 0x4}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r5, 0xa175, 0x20, 0x2, 0x400, 0x1ff, 0x80, 0xffffffff, {r11, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x800, 0x3, 0x4, 0x5}}, &(0x7f0000000180)=0xb0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r12, r0) r13 = socket$inet_udp(0x2, 0x2, 0x0) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) r18 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r19 = dup(r18) syz_kvm_setup_cpu$x86(r19, r17, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29b) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r14, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0xfffffbff, 0x100, "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", 0x6, 0xf4, 0x7f, 0xff, 0x3, 0x80, 0x0, 0x1}, r20}}, 0x120) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1719.349300] EXT4-fs (loop2): bad geometry: block count 852280 exceeds size of device (66048 blocks) 03:56:22 executing program 4: syz_emit_ethernet(0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="f7ffbddbbee85aa8fcf6bcae82bf24657c3e81875e32a57ab32f02000006"], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000700)={0x401, 0x0, 0x200f, 0x7, 0xa5a, 0xc71, 0x8001}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a00"/88, 0x58}], 0x1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) fcntl$dupfd(r1, 0x406, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x8) socket$netlink(0x10, 0x3, 0xb) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r5, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x800000000000}, 0x10) 03:56:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2007}, 0x20040885) 03:56:22 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020d0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12adb) [ 1719.633724] audit: type=1326 audit(2000001382.490:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14714 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd7a code=0x0 03:56:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @rand_addr="f68e3d4037bd008e535cb1cc740acbbb"}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="1c3ce09fcef11a272ea8f9ebf25f2fb5dbf6143b2086662f906a19e1872bcc4e53", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="409e0dd68f4d8b960c9cc2fb8abaaf47fceca9ec53c81b8c76b4f3f1", 0x1c}, {&(0x7f0000000840)="085ccc93e7a266ae388d9c7cf7403ef7ebd628fbbb060193c33e7a8f9735bc0a603a6fa6278fb9eb5be796f2e1e1941eea5ba221f2f0996032fdd480970fe38063178199b29b860adb1622409e2f472e2c96b58a4d1a84d8a210bf5b6bc90317", 0x60}, {&(0x7f00000008c0)="1a8810aae8e69e63f41af8c00756c40065dada6a6787a4f8716ea11100c1ff16c55fe191a729276a53f23666e3d538954a38e9bdeb934936b9ef8e7ec35f7b2b21dd2b350b27b21054260354ad21d1af3e3507fa7597f78d9d9f79434f1c73b89ef0", 0x62}, {&(0x7f0000000940)="e407bae20f78bb4f25ae9a43b16ee97bb02497fa3cdf9efea7b06bb0e57d1e7e9828019ad06f01c320e881abbf70a599fe4be3ba69f30bc6781e6da59fefb78fea2c0ed6ecab31a2dbf40e3eb2bda249f52eb0234dca05f2d2ede66ab6e9deed44700cad93098282d7294175017f113706c3950bd0be342528", 0x79}], 0x4, &(0x7f0000000d80)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc00}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x1a}}}}], 0x70}}], 0x2, 0x0) 03:56:22 executing program 4: syz_emit_ethernet(0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="f7ffbddbbee85aa8fcf6bcae82bf24657c3e81875e32a57ab32f02000006"], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000700)={0x401, 0x0, 0x200f, 0x7, 0xa5a, 0xc71, 0x8001}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a00"/88, 0x58}], 0x1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) fcntl$dupfd(r1, 0x406, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x8) socket$netlink(0x10, 0x3, 0xb) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r5, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x800000000000}, 0x10) 03:56:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12adc) 03:56:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) [ 1720.004048] EXT4-fs (loop2): bad geometry: block count 852536 exceeds size of device (66048 blocks) 03:56:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x8) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90}, 0x90) 03:56:23 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mlock(&(0x7f0000836000/0x1000)=nil, 0x1000) 03:56:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2008}, 0x20040885) 03:56:23 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x3d, 0x0, &(0x7f0000000080)) 03:56:23 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev, 0x0, r1}) 03:56:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x2009}, 0x20040885) 03:56:23 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030d0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:23 executing program 4: setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000003c0)="5557c6a29058ca6f6ff12ce09b9a4de0e55f6078c9275d1f15e3fcc720dd538c9025b01696b5edaf0808f03568f0d7e00729fbd038f9f3b6a310c423e4dc019a71c5d694630a8557b6d2fe9eddb4c85289f18f1d", 0x54) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 03:56:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(twofish)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) 03:56:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12add) 03:56:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200a}, 0x20040885) 03:56:24 executing program 4: r0 = socket(0x22, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001180)="f0784847", 0x4}], 0x1) 03:56:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ade) [ 1721.139672] EXT4-fs (loop2): bad geometry: block count 852792 exceeds size of device (66048 blocks) 03:56:24 executing program 0: r0 = socket(0x22, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000240)=[{&(0x7f0000000040)=""/221, 0x29f}], 0x60, 0x0, 0x5b}, 0x0) 03:56:24 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000008980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002640), 0x3}}], 0x287, 0x0) 03:56:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x0) 03:56:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1}}, 0x4c88a) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="a4"], 0x1) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 03:56:24 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) [ 1721.563835] md: superblock version 32 not known [ 1721.568998] md: couldn't set array info. -22 [ 1721.593650] net_ratelimit: 25 callbacks suppressed [ 1721.593657] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.603834] protocol 88fb is buggy, dev hsr_slave_1 [ 1721.673590] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.678719] protocol 88fb is buggy, dev hsr_slave_1 03:56:24 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000e0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x400c630f}], 0x0, 0x0, 0x0}) 03:56:24 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12adf) [ 1721.753645] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.758821] protocol 88fb is buggy, dev hsr_slave_1 [ 1721.784006] md: superblock version 32 not known [ 1721.840576] md: couldn't set array info. -22 03:56:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200b}, 0x20040885) 03:56:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0x10) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000100)=0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae0) 03:56:24 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) [ 1722.078599] kvm [15173]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x4000004e [ 1722.097031] kvm [15173]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000064 [ 1722.112190] md: superblock version 32 not known [ 1722.128304] md: couldn't set array info. -22 03:56:25 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) [ 1722.180745] EXT4-fs (loop2): bad geometry: block count 917560 exceeds size of device (66048 blocks) 03:56:25 executing program 4: [ 1722.329989] md: superblock version 32 not known [ 1722.352479] md: couldn't set array info. -22 03:56:25 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:25 executing program 4: [ 1722.553640] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.558776] protocol 88fb is buggy, dev hsr_slave_1 03:56:25 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010e0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001b2, 0xea05) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x0, 0x3}) 03:56:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) setsockopt(r0, 0x1, 0x24, &(0x7f0000000180), 0x1000001cd) 03:56:25 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae1) 03:56:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200c}, 0x20040885) 03:56:25 executing program 5: ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae2) 03:56:25 executing program 5: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) [ 1723.113602] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.113644] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.147826] EXT4-fs (loop2): bad geometry: block count 917816 exceeds size of device (66048 blocks) 03:56:26 executing program 0: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) sched_yield() 03:56:26 executing program 5: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200d}, 0x20040885) 03:56:26 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020e0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:26 executing program 5: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) [ 1723.801673] EXT4-fs (loop2): bad geometry: block count 918072 exceeds size of device (66048 blocks) 03:56:26 executing program 4: 03:56:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0x18, 0x29, 0x4}}], 0x18}}], 0x1, 0x0) 03:56:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae3) 03:56:26 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200e}, 0x20040885) 03:56:26 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae4) 03:56:27 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030e0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:27 executing program 4: 03:56:27 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x40480923, &(0x7f0000000000)={0x20, 0x0, 0xffffff2c, 0x0}) 03:56:27 executing program 4: 03:56:27 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 03:56:27 executing program 4: [ 1724.422579] EXT4-fs (loop2): bad geometry: block count 918328 exceeds size of device (66048 blocks) 03:56:27 executing program 0: 03:56:27 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 03:56:27 executing program 4: 03:56:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x200f}, 0x20040885) 03:56:27 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 03:56:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x12ae5) 03:56:27 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038000f0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:27 executing program 4: 03:56:27 executing program 0: 03:56:27 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x0, 0x0, 0xffffff2c, 0x0}) 03:56:27 executing program 0: 03:56:27 executing program 4: 03:56:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x34000) 03:56:28 executing program 0: 03:56:28 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x0, 0x0, 0xffffff2c, 0x0}) [ 1725.417225] EXT4-fs (loop2): bad geometry: block count 983096 exceeds size of device (66048 blocks) 03:56:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3000}, 0x20040885) 03:56:28 executing program 4: 03:56:28 executing program 0: 03:56:28 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000000)={0x0, 0x0, 0xffffff2c, 0x0}) 03:56:28 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038010f0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:28 executing program 4: 03:56:28 executing program 0: 03:56:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x40000) 03:56:28 executing program 5: 03:56:28 executing program 4: 03:56:28 executing program 0: 03:56:28 executing program 5: [ 1726.061270] EXT4-fs (loop2): bad geometry: block count 983352 exceeds size of device (66048 blocks) 03:56:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3001}, 0x20040885) 03:56:29 executing program 4: 03:56:29 executing program 0: 03:56:29 executing program 5: 03:56:29 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038020f0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:56:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1fffff) 03:56:29 executing program 4: 03:56:29 executing program 0: 03:56:29 executing program 5: 03:56:29 executing program 4: 03:56:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x200000) 03:56:29 executing program 0: [ 1726.713595] net_ratelimit: 24 callbacks suppressed [ 1726.713602] protocol 88fb is buggy, dev hsr_slave_0 [ 1726.723913] protocol 88fb is buggy, dev hsr_slave_1 [ 1726.943392] EXT4-fs (loop2): bad geometry: block count 983608 exceeds size of device (66048 blocks) 03:56:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3002}, 0x20040885) 03:56:30 executing program 5: 03:56:30 executing program 4: 03:56:30 executing program 0: 03:56:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x400300) 03:56:30 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038030f0019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1727.273604] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.273642] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.278702] protocol 88fb is buggy, dev hsr_slave_1 03:56:30 executing program 0: 03:56:30 executing program 5: [ 1727.353681] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.358801] protocol 88fb is buggy, dev hsr_slave_1 03:56:30 executing program 4: 03:56:30 executing program 0: 03:56:30 executing program 5: 03:56:30 executing program 4: [ 1727.659362] EXT4-fs (loop2): bad geometry: block count 983864 exceeds size of device (66048 blocks) [ 1727.833613] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.838744] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.913606] protocol 88fb is buggy, dev hsr_slave_0 03:56:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3003}, 0x20040885) 03:56:30 executing program 0: 03:56:30 executing program 5: 03:56:30 executing program 4: [ 1728.945607] device bridge_slave_1 left promiscuous mode [ 1728.951305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.014550] device bridge_slave_0 left promiscuous mode [ 1729.020132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.993627] net_ratelimit: 21 callbacks suppressed [ 1731.993637] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.003749] protocol 88fb is buggy, dev hsr_slave_1 [ 1732.153632] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.158744] protocol 88fb is buggy, dev hsr_slave_1 [ 1732.953621] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.959289] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.513603] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.513640] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.518731] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.593674] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.113604] net_ratelimit: 17 callbacks suppressed [ 1737.113611] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.118717] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.673626] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.678741] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.683646] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.688819] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.763639] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.768918] protocol 88fb is buggy, dev hsr_slave_1 [ 1738.233652] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.238800] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.393624] net_ratelimit: 22 callbacks suppressed [ 1742.393632] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.403783] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.553672] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.558811] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.353653] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.358941] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.913603] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.913607] protocol 88fb is buggy, dev hsr_slave_0 [ 1743.913655] protocol 88fb is buggy, dev hsr_slave_1 [ 1743.918927] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.513671] net_ratelimit: 18 callbacks suppressed [ 1747.513681] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.524070] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.073609] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.078893] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.083619] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.089004] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.153628] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.158811] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.633715] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.638859] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.793668] net_ratelimit: 21 callbacks suppressed [ 1752.793674] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.803907] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.953650] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.958802] protocol 88fb is buggy, dev hsr_slave_1 [ 1753.753743] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.758965] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.313621] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.313626] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.313693] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.318826] protocol 88fb is buggy, dev hsr_slave_1 [ 1757.913666] net_ratelimit: 17 callbacks suppressed [ 1757.913675] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.918731] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.473667] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.473672] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.473749] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.478794] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.553675] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.558806] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.033696] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.038833] protocol 88fb is buggy, dev hsr_slave_1 [ 1763.203708] net_ratelimit: 22 callbacks suppressed [ 1763.203718] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.214310] protocol 88fb is buggy, dev hsr_slave_1 [ 1763.353716] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.358836] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.153628] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.158847] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.713664] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.713669] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.713725] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.718764] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.313676] net_ratelimit: 18 callbacks suppressed [ 1768.313683] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.323875] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.873626] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.873631] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.873685] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.878738] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.953660] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.958799] protocol 88fb is buggy, dev hsr_slave_1 [ 1769.443624] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.448753] protocol 88fb is buggy, dev hsr_slave_1 [ 1773.603722] net_ratelimit: 22 callbacks suppressed [ 1773.603731] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.613876] protocol 88fb is buggy, dev hsr_slave_1 [ 1773.753634] protocol 88fb is buggy, dev hsr_slave_0 [ 1773.758739] protocol 88fb is buggy, dev hsr_slave_1 [ 1774.553718] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.558832] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.113627] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.113632] protocol 88fb is buggy, dev hsr_slave_0 [ 1775.113683] protocol 88fb is buggy, dev hsr_slave_1 [ 1775.119930] protocol 88fb is buggy, dev hsr_slave_1 [ 1778.723657] net_ratelimit: 18 callbacks suppressed [ 1778.723666] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.733756] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.273657] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.273679] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.278775] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.283809] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.353713] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.358938] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.833649] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.838866] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.993693] net_ratelimit: 22 callbacks suppressed [ 1783.993700] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.003796] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.153654] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.158864] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.953625] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.958712] protocol 88fb is buggy, dev hsr_slave_1 [ 1785.513644] protocol 88fb is buggy, dev hsr_slave_0 [ 1785.513649] protocol 88fb is buggy, dev hsr_slave_0 [ 1785.513715] protocol 88fb is buggy, dev hsr_slave_1 [ 1785.518750] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.113603] net_ratelimit: 18 callbacks suppressed [ 1789.113610] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.123660] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.673629] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.673675] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.678765] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.753647] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.758754] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.243703] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.249005] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.393688] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.393654] net_ratelimit: 21 callbacks suppressed [ 1794.393660] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.403781] protocol 88fb is buggy, dev hsr_slave_1 [ 1794.553659] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.558746] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.353654] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.359719] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.913671] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.913676] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.913729] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.918772] protocol 88fb is buggy, dev hsr_slave_1 [ 1799.513671] net_ratelimit: 18 callbacks suppressed [ 1799.513677] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.523853] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.073611] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.073616] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.073667] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.078703] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.153684] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.158838] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.633756] protocol 88fb is buggy, dev hsr_slave_0 [ 1800.639023] protocol 88fb is buggy, dev hsr_slave_1 [ 1804.803638] net_ratelimit: 21 callbacks suppressed [ 1804.803646] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.813930] protocol 88fb is buggy, dev hsr_slave_1 [ 1804.963663] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.968784] protocol 88fb is buggy, dev hsr_slave_1 [ 1805.753630] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.758802] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.313637] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.318775] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.323620] protocol 88fb is buggy, dev hsr_slave_0 [ 1806.328993] protocol 88fb is buggy, dev hsr_slave_1 [ 1808.346260] device hsr_slave_1 left promiscuous mode [ 1808.389769] device hsr_slave_0 left promiscuous mode [ 1808.447734] team0 (unregistering): Port device team_slave_1 removed [ 1808.464148] team0 (unregistering): Port device team_slave_0 removed [ 1808.476773] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1808.529165] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1808.644856] bond0 (unregistering): Released all slaves 03:57:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf0ffff) 03:57:51 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801100019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:57:51 executing program 5: 03:57:51 executing program 4: 03:57:51 executing program 0: 03:57:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3004}, 0x20040885) 03:57:52 executing program 5: 03:57:52 executing program 4: 03:57:52 executing program 0: 03:57:52 executing program 4: 03:57:52 executing program 0: 03:57:52 executing program 5: [ 1809.913604] net_ratelimit: 18 callbacks suppressed [ 1809.913613] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.924475] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.473603] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.473613] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.473658] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.479173] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.553596] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.558881] protocol 88fb is buggy, dev hsr_slave_1 [ 1811.033635] protocol 88fb is buggy, dev hsr_slave_0 [ 1811.038946] protocol 88fb is buggy, dev hsr_slave_1 [ 1811.220164] audit: type=1400 audit(2000001474.080:304): avc: denied { map } for pid=15932 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14976 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 1811.290986] IPVS: ftp: loaded support on port[0] = 21 [ 1811.390095] chnl_net:caif_netlink_parms(): no params data found [ 1811.429797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.436419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.445445] device bridge_slave_0 entered promiscuous mode [ 1811.453886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.460408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.469299] device bridge_slave_1 entered promiscuous mode [ 1811.493774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1811.505896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1811.528583] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1811.537778] team0: Port device team_slave_0 added [ 1811.545469] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1811.554674] team0: Port device team_slave_1 added [ 1811.560915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1811.570582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1811.638018] device hsr_slave_0 entered promiscuous mode [ 1811.709846] device hsr_slave_1 entered promiscuous mode [ 1811.765161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1811.773329] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1811.794260] IPVS: ftp: loaded support on port[0] = 21 [ 1811.798991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.805966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.812851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.819378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.931170] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1811.938249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.989586] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1812.010263] chnl_net:caif_netlink_parms(): no params data found [ 1812.031967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1812.047246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.058575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.067405] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1812.096864] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1812.103036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.118947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.125572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.135586] device bridge_slave_0 entered promiscuous mode [ 1812.143562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.150047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.159351] device bridge_slave_1 entered promiscuous mode [ 1812.185142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1812.192912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.199484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.207432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1812.215725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.222191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.247652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1812.256508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1812.268176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1812.286661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1812.296594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1812.310694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1812.324495] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1812.331403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1812.342820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1812.352309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1812.378628] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1812.402234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1812.410671] team0: Port device team_slave_0 added [ 1812.463144] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1812.473289] team0: Port device team_slave_1 added [ 1812.503378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.519089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1812.532414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1812.637911] device hsr_slave_0 entered promiscuous mode [ 1812.676045] device hsr_slave_1 entered promiscuous mode [ 1812.716438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1812.725721] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1812.760271] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1812.879241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.890905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1812.915240] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1812.928973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1812.951415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1812.972814] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1812.993101] EXT4-fs (loop2): bad geometry: block count 1048888 exceeds size of device (66048 blocks) [ 1813.008598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.031492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1813.039885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1813.072366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1813.083358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.089919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.112034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1813.127746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1813.171439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1813.181312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1813.200202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.206809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.239566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1813.254924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1813.271048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1813.298093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1813.335460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1813.343735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1813.352774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1813.369475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1813.377973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1813.386737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1813.396119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1813.420066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1813.428799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1813.450198] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1813.457842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1813.489061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1813.521219] 8021q: adding VLAN 0 to HW filter on device batadv0 03:57:56 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0044dff, &(0x7f00000001c0)=0x3) 03:57:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x1000000) 03:57:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/120, 0x78}}], 0x1, 0x0, 0x0) 03:57:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6664a8990785363940aed12f", 0x3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:57:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3005}, 0x20040885) 03:57:56 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802100019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:57:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2289, 0x0) 03:57:56 executing program 0: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) getpgrp(0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x0, @remote}, 0x10) 03:57:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1813.974494] device lo entered promiscuous mode 03:57:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x2000000) [ 1814.009577] EXT4-fs (loop2): bad geometry: block count 1049144 exceeds size of device (66048 blocks) [ 1814.017808] device lo left promiscuous mode 03:57:56 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$char_usb(r1, &(0x7f0000000100)="97d989eae3acc2", 0x7) 03:57:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r0, 0x4, 0x80) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 03:57:57 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803100019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1814.296021] audit: type=1804 audit(2000001477.160:305): pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/" dev="sda1" ino=2333 res=1 03:57:57 executing program 0: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 03:57:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20e0000) 03:57:57 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) llistxattr(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffd934aa54cd77b6dd1f1fbfe3334bfc170f9c5b726f13012f66b00000ae718d5c00ffffffff"], 0x1d) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) rt_sigsuspend(&(0x7f0000000140)={0x1ff}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) [ 1814.402383] audit: type=1804 audit(2000001477.180:306): pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/" dev="sda1" ino=2333 res=1 03:57:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3006}, 0x20040885) 03:57:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x1a4}}, 0x0) [ 1814.579375] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.4'. 03:57:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)) 03:57:57 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0044dff, 0x0) [ 1814.748542] EXT4-fs (loop2): bad geometry: block count 1049400 exceeds size of device (66048 blocks) 03:57:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x3000000) [ 1814.805806] sock: process `syz-executor.0' is using obsolete getsockopt SO_BSDCOMPAT 03:57:57 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800110019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:57:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) read$alg(r0, &(0x7f0000000480)=""/4096, 0x1000) 03:57:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4000000) 03:57:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2283, 0x0) [ 1815.203853] net_ratelimit: 40 callbacks suppressed [ 1815.203861] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.214029] protocol 88fb is buggy, dev hsr_slave_1 03:57:58 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200), 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) accept(r1, 0x0, &(0x7f0000001c00)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3eb1ec092471e83144e4a3288abe73140dfbe3eff8f2e93f736d9dd55", 0x54}, {&(0x7f0000000580)="c48f0032207820831bf53ab5c35723d409d0a6cbe1e3b4fbdf3f23d884ea651ed425e935647f8b84851afad79f1e6359f54808dd4e20efd4b90112fd692c9b650964b671cdcea4b8b1859b896e2dad7a98dc2e40728787fedd23c000397df4c79749a2fb93beff0963be63df2a286201ae5a51a5243e1b6175e2659b4984210358cdc89524ec1fd1bc5e17858f5f485d56de4e0f690609012a5a0f68c184814575e53af720fffa1b39aaa33a00ea1a6eb0af57cd5bad2b10cc6b32cf864727e784dbacc37509aad5156d382c250a58f7", 0xd0}, {0x0}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7f", 0xb7}, {&(0x7f0000000340)}, {&(0x7f0000000500)="e2aba58ddeba1c90d39050709a9558c8f1af917a3fda4fa2e7efad4fd8168e1309338d053fdcab020cf53e3741", 0x2d}, {&(0x7f0000000940)}], 0x7, &(0x7f0000001c40)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x14}}], 0xa0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[]}}, {{&(0x7f0000002280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002400)=[{&(0x7f00000022c0)="247badb355c651b14744280a13c3b8ffcb44beacbfe5f126189e667bcf69a0bc7cb25e2358332fb486915eec8cce7775876b447a45deb35e5b3f8c346e1b008cd8f583159970ca105cd1389d417e87c3383a2b893230e3635eb35502a705832a2d", 0x61}, {&(0x7f0000002380)="981176b1f9d40ffae09bf001311558ee3ee080", 0x13}], 0x2}}], 0x4, 0x140060c4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)) [ 1815.353935] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.359412] protocol 88fb is buggy, dev hsr_slave_1 03:57:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3007}, 0x20040885) 03:57:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x5386, 0x0) 03:57:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$xdp(0x2c, 0x3, 0x0) dup2(r4, r1) 03:57:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x5000000) [ 1815.538288] EXT4-fs (loop2): bad geometry: block count 1114168 exceeds size of device (66048 blocks) 03:57:58 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$char_usb(r1, &(0x7f0000000100)="97d989eae3acc2c2e3de6ef2dac4c96f3a8c8e6141236f1727a2cc738fbe0cff26fe29ae0767", 0x26) 03:57:58 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801110019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:57:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x6000000) 03:57:58 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) [ 1815.895540] audit: type=1804 audit(2000001478.760:307): pid=16301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2333 res=1 [ 1815.917178] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.922276] protocol 88fb is buggy, dev hsr_slave_1 03:57:59 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) [ 1816.153643] protocol 88fb is buggy, dev hsr_slave_0 [ 1816.158827] protocol 88fb is buggy, dev hsr_slave_1 [ 1816.183370] EXT4-fs (loop2): bad geometry: block count 1114424 exceeds size of device (66048 blocks) 03:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x7000000) 03:57:59 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003802110019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:57:59 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0044dff, &(0x7f00000001c0)) 03:57:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3008}, 0x20040885) 03:57:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) read$alg(r0, &(0x7f0000000480)=""/4096, 0x1000) 03:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x9000000) 03:57:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4857, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r4, 0x2}, 0xc) [ 1816.713597] protocol 88fb is buggy, dev hsr_slave_0 [ 1816.713636] protocol 88fb is buggy, dev hsr_slave_1 03:57:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xa000000) [ 1816.836485] EXT4-fs (loop2): bad geometry: block count 1114680 exceeds size of device (66048 blocks) 03:57:59 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 03:57:59 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003803110019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:58:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) 03:58:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xc000000) 03:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4857, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:58:00 executing program 0: pipe(&(0x7f0000000300)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x0, 0x0) getsockname$unix(r0, &(0x7f0000000340)=@abs, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13\x00'/258, 0x275a, 0x0) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) pipe(&(0x7f0000000840)) [ 1817.558070] EXT4-fs (loop2): bad geometry: block count 1114936 exceeds size of device (66048 blocks) 03:58:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x3009}, 0x20040885) 03:58:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000700)=[@acquire={0x40046306}], 0x0, 0x0, 0x0}) 03:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x2fb, 0x0, 0xfc76}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') preadv(r3, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 03:58:00 executing program 4: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2276, 0x0) 03:58:00 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x8ac4, 0x4000000fa8}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 03:58:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xe000000) 03:58:00 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003800120019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:58:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 03:58:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x227e, 0x0) 03:58:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0xf000000) 03:58:01 executing program 5: mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:58:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x300a}, 0x20040885) 03:58:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0xc0481273, 0x0) 03:58:01 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$char_usb(r1, &(0x7f0000000100)="97d989eae3acc2c2e3de6ef2dac4c96f3a8c8e0a", 0x14) 03:58:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0x401]) semop(r3, &(0x7f0000000000)=[{}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x10) [ 1818.527013] EXT4-fs (loop2): bad geometry: block count 1179704 exceeds size of device (66048 blocks) 03:58:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff4f, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x10000000) 03:58:01 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='ext4\x00', 0x5, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b03"], 0x3d}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003801120019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1818.686298] audit: type=1804 audit(2000001481.550:308): pid=17063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2333 res=1 03:58:01 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0xc) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13\x00'/258, 0x275a, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) pipe(&(0x7f0000000840)) 03:58:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1, &(0x7f0000000d80)=[@tclass={{0x14}}, @hoplimit_2292={{0x14}}], 0x30}}], 0x2, 0x0) 03:58:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) read$alg(r0, &(0x7f0000000480)=""/4096, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) [ 1818.933272] device bridge_slave_1 left promiscuous mode [ 1818.956065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.035323] device bridge_slave_0 left promiscuous mode [ 1819.041132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.160732] EXT4-fs (loop2): bad geometry: block count 1179960 exceeds size of device (66048 blocks) 03:58:02 executing program 0: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x200000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x33bfb45e) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xbfdf66640e4ace83) r0 = socket(0x0, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) 03:58:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x300b}, 0x20040885) [ 1819.453137] Invalid option length (64860) for dns_resolver key 03:58:02 executing program 0: pipe(0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) 03:58:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5affbfff", @ANYRES16, @ANYBLOB="000329bd7000fddbdf25030000000c0004000200000000000000"], 0x100020}, 0x1, 0x0, 0x0, 0x300c}, 0x20040885) 03:58:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x8000000100000003, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a6000000000000000000100000", @ANYRES32=r6], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 03:58:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) [ 1820.019999] sock: process `syz-executor.5' is using obsolete getsockopt SO_BSDCOMPAT 03:58:03 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13\x00'/258, 0x275a, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 1820.313647] net_ratelimit: 27 callbacks suppressed [ 1820.313656] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.318722] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.873621] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.873643] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.878736] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.883980] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.953670] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.958923] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.033687] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.038890] protocol 88fb is buggy, dev hsr_slave_1 [ 1822.092773] device bridge_slave_1 left promiscuous mode [ 1822.099525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.134506] device bridge_slave_0 left promiscuous mode [ 1822.139994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.226676] device hsr_slave_1 left promiscuous mode [ 1823.269566] device hsr_slave_0 left promiscuous mode [ 1823.339564] team0 (unregistering): Port device team_slave_1 removed [ 1823.351617] team0 (unregistering): Port device team_slave_0 removed [ 1823.364896] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1823.439213] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1823.529176] bond0 (unregistering): Released all slaves [ 1825.753662] net_ratelimit: 26 callbacks suppressed [ 1825.753684] protocol 88fb is buggy, dev hsr_slave_0 [ 1825.763916] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.313641] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.318782] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.553656] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.558769] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.113638] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.113707] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.118769] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.123807] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.273656] net_ratelimit: 20 callbacks suppressed [ 1831.273664] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.273681] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.278696] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.283771] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.433589] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.438801] protocol 88fb is buggy, dev hsr_slave_1 [ 1831.993624] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.998720] protocol 88fb is buggy, dev hsr_slave_1 [ 1832.553639] protocol 88fb is buggy, dev hsr_slave_0 [ 1832.558786] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.723645] net_ratelimit: 21 callbacks suppressed [ 1836.723659] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.734042] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.963689] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.968830] protocol 88fb is buggy, dev hsr_slave_1 [ 1837.513659] protocol 88fb is buggy, dev hsr_slave_0 [ 1837.518818] protocol 88fb is buggy, dev hsr_slave_1 [ 1837.523842] protocol 88fb is buggy, dev hsr_slave_0 [ 1837.523891] protocol 88fb is buggy, dev hsr_slave_1 [ 1837.673623] protocol 88fb is buggy, dev hsr_slave_0 [ 1837.678717] protocol 88fb is buggy, dev hsr_slave_1 [ 1841.843686] net_ratelimit: 22 callbacks suppressed [ 1841.843693] protocol 88fb is buggy, dev hsr_slave_0 [ 1841.853941] protocol 88fb is buggy, dev hsr_slave_1 [ 1842.393638] protocol 88fb is buggy, dev hsr_slave_0 [ 1842.398874] protocol 88fb is buggy, dev hsr_slave_1 [ 1842.953669] protocol 88fb is buggy, dev hsr_slave_0 [ 1842.958830] protocol 88fb is buggy, dev hsr_slave_1 [ 1843.193639] protocol 88fb is buggy, dev hsr_slave_0 [ 1843.198741] protocol 88fb is buggy, dev hsr_slave_1 [ 1843.753762] protocol 88fb is buggy, dev hsr_slave_0 [ 1843.758925] protocol 88fb is buggy, dev hsr_slave_1 [ 1847.113771] net_ratelimit: 18 callbacks suppressed [ 1847.113777] protocol 88fb is buggy, dev hsr_slave_0 [ 1847.123840] protocol 88fb is buggy, dev hsr_slave_1 [ 1847.353667] protocol 88fb is buggy, dev hsr_slave_0 [ 1847.358791] protocol 88fb is buggy, dev hsr_slave_1 [ 1847.913637] protocol 88fb is buggy, dev hsr_slave_0 [ 1847.918837] protocol 88fb is buggy, dev hsr_slave_1 [ 1847.923617] protocol 88fb is buggy, dev hsr_slave_0 [ 1847.929055] protocol 88fb is buggy, dev hsr_slave_1 [ 1848.083617] protocol 88fb is buggy, dev hsr_slave_0 [ 1848.088719] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.233681] net_ratelimit: 22 callbacks suppressed [ 1852.233690] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.243815] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.793691] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.800372] protocol 88fb is buggy, dev hsr_slave_1 [ 1853.353619] protocol 88fb is buggy, dev hsr_slave_0 [ 1853.358759] protocol 88fb is buggy, dev hsr_slave_1 [ 1853.593714] protocol 88fb is buggy, dev hsr_slave_0 [ 1853.598901] protocol 88fb is buggy, dev hsr_slave_1 [ 1854.153606] protocol 88fb is buggy, dev hsr_slave_0 [ 1854.158735] protocol 88fb is buggy, dev hsr_slave_1 [ 1857.513578] net_ratelimit: 18 callbacks suppressed [ 1857.513584] protocol 88fb is buggy, dev hsr_slave_0 [ 1857.524278] protocol 88fb is buggy, dev hsr_slave_1 [ 1857.753603] protocol 88fb is buggy, dev hsr_slave_0 [ 1857.758811] protocol 88fb is buggy, dev hsr_slave_1 [ 1858.313656] protocol 88fb is buggy, dev hsr_slave_0 [ 1858.318746] protocol 88fb is buggy, dev hsr_slave_1 [ 1858.323642] protocol 88fb is buggy, dev hsr_slave_0 [ 1858.328828] protocol 88fb is buggy, dev hsr_slave_1 [ 1858.473653] protocol 88fb is buggy, dev hsr_slave_0 [ 1858.478892] protocol 88fb is buggy, dev hsr_slave_1 [ 1862.633626] net_ratelimit: 22 callbacks suppressed [ 1862.633633] protocol 88fb is buggy, dev hsr_slave_0 [ 1862.644137] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.193674] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.198814] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.753599] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.758695] protocol 88fb is buggy, dev hsr_slave_1 [ 1864.003658] protocol 88fb is buggy, dev hsr_slave_0 [ 1864.008879] protocol 88fb is buggy, dev hsr_slave_1 [ 1864.553619] protocol 88fb is buggy, dev hsr_slave_0 [ 1864.553624] protocol 88fb is buggy, dev hsr_slave_0 [ 1867.913640] net_ratelimit: 18 callbacks suppressed [ 1867.913646] protocol 88fb is buggy, dev hsr_slave_0 [ 1867.924034] protocol 88fb is buggy, dev hsr_slave_1 [ 1868.153682] protocol 88fb is buggy, dev hsr_slave_0 [ 1868.158849] protocol 88fb is buggy, dev hsr_slave_1 [ 1868.713642] protocol 88fb is buggy, dev hsr_slave_0 [ 1868.713648] protocol 88fb is buggy, dev hsr_slave_0 [ 1868.713701] protocol 88fb is buggy, dev hsr_slave_1 [ 1868.718882] protocol 88fb is buggy, dev hsr_slave_1 [ 1868.873773] protocol 88fb is buggy, dev hsr_slave_0 [ 1868.878856] protocol 88fb is buggy, dev hsr_slave_1 [ 1873.033613] net_ratelimit: 22 callbacks suppressed [ 1873.033622] protocol 88fb is buggy, dev hsr_slave_0 [ 1873.043756] protocol 88fb is buggy, dev hsr_slave_1 [ 1873.593723] protocol 88fb is buggy, dev hsr_slave_0 [ 1873.598899] protocol 88fb is buggy, dev hsr_slave_1 [ 1874.153596] protocol 88fb is buggy, dev hsr_slave_0 [ 1874.158683] protocol 88fb is buggy, dev hsr_slave_1 [ 1874.393670] protocol 88fb is buggy, dev hsr_slave_0 [ 1874.398801] protocol 88fb is buggy, dev hsr_slave_1 [ 1874.953658] protocol 88fb is buggy, dev hsr_slave_0 [ 1874.958754] protocol 88fb is buggy, dev hsr_slave_1 [ 1878.313613] net_ratelimit: 18 callbacks suppressed [ 1878.313620] protocol 88fb is buggy, dev hsr_slave_0 [ 1878.323767] protocol 88fb is buggy, dev hsr_slave_1 [ 1878.553628] protocol 88fb is buggy, dev hsr_slave_0 [ 1878.558774] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.113913] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.113996] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.119069] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.124116] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.273582] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.278717] protocol 88fb is buggy, dev hsr_slave_1 [ 1883.443667] net_ratelimit: 22 callbacks suppressed [ 1883.443675] protocol 88fb is buggy, dev hsr_slave_0 [ 1883.453726] protocol 88fb is buggy, dev hsr_slave_1 [ 1883.993701] protocol 88fb is buggy, dev hsr_slave_0 [ 1883.998823] protocol 88fb is buggy, dev hsr_slave_1 [ 1884.553690] protocol 88fb is buggy, dev hsr_slave_0 [ 1884.558872] protocol 88fb is buggy, dev hsr_slave_1 [ 1884.793676] protocol 88fb is buggy, dev hsr_slave_0 [ 1884.798765] protocol 88fb is buggy, dev hsr_slave_1 [ 1885.353662] protocol 88fb is buggy, dev hsr_slave_0 [ 1885.353667] protocol 88fb is buggy, dev hsr_slave_0 [ 1888.713631] net_ratelimit: 18 callbacks suppressed [ 1888.713638] protocol 88fb is buggy, dev hsr_slave_0 [ 1888.723721] protocol 88fb is buggy, dev hsr_slave_1 [ 1888.953656] protocol 88fb is buggy, dev hsr_slave_0 [ 1888.958899] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.513624] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.518726] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.523652] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.528813] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.673615] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.678725] protocol 88fb is buggy, dev hsr_slave_1 [ 1893.833686] net_ratelimit: 22 callbacks suppressed [ 1893.838689] protocol 88fb is buggy, dev hsr_slave_0 [ 1893.843787] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.393668] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.398773] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.953628] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.958858] protocol 88fb is buggy, dev hsr_slave_1 [ 1895.193660] protocol 88fb is buggy, dev hsr_slave_0 [ 1895.198794] protocol 88fb is buggy, dev hsr_slave_1 [ 1895.753679] protocol 88fb is buggy, dev hsr_slave_0 [ 1895.753684] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.113635] net_ratelimit: 18 callbacks suppressed [ 1899.113644] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.123779] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.363710] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.368970] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.913652] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.913657] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.913711] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.918744] protocol 88fb is buggy, dev hsr_slave_1 [ 1900.083627] protocol 88fb is buggy, dev hsr_slave_0 [ 1900.088739] protocol 88fb is buggy, dev hsr_slave_1 [ 1904.233599] net_ratelimit: 22 callbacks suppressed [ 1904.233606] protocol 88fb is buggy, dev hsr_slave_0 [ 1904.243660] protocol 88fb is buggy, dev hsr_slave_1 [ 1904.803602] protocol 88fb is buggy, dev hsr_slave_0 [ 1904.808705] protocol 88fb is buggy, dev hsr_slave_1 [ 1905.353645] protocol 88fb is buggy, dev hsr_slave_0 [ 1905.359133] protocol 88fb is buggy, dev hsr_slave_1 [ 1905.593685] protocol 88fb is buggy, dev hsr_slave_0 [ 1905.598828] protocol 88fb is buggy, dev hsr_slave_1 [ 1906.153627] protocol 88fb is buggy, dev hsr_slave_0 [ 1906.158770] protocol 88fb is buggy, dev hsr_slave_1 [ 1909.523675] net_ratelimit: 17 callbacks suppressed [ 1909.523686] protocol 88fb is buggy, dev hsr_slave_0 [ 1909.534380] protocol 88fb is buggy, dev hsr_slave_1 [ 1909.753670] protocol 88fb is buggy, dev hsr_slave_0 [ 1909.758962] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.313645] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.313649] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.313699] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.318749] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.473615] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.478703] protocol 88fb is buggy, dev hsr_slave_1 [ 1914.633608] net_ratelimit: 21 callbacks suppressed [ 1914.639597] protocol 88fb is buggy, dev hsr_slave_0 [ 1914.644776] protocol 88fb is buggy, dev hsr_slave_1 [ 1915.193648] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.198882] protocol 88fb is buggy, dev hsr_slave_1 [ 1915.753650] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.758833] protocol 88fb is buggy, dev hsr_slave_1 [ 1915.993663] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.998933] protocol 88fb is buggy, dev hsr_slave_1 [ 1916.553707] protocol 88fb is buggy, dev hsr_slave_0 [ 1916.558797] protocol 88fb is buggy, dev hsr_slave_1 [ 1919.913639] net_ratelimit: 18 callbacks suppressed [ 1919.913647] protocol 88fb is buggy, dev hsr_slave_0 [ 1919.923863] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.153648] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.158789] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.713643] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.718889] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.723594] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.729755] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.873602] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.878742] protocol 88fb is buggy, dev hsr_slave_1 [ 1925.033621] net_ratelimit: 22 callbacks suppressed [ 1925.033628] protocol 88fb is buggy, dev hsr_slave_0 [ 1925.043662] protocol 88fb is buggy, dev hsr_slave_1 [ 1925.593663] protocol 88fb is buggy, dev hsr_slave_0 [ 1925.598836] protocol 88fb is buggy, dev hsr_slave_1 [ 1926.153623] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.158750] protocol 88fb is buggy, dev hsr_slave_1 [ 1926.393648] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.398798] protocol 88fb is buggy, dev hsr_slave_1 [ 1926.953630] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.953635] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.313702] net_ratelimit: 18 callbacks suppressed [ 1930.313711] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.324414] protocol 88fb is buggy, dev hsr_slave_1 [ 1930.553673] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.559225] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.113620] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.113656] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.118997] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.273717] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.278976] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.833683] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.433611] net_ratelimit: 21 callbacks suppressed [ 1935.433617] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.443793] protocol 88fb is buggy, dev hsr_slave_1 [ 1935.993644] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.998820] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.553694] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.558915] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.793650] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.798763] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.353764] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.359113] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.713674] net_ratelimit: 18 callbacks suppressed [ 1940.713683] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.725975] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.953635] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.959103] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.513652] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.513657] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.513705] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.518836] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.673638] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.678786] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.833638] net_ratelimit: 22 callbacks suppressed [ 1945.833644] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.843846] protocol 88fb is buggy, dev hsr_slave_1 [ 1946.393686] protocol 88fb is buggy, dev hsr_slave_0 [ 1946.399039] protocol 88fb is buggy, dev hsr_slave_1 [ 1946.953669] protocol 88fb is buggy, dev hsr_slave_0 [ 1946.958783] protocol 88fb is buggy, dev hsr_slave_1 [ 1947.193632] protocol 88fb is buggy, dev hsr_slave_0 [ 1947.200072] protocol 88fb is buggy, dev hsr_slave_1 [ 1947.753657] protocol 88fb is buggy, dev hsr_slave_0 [ 1947.753662] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.113644] net_ratelimit: 18 callbacks suppressed [ 1951.113652] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.124323] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.353627] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.358779] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.913656] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.913661] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.913714] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.918775] protocol 88fb is buggy, dev hsr_slave_1 [ 1952.073632] protocol 88fb is buggy, dev hsr_slave_0 [ 1952.078774] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.233803] net_ratelimit: 22 callbacks suppressed [ 1956.233813] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.245047] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.793888] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.801238] protocol 88fb is buggy, dev hsr_slave_1 [ 1957.353697] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.360669] protocol 88fb is buggy, dev hsr_slave_1 [ 1957.603765] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.609690] protocol 88fb is buggy, dev hsr_slave_1 [ 1958.153872] protocol 88fb is buggy, dev hsr_slave_0 [ 1958.153877] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.513599] net_ratelimit: 18 callbacks suppressed [ 1961.513608] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.524265] protocol 88fb is buggy, dev hsr_slave_1 [ 1961.753646] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.759055] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.313673] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.313678] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.313724] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.318973] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.473684] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.479106] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.643616] net_ratelimit: 22 callbacks suppressed [ 1966.643624] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.653918] protocol 88fb is buggy, dev hsr_slave_1 [ 1967.193693] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.198823] protocol 88fb is buggy, dev hsr_slave_1 [ 1967.753618] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.758715] protocol 88fb is buggy, dev hsr_slave_1 [ 1967.993617] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.998878] protocol 88fb is buggy, dev hsr_slave_1 [ 1968.553659] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.553664] protocol 88fb is buggy, dev hsr_slave_0 [ 1971.913598] net_ratelimit: 18 callbacks suppressed [ 1971.913605] protocol 88fb is buggy, dev hsr_slave_0 [ 1971.924680] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.163665] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.168775] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.713654] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.713671] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.718750] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.723857] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.873612] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.880473] protocol 88fb is buggy, dev hsr_slave_1 [ 1977.033662] net_ratelimit: 22 callbacks suppressed [ 1977.033671] protocol 88fb is buggy, dev hsr_slave_0 [ 1977.043979] protocol 88fb is buggy, dev hsr_slave_1 [ 1977.593680] protocol 88fb is buggy, dev hsr_slave_0 [ 1977.598851] protocol 88fb is buggy, dev hsr_slave_1 [ 1978.153601] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.158700] protocol 88fb is buggy, dev hsr_slave_1 [ 1978.403641] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.408780] protocol 88fb is buggy, dev hsr_slave_1 [ 1978.953650] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.958741] protocol 88fb is buggy, dev hsr_slave_1 [ 1980.243810] INFO: task kworker/1:1:24112 blocked for more than 140 seconds. [ 1980.244063] kobject: 'rx-0' (000000005ca88887): kobject_cleanup, parent 000000000719b8df [ 1980.251127] Not tainted 4.19.80 #0 [ 1980.264156] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1980.266197] kobject: 'rx-0' (000000005ca88887): auto cleanup 'remove' event [ 1980.272407] kworker/1:1 D26560 24112 2 0x80000000 [ 1980.282549] kobject: 'rx-0' (000000005ca88887): kobject_uevent_env [ 1980.285743] Workqueue: events linkwatch_event [ 1980.293604] kobject: 'rx-0' (000000005ca88887): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.298071] Call Trace: [ 1980.310895] __schedule+0x866/0x1dc0 [ 1980.314368] kobject: 'rx-0' (000000005ca88887): auto cleanup kobject_del [ 1980.314981] ? __mutex_lock+0x721/0x1300 [ 1980.321505] kobject: 'rx-0' (000000005ca88887): calling ktype release [ 1980.321512] kobject: 'rx-0': free name [ 1980.321575] kobject: 'tx-0' (000000001ac0d2f2): kobject_cleanup, parent 000000000719b8df [ 1980.326194] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1980.333581] kobject: 'tx-0' (000000001ac0d2f2): auto cleanup 'remove' event [ 1980.337292] ? kasan_check_read+0x11/0x20 [ 1980.350646] kobject: 'tx-0' (000000001ac0d2f2): kobject_uevent_env [ 1980.357419] schedule+0x92/0x1c0 [ 1980.361276] kobject: 'tx-0' (000000001ac0d2f2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.361284] kobject: 'tx-0' (000000001ac0d2f2): auto cleanup kobject_del [ 1980.361351] kobject: 'tx-0' (000000001ac0d2f2): calling ktype release [ 1980.368552] schedule_preempt_disabled+0x13/0x20 [ 1980.378133] kobject: 'tx-0': free name [ 1980.382111] __mutex_lock+0x726/0x1300 [ 1980.390334] kobject: 'queues' (000000000719b8df): kobject_cleanup, parent (null) [ 1980.395616] ? rtnl_lock+0x17/0x20 [ 1980.403586] kobject: 'queues' (000000000719b8df): calling ktype release [ 1980.404597] ? mutex_trylock+0x1e0/0x1e0 [ 1980.408037] kobject: 'queues' (000000000719b8df): kset_release [ 1980.408055] kobject: 'queues': free name [ 1980.408744] kobject: 'bridge62' (00000000a5beb1fc): kobject_uevent_env [ 1980.416977] ? process_one_work+0x890/0x1750 [ 1980.426532] kobject: 'bridge62' (00000000a5beb1fc): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.427630] ? find_held_lock+0x35/0x130 [ 1980.432274] kobject: 'batman_adv' (000000001a6128eb): kobject_uevent_env [ 1980.437484] ? process_one_work+0x890/0x1750 [ 1980.443631] kobject: 'batman_adv' (000000001a6128eb): kobject_uevent_env: filter function caused the event to drop! [ 1980.448674] ? __lock_is_held+0xb6/0x140 [ 1980.452504] kobject: 'batman_adv' (000000001a6128eb): kobject_cleanup, parent (null) [ 1980.452513] kobject: 'batman_adv' (000000001a6128eb): calling ktype release [ 1980.452521] kobject: (000000001a6128eb): dynamic_kobj_release [ 1980.452534] kobject: 'batman_adv': free name [ 1980.521382] mutex_lock_nested+0x16/0x20 [ 1980.526845] ? mutex_lock_nested+0x16/0x20 [ 1980.531172] rtnl_lock+0x17/0x20 [ 1980.534831] linkwatch_event+0xf/0x70 [ 1980.538815] process_one_work+0x989/0x1750 [ 1980.543114] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1980.547997] ? lock_acquire+0x16f/0x3f0 [ 1980.552048] ? kasan_check_write+0x14/0x20 [ 1980.566058] ? do_raw_spin_lock+0xc8/0x240 [ 1980.570406] worker_thread+0x98/0xe40 [ 1980.574525] ? trace_hardirqs_on+0x67/0x220 [ 1980.578931] kthread+0x354/0x420 [ 1980.582412] ? process_one_work+0x1750/0x1750 [ 1980.588070] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1980.593735] ret_from_fork+0x24/0x30 [ 1980.597779] INFO: task kworker/0:1:9445 blocked for more than 140 seconds. [ 1980.604994] Not tainted 4.19.80 #0 [ 1980.609120] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1980.617211] kworker/0:1 D26560 9445 2 0x80000000 [ 1980.622977] Workqueue: events switchdev_deferred_process_work [ 1980.629048] Call Trace: [ 1980.631700] __schedule+0x866/0x1dc0 [ 1980.635769] ? __mutex_lock+0x721/0x1300 [ 1980.640018] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1980.645834] ? kasan_check_read+0x11/0x20 [ 1980.650077] schedule+0x92/0x1c0 [ 1980.653560] schedule_preempt_disabled+0x13/0x20 [ 1980.658391] __mutex_lock+0x726/0x1300 [ 1980.662364] ? rtnl_lock+0x17/0x20 [ 1980.666094] ? mutex_trylock+0x1e0/0x1e0 [ 1980.670206] ? process_one_work+0x890/0x1750 [ 1980.674952] ? find_held_lock+0x35/0x130 [ 1980.679083] ? process_one_work+0x890/0x1750 [ 1980.683658] ? __lock_is_held+0xb6/0x140 [ 1980.687802] mutex_lock_nested+0x16/0x20 [ 1980.691927] ? mutex_lock_nested+0x16/0x20 [ 1980.696284] rtnl_lock+0x17/0x20 [ 1980.700075] switchdev_deferred_process_work+0xe/0x20 [ 1980.705420] process_one_work+0x989/0x1750 [ 1980.709734] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1980.715263] ? lock_acquire+0x16f/0x3f0 [ 1980.719322] ? kasan_check_write+0x14/0x20 [ 1980.723718] ? do_raw_spin_lock+0xc8/0x240 [ 1980.728101] worker_thread+0x98/0xe40 [ 1980.732010] kthread+0x354/0x420 [ 1980.735508] ? process_one_work+0x1750/0x1750 [ 1980.740072] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1980.745812] ret_from_fork+0x24/0x30 [ 1980.749678] INFO: task syz-executor.2:17175 blocked for more than 140 seconds. [ 1980.753932] kobject: 'rx-0' (00000000a37f90bb): kobject_cleanup, parent 000000007474d607 [ 1980.757210] Not tainted 4.19.80 #0 [ 1980.769508] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1980.772528] kobject: 'rx-0' (00000000a37f90bb): auto cleanup 'remove' event [ 1980.778395] syz-executor.2 D28984 17175 15933 0x00000004 [ 1980.790546] Call Trace: [ 1980.792099] kobject: 'rx-0' (00000000a37f90bb): kobject_uevent_env [ 1980.793238] __schedule+0x866/0x1dc0 [ 1980.801435] kobject: 'rx-0' (00000000a37f90bb): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.803284] ? __mutex_lock+0x721/0x1300 [ 1980.817478] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1980.820601] kobject: 'rx-0' (00000000a37f90bb): auto cleanup kobject_del [ 1980.822612] ? kasan_check_read+0x11/0x20 [ 1980.829620] kobject: 'rx-0' (00000000a37f90bb): calling ktype release [ 1980.833754] schedule+0x92/0x1c0 [ 1980.843736] kobject: 'rx-0': free name [ 1980.846901] schedule_preempt_disabled+0x13/0x20 [ 1980.847758] kobject: 'tx-0' (0000000064987e61): kobject_cleanup, parent 000000007474d607 [ 1980.852809] __mutex_lock+0x726/0x1300 [ 1980.861072] kobject: 'tx-0' (0000000064987e61): auto cleanup 'remove' event [ 1980.871347] ? rtnl_lock+0x17/0x20 [ 1980.871922] kobject: 'tx-0' (0000000064987e61): kobject_uevent_env [ 1980.877416] ? mutex_trylock+0x1e0/0x1e0 [ 1980.882181] kobject: 'tx-0' (0000000064987e61): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.892921] ? lock_downgrade+0x880/0x880 [ 1980.900373] kobject: 'tx-0' (0000000064987e61): auto cleanup kobject_del [ 1980.910931] mutex_lock_nested+0x16/0x20 [ 1980.912092] kobject: 'tx-0' (0000000064987e61): calling ktype release [ 1980.915531] ? mutex_lock_nested+0x16/0x20 [ 1980.922145] kobject: 'tx-0': free name [ 1980.930380] kobject: 'queues' (000000007474d607): kobject_cleanup, parent (null) [ 1980.933298] rtnl_lock+0x17/0x20 [ 1980.939058] kobject: 'queues' (000000007474d607): calling ktype release [ 1980.942389] sock_do_ioctl+0x24e/0x2f0 [ 1980.949178] kobject: 'queues' (000000007474d607): kset_release [ 1980.959260] ? compat_ifr_data_ioctl+0x160/0x160 [ 1980.959264] kobject: 'queues': free name [ 1980.959872] kobject: 'bridge61' (00000000e7b9d189): kobject_uevent_env [ 1980.964113] ? mark_held_locks+0x100/0x100 [ 1980.968381] kobject: 'bridge61' (00000000e7b9d189): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1980.980863] sock_ioctl+0x325/0x610 [ 1980.991711] kobject: 'batman_adv' (00000000fbaea216): kobject_uevent_env [ 1981.000882] ? dlci_ioctl_set+0x40/0x40 [ 1981.001161] kobject: 'batman_adv' (00000000fbaea216): kobject_uevent_env: filter function caused the event to drop! [ 1981.005309] ? __fget+0x340/0x540 [ 1981.015913] kobject: 'batman_adv' (00000000fbaea216): kobject_cleanup, parent (null) [ 1981.023835] ? __might_sleep+0x95/0x190 [ 1981.028171] kobject: 'batman_adv' (00000000fbaea216): calling ktype release [ 1981.038528] ? dlci_ioctl_set+0x40/0x40 [ 1981.040561] kobject: (00000000fbaea216): dynamic_kobj_release [ 1981.044116] do_vfs_ioctl+0xd5f/0x1380 [ 1981.053252] kobject: 'batman_adv': free name [ 1981.053395] ? selinux_file_ioctl+0x46f/0x5e0 [ 1981.062822] ? selinux_file_ioctl+0x125/0x5e0 [ 1981.067421] ? ioctl_preallocate+0x210/0x210 [ 1981.071996] ? selinux_file_mprotect+0x620/0x620 [ 1981.076833] ? iterate_fd+0x360/0x360 [ 1981.080663] ? nsecs_to_jiffies+0x30/0x30 [ 1981.084936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.090497] ? security_file_ioctl+0x8d/0xc0 [ 1981.095109] ksys_ioctl+0xab/0xd0 [ 1981.098577] __x64_sys_ioctl+0x73/0xb0 [ 1981.102474] do_syscall_64+0xfd/0x620 [ 1981.106416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.111614] RIP: 0033:0x459f39 [ 1981.114937] Code: c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 [ 1981.133916] RSP: 002b:00007f697e1d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.141632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 1981.148963] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 1981.156294] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.163613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f697e1d26d4 [ 1981.171851] R13: 00000000004c3b10 R14: 00000000004d7aa8 R15: 00000000ffffffff [ 1981.179285] INFO: task syz-executor.1:17173 blocked for more than 140 seconds. [ 1981.186814] Not tainted 4.19.80 #0 [ 1981.190982] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1981.199244] syz-executor.1 D28456 17173 15936 0x00000004 [ 1981.205061] Call Trace: [ 1981.207850] __schedule+0x866/0x1dc0 [ 1981.211572] ? __mutex_lock+0x721/0x1300 [ 1981.215740] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1981.221471] ? kasan_check_read+0x11/0x20 [ 1981.225811] schedule+0x92/0x1c0 [ 1981.229208] schedule_preempt_disabled+0x13/0x20 [ 1981.234057] __mutex_lock+0x726/0x1300 [ 1981.237961] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 1981.242637] ? mutex_trylock+0x1e0/0x1e0 [ 1981.246790] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1981.251228] ? lock_downgrade+0x880/0x880 [ 1981.255464] mutex_lock_nested+0x16/0x20 [ 1981.261643] ? mutex_lock_nested+0x16/0x20 [ 1981.265951] rtnetlink_rcv_msg+0x40a/0xb00 [ 1981.270213] ? rtnetlink_put_metrics+0x560/0x560 [ 1981.275067] ? netdev_pick_tx+0x300/0x300 [ 1981.279229] ? netlink_deliver_tap+0x22d/0xc20 [ 1981.283883] ? find_held_lock+0x35/0x130 [ 1981.287971] netlink_rcv_skb+0x17d/0x460 [ 1981.292033] ? rtnetlink_put_metrics+0x560/0x560 [ 1981.296939] ? netlink_ack+0xb30/0xb30 [ 1981.300837] ? kasan_check_read+0x11/0x20 [ 1981.305064] ? netlink_deliver_tap+0x254/0xc20 [ 1981.309688] rtnetlink_rcv+0x1d/0x30 [ 1981.313423] netlink_unicast+0x537/0x720 [ 1981.317610] ? netlink_attachskb+0x770/0x770 [ 1981.322031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.327641] netlink_sendmsg+0x8ae/0xd70 [ 1981.331726] ? netlink_unicast+0x720/0x720 [ 1981.336051] ? selinux_socket_sendmsg+0x36/0x40 [ 1981.340743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.346351] ? security_socket_sendmsg+0x8d/0xc0 [ 1981.351123] ? netlink_unicast+0x720/0x720 [ 1981.355521] sock_sendmsg+0xd7/0x130 [ 1981.359265] ___sys_sendmsg+0x803/0x920 [ 1981.363256] ? copy_msghdr_from_user+0x430/0x430 [ 1981.368101] ? lock_downgrade+0x880/0x880 [ 1981.372266] ? kasan_check_read+0x11/0x20 [ 1981.376518] ? __fget+0x367/0x540 [ 1981.379998] ? iterate_fd+0x360/0x360 [ 1981.383877] ? lock_downgrade+0x880/0x880 [ 1981.388054] ? __fget_light+0x1a9/0x230 [ 1981.392043] ? __fdget+0x1b/0x20 [ 1981.395496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1981.401059] __sys_sendmsg+0x105/0x1d0 [ 1981.405013] ? __ia32_sys_shutdown+0x80/0x80 [ 1981.409545] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1981.414425] ? do_syscall_64+0x26/0x620 [ 1981.418424] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.423904] ? do_syscall_64+0x26/0x620 [ 1981.427908] __x64_sys_sendmsg+0x78/0xb0 [ 1981.431988] do_syscall_64+0xfd/0x620 [ 1981.435880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.441094] RIP: 0033:0x459f39 [ 1981.444466] Code: c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 10 0f 11 07 48 83 c7 10 0f 10 06 48 83 c6 10 0f 11 07 48 83 c7 [ 1981.463944] RSP: 002b:00007fb41b36ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.471731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 1981.479055] RDX: 0000000010000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1981.486390] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.493708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41b36b6d4 [ 1981.501002] R13: 00000000004c8320 R14: 00000000004de420 R15: 00000000ffffffff [ 1981.508396] INFO: task syz-executor.4:17180 blocked for more than 140 seconds. [ 1981.514079] kobject: 'rx-0' (00000000e5d7320c): kobject_cleanup, parent 0000000078ea8ba8 [ 1981.515826] Not tainted 4.19.80 #0 [ 1981.528166] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1981.532804] kobject: 'rx-0' (00000000e5d7320c): auto cleanup 'remove' event [ 1981.536212] syz-executor.4 D29464 17180 15875 0x00000004 [ 1981.543449] kobject: 'rx-0' (00000000e5d7320c): kobject_uevent_env [ 1981.548990] Call Trace: [ 1981.549017] __schedule+0x866/0x1dc0 [ 1981.549032] ? __mutex_lock+0x721/0x1300 [ 1981.549052] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1981.549070] ? kasan_check_read+0x11/0x20 [ 1981.549091] schedule+0x92/0x1c0 [ 1981.563117] kobject: 'rx-0' (00000000e5d7320c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1981.566368] schedule_preempt_disabled+0x13/0x20 [ 1981.566383] __mutex_lock+0x726/0x1300 [ 1981.566396] ? first_packet_length+0x640/0x640 [ 1981.566412] ? rtnl_lock+0x17/0x20 [ 1981.566436] ? mutex_trylock+0x1e0/0x1e0 [ 1981.566456] ? lock_downgrade+0x880/0x880 [ 1981.566482] mutex_lock_nested+0x16/0x20 [ 1981.566497] ? mutex_lock_nested+0x16/0x20 [ 1981.571843] kobject: 'rx-0' (00000000e5d7320c): auto cleanup kobject_del [ 1981.575718] rtnl_lock+0x17/0x20 [ 1981.575733] sock_do_ioctl+0x24e/0x2f0 [ 1981.575750] ? compat_ifr_data_ioctl+0x160/0x160 [ 1981.575777] ? mark_held_locks+0x100/0x100 [ 1981.575793] sock_ioctl+0x325/0x610 [ 1981.575809] ? dlci_ioctl_set+0x40/0x40 [ 1981.575824] ? __fget+0x340/0x540 [ 1981.575847] ? __might_sleep+0x95/0x190 [ 1981.575863] ? dlci_ioctl_set+0x40/0x40 [ 1981.575880] do_vfs_ioctl+0xd5f/0x1380 [ 1981.575900] ? selinux_file_ioctl+0x46f/0x5e0 [ 1981.587772] kobject: 'rx-0' (00000000e5d7320c): calling ktype release [ 1981.589395] ? selinux_file_ioctl+0x125/0x5e0 [ 1981.604626] kobject: 'rx-0': free name [ 1981.613017] ? ioctl_preallocate+0x210/0x210 [ 1981.625911] kobject: 'tx-0' (00000000786a3356): kobject_cleanup, parent 0000000078ea8ba8 [ 1981.629484] ? selinux_file_mprotect+0x620/0x620 [ 1981.629510] ? iterate_fd+0x360/0x360 [ 1981.629527] ? nsecs_to_jiffies+0x30/0x30 [ 1981.629547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.634111] kobject: 'tx-0' (00000000786a3356): auto cleanup 'remove' event [ 1981.643723] ? security_file_ioctl+0x8d/0xc0 [ 1981.644453] kobject: 'tx-0' (00000000786a3356): kobject_uevent_env [ 1981.648130] ksys_ioctl+0xab/0xd0 [ 1981.648148] __x64_sys_ioctl+0x73/0xb0 [ 1981.648168] do_syscall_64+0xfd/0x620 [ 1981.648191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.653558] kobject: 'tx-0' (00000000786a3356): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1981.663713] RIP: 0033:0x459f39 [ 1981.665903] kobject: 'tx-0' (00000000786a3356): auto cleanup kobject_del [ 1981.669122] Code: Bad RIP value. [ 1981.669130] RSP: 002b:00007f8b2d9aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.669145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 1981.669153] RDX: 0000000020000000 RSI: 0000001000008912 RDI: 0000000000000003 [ 1981.669161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.669168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b2d9af6d4 [ 1981.669177] R13: 00000000004c1521 R14: 00000000004d4dc0 R15: 00000000ffffffff [ 1981.669252] INFO: task syz-executor.4:17185 blocked for more than 140 seconds. [ 1981.673421] kobject: 'tx-0' (00000000786a3356): calling ktype release [ 1981.677498] Not tainted 4.19.80 #0 [ 1981.683719] kobject: 'tx-0': free name [ 1981.686311] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1981.699011] kobject: 'queues' (0000000078ea8ba8): kobject_cleanup, parent (null) [ 1981.701777] syz-executor.4 D [ 1981.706384] kobject: 'queues' (0000000078ea8ba8): calling ktype release [ 1981.721064] 29352 17185 15875 0x00000004 [ 1981.722540] kobject: 'queues' (0000000078ea8ba8): kset_release [ 1981.726149] Call Trace: [ 1981.726175] __schedule+0x866/0x1dc0 [ 1981.730303] kobject: 'queues': free name [ 1981.742481] ? __mutex_lock+0x721/0x1300 [ 1981.743823] kobject: 'bridge60' (00000000c5c3dc0f): kobject_uevent_env [ 1981.747575] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1981.754690] kobject: 'bridge60' (00000000c5c3dc0f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1981.764870] ? kasan_check_read+0x11/0x20 [ 1981.767331] kobject: 'batman_adv' (000000007120ddfb): kobject_uevent_env [ 1981.770847] schedule+0x92/0x1c0 [ 1981.770865] schedule_preempt_disabled+0x13/0x20 [ 1981.770881] __mutex_lock+0x726/0x1300 [ 1981.770892] ? first_packet_length+0x640/0x640 [ 1981.770910] ? rtnl_lock+0x17/0x20 [ 1981.781195] kobject: 'batman_adv' (000000007120ddfb): kobject_uevent_env: filter function caused the event to drop! [ 1981.791007] ? mutex_trylock+0x1e0/0x1e0 [ 1981.791567] kobject: 'batman_adv' (000000007120ddfb): kobject_cleanup, parent (null) [ 1981.794737] ? lock_downgrade+0x880/0x880 [ 1981.794766] mutex_lock_nested+0x16/0x20 [ 1981.802634] kobject: 'batman_adv' (000000007120ddfb): calling ktype release [ 1981.816992] ? mutex_lock_nested+0x16/0x20 [ 1981.818070] kobject: (000000007120ddfb): dynamic_kobj_release [ 1981.827849] rtnl_lock+0x17/0x20 [ 1981.832195] kobject: 'batman_adv': free name [ 1981.847644] sock_do_ioctl+0x24e/0x2f0 [ 1982.026520] ? compat_ifr_data_ioctl+0x160/0x160 [ 1982.031335] ? mark_held_locks+0x100/0x100 [ 1982.037230] sock_ioctl+0x325/0x610 [ 1982.041023] ? dlci_ioctl_set+0x40/0x40 [ 1982.045107] ? __fget+0x340/0x540 [ 1982.048583] ? __might_sleep+0x95/0x190 [ 1982.052600] ? dlci_ioctl_set+0x40/0x40 [ 1982.056684] do_vfs_ioctl+0xd5f/0x1380 [ 1982.060602] ? selinux_file_ioctl+0x46f/0x5e0 [ 1982.065181] ? selinux_file_ioctl+0x125/0x5e0 [ 1982.069688] ? ioctl_preallocate+0x210/0x210 [ 1982.074201] ? selinux_file_mprotect+0x620/0x620 [ 1982.078987] ? iterate_fd+0x360/0x360 [ 1982.082813] ? nsecs_to_jiffies+0x30/0x30 [ 1982.087035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.092595] ? security_file_ioctl+0x8d/0xc0 [ 1982.097123] ksys_ioctl+0xab/0xd0 [ 1982.100598] __x64_sys_ioctl+0x73/0xb0 [ 1982.104560] do_syscall_64+0xfd/0x620 [ 1982.108402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1982.113683] RIP: 0033:0x459f39 [ 1982.116903] Code: Bad RIP value. [ 1982.120276] RSP: 002b:00007f8b2d98dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.128050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 1982.135432] RDX: 0000000020000000 RSI: 0000001000008912 RDI: 0000000000000003 [ 1982.142965] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1982.150288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b2d98e6d4 [ 1982.158361] R13: 00000000004c1521 R14: 00000000004d4dc0 R15: 00000000ffffffff [ 1982.165777] INFO: task syz-executor.0:17423 blocked for more than 140 seconds. [ 1982.173420] Not tainted 4.19.80 #0 [ 1982.177552] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1982.185581] syz-executor.0 D29096 17423 30285 0x00000004 [ 1982.191206] Call Trace: [ 1982.193870] __schedule+0x866/0x1dc0 [ 1982.197606] ? __mutex_lock+0x721/0x1300 [ 1982.201688] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1982.206764] ? kasan_check_read+0x11/0x20 [ 1982.211014] schedule+0x92/0x1c0 [ 1982.214535] schedule_preempt_disabled+0x13/0x20 [ 1982.219313] __mutex_lock+0x726/0x1300 [ 1982.223235] ? rtnl_lock+0x17/0x20 [ 1982.226851] ? mutex_trylock+0x1e0/0x1e0 [ 1982.230938] ? lock_downgrade+0x880/0x880 [ 1982.235177] mutex_lock_nested+0x16/0x20 [ 1982.239358] ? mutex_lock_nested+0x16/0x20 [ 1982.243674] rtnl_lock+0x17/0x20 [ 1982.247059] sock_do_ioctl+0x24e/0x2f0 [ 1982.250951] ? compat_ifr_data_ioctl+0x160/0x160 [ 1982.255797] ? mark_held_locks+0x100/0x100 [ 1982.260673] sock_ioctl+0x325/0x610 [ 1982.269186] ? dlci_ioctl_set+0x40/0x40 [ 1982.273295] ? __fget+0x340/0x540 [ 1982.276843] ? __might_sleep+0x95/0x190 [ 1982.282041] ? dlci_ioctl_set+0x40/0x40 [ 1982.286078] do_vfs_ioctl+0xd5f/0x1380 [ 1982.289985] ? selinux_file_ioctl+0x46f/0x5e0 [ 1982.294770] ? selinux_file_ioctl+0x125/0x5e0 [ 1982.299468] ? ioctl_preallocate+0x210/0x210 [ 1982.304109] ? selinux_file_mprotect+0x620/0x620 [ 1982.308896] ? iterate_fd+0x360/0x360 [ 1982.313860] net_ratelimit: 18 callbacks suppressed [ 1982.313869] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.313927] protocol 88fb is buggy, dev hsr_slave_1 [ 1982.329465] ? nsecs_to_jiffies+0x30/0x30 [ 1982.343558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.349367] ? security_file_ioctl+0x8d/0xc0 [ 1982.353841] ksys_ioctl+0xab/0xd0 [ 1982.357582] __x64_sys_ioctl+0x73/0xb0 [ 1982.361479] do_syscall_64+0xfd/0x620 [ 1982.365448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1982.370668] RIP: 0033:0x459f39 [ 1982.373933] Code: Bad RIP value. [ 1982.377304] RSP: 002b:00007fbf1a35ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.385077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 1982.392619] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000007 [ 1982.400037] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1982.407382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf1a35f6d4 [ 1982.414721] R13: 00000000004c3b10 R14: 00000000004d7aa8 R15: 00000000ffffffff [ 1982.422029] [ 1982.422029] Showing all locks held in the system: [ 1982.423928] kobject: 'rx-0' (00000000037136a0): kobject_cleanup, parent 000000004ed4ece7 [ 1982.428447] 1 lock held by khungtaskd/1037: [ 1982.440972] #0: 000000007eabaabd (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1982.446006] kobject: 'rx-0' (00000000037136a0): auto cleanup 'remove' event [ 1982.449710] 3 locks held by kworker/1:2/2724: [ 1982.461231] #0: 000000005c152732 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 [ 1982.463187] kobject: 'rx-0' (00000000037136a0): kobject_uevent_env [ 1982.471752] #1: 00000000f6b39ce8 ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1982.471796] #2: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.471855] 3 locks held by rs:main Q:Reg/7343: [ 1982.488303] kobject: 'rx-0' (00000000037136a0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1982.495093] #0: 00000000aeb6dab0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1982.495133] #1: 000000009a5eea3e (sb_writers#4){.+.+}, at: vfs_write+0x429/0x560 [ 1982.495167] #2: 00000000029c74e8 (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1dc0 [ 1982.495207] 1 lock held by rsyslogd/7345: [ 1982.495217] 2 locks held by getty/7467: [ 1982.495221] #0: 00000000d519d37e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.495251] #1: 00000000ae994196 (&ldata->atomic_read_lock [ 1982.508296] kobject: 'rx-0' (00000000037136a0): auto cleanup kobject_del [ 1982.510054] ){+.+.} [ 1982.522484] kobject: 'rx-0' (00000000037136a0): calling ktype release [ 1982.525782] , at: n_tty_read+0x232/0x1b30 [ 1982.525795] 2 locks held by getty/7468: [ 1982.540377] kobject: 'rx-0': free name [ 1982.541469] #0: 00000000384e28c4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.541513] #1: 000000007a377459 ( [ 1982.550732] kobject: 'tx-0' (000000001e17f832): kobject_cleanup, parent 000000004ed4ece7 [ 1982.556088] &ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.556125] 2 locks held by getty/7469: [ 1982.556130] #0: 00000000734b2a33 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.556160] #1: 00000000f9d1396f ( [ 1982.556174] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.556176] &ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.556199] 2 locks held by getty/7470: [ 1982.556204] #0: 00000000a7fdc137 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.556233] protocol 88fb is buggy, dev hsr_slave_1 [ 1982.556235] #1: 0000000013b34fa4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.556271] 2 locks held by getty/7471: [ 1982.556275] #0: 000000008e693960 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.556303] #1: 00000000e37ce521 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.556339] 2 locks held by getty/7472: [ 1982.556343] #0: 000000005166f954 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.556372] #1: 00000000415da0e5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.556402] 2 locks held by getty/7473: [ 1982.556409] #0: [ 1982.571369] kobject: 'tx-0' (000000001e17f832): auto cleanup 'remove' event [ 1982.572130] 0000000048d43469 [ 1982.576748] kobject: 'tx-0' (000000001e17f832): kobject_uevent_env [ 1982.580855] (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1982.580889] #1: 0000000078a60be1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1982.580938] 3 locks held by kworker/1:1/24112: [ 1982.580942] #0: 00000000a00ccba4 ((wq_completion)"events" [ 1982.591680] kobject: 'tx-0' (000000001e17f832): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1982.593128] ){+.+.}, at: process_one_work+0x87e/0x1750 [ 1982.593155] #1: 00000000b0addc7a ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1982.593187] #2: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.597462] kobject: 'tx-0' (000000001e17f832): auto cleanup kobject_del [ 1982.605168] 3 locks held by kworker/0:1/9445: [ 1982.605173] #0: 00000000a00ccba4 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 [ 1982.605215] #1: 000000005b35cd0d (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1982.605248] #2: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.605284] 7 locks held by kworker/u4:1/27624: [ 1982.605303] 1 lock held by syz-executor.2/17175: [ 1982.605307] #0: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.605342] 1 lock held by syz-executor.1/17173: [ 1982.605346] #0: 00000000b510b03a ( [ 1982.620295] kobject: 'tx-0' (000000001e17f832): calling ktype release [ 1982.624902] rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1982.624942] 1 lock held by syz-executor.4/17180: [ 1982.624946] #0: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.624982] 1 lock held by syz-executor.4/17185: [ 1982.624986] #0: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.625023] 1 lock held by syz-executor.0/17423: [ 1982.625027] #0: 00000000b510b03a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1982.625093] [ 1982.630224] kobject: 'tx-0': free name [ 1982.633984] ============================================= [ 1982.633984] [ 1982.633993] NMI backtrace for cpu 1 [ 1982.634007] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.80 #0 [ 1982.634014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.634019] Call Trace: [ 1982.634041] dump_stack+0x172/0x1f0 [ 1982.634060] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1982.634139] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1982.634153] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 1982.634168] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1982.634180] watchdog+0x9df/0xee0 [ 1982.634201] kthread+0x354/0x420 [ 1982.649800] kobject: 'queues' (000000004ed4ece7): kobject_cleanup, parent (null) [ 1982.653657] ? reset_hung_task_detector+0x30/0x30 [ 1982.653673] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1982.653690] ret_from_fork+0x24/0x30 [ 1982.653788] Sending NMI from CPU 1 to CPUs 0: [ 1982.663057] kobject: 'queues' (000000004ed4ece7): calling ktype release [ 1982.668275] NMI backtrace for cpu 0 [ 1982.668280] CPU: 0 PID: 27624 Comm: kworker/u4:1 Not tainted 4.19.80 #0 [ 1982.668286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.668290] Workqueue: netns cleanup_net [ 1982.668296] RIP: 0010:hrtimer_interrupt+0x314/0x770 [ 1982.668306] Code: ff ff ff 7f 41 80 4e 44 08 49 89 46 68 e8 94 ee e3 ff e8 af d4 0e 00 4c 89 e6 b9 0f 00 00 00 4c 89 ea 4c 89 f7 e8 7c e0 ff ff ff 00 00 00 4c 89 f7 e8 0f bd ff ff 49 89 c4 48 8b 45 b0 80 38 [ 1982.668309] RSP: 0018:ffff8880ae807f18 EFLAGS: 00000092 [ 1982.668317] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 1ffff11015d00fd0 [ 1982.668322] RDX: 0000000000010000 RSI: ffffffff815bddea RDI: 0000000000000005 [ 1982.668327] RBP: ffff8880ae807fb0 R08: ffff88805028a240 R09: ffffed1015d04733 [ 1982.668331] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 000001cd9d875b00 [ 1982.668336] R13: 0000000000000082 R14: ffff8880ae825b80 R15: 0000000000000000 [ 1982.668341] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1982.668345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1982.668350] CR2: 00007f267000a008 CR3: 0000000093138000 CR4: 00000000001426f0 [ 1982.668355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1982.668359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1982.668362] Call Trace: [ 1982.668364] [ 1982.668368] smp_apic_timer_interrupt+0x111/0x550 [ 1982.668371] apic_timer_interrupt+0xf/0x20 [ 1982.668374] [ 1982.668378] RIP: 0010:vprintk_emit+0x5b8/0x690 [ 1982.668387] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 0f 85 a2 00 00 00 48 83 3d cc 2a 1d 07 00 74 29 e8 bd ab 15 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 79 fe ff ff e8 a9 ab 15 00 0f 0b e8 a2 ab 15 00 [ 1982.668391] RSP: 0018:ffff8880152477b8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 1982.668399] RAX: ffff88805028a240 RBX: 0000000000000293 RCX: 1ffff1100a05156b [ 1982.668404] RDX: 0000000000000000 RSI: ffffffff81551b83 RDI: 0000000000000293 [ 1982.668409] RBP: ffff888015247800 R08: ffff88805028a240 R09: ffff88805028ab58 [ 1982.668413] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000003b [ 1982.668418] R13: 1ffffffff10e48c9 R14: 0000000000000200 R15: ffff8880a82765c0 [ 1982.668422] ? vprintk_emit+0x5b3/0x690 [ 1982.668425] vprintk_default+0x28/0x30 [ 1982.668428] vprintk_func+0x7e/0x189 [ 1982.668431] printk+0xba/0xed [ 1982.668434] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1982.668438] ? kobject_put.cold+0x1b6/0x2e6 [ 1982.668442] kobject_put.cold+0x266/0x2e6 [ 1982.668445] kset_unregister+0x38/0x50 [ 1982.668449] netdev_unregister_kobject+0x18c/0x1f0 [ 1982.668452] rollback_registered_many+0x6bb/0xda0 [ 1982.668455] ? br_dev_open+0x70/0x70 [ 1982.668459] ? generic_xdp_install+0x3d0/0x3d0 [ 1982.668463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1982.668467] ? unregister_netdevice_queue+0x1d2/0x2c0 [ 1982.668471] unregister_netdevice_many.part.0+0x1b/0x1f0 [ 1982.668474] default_device_exit_batch+0x34e/0x410 [ 1982.668478] ? unregister_netdevice_many+0x50/0x50 [ 1982.668481] ? rtnl_unlock+0xe/0x10 [ 1982.668485] ? do_wait_intr_irq+0x2b0/0x2b0 [ 1982.668488] ? rtnl_unlock+0xe/0x10 [ 1982.668492] ? unregister_netdevice_many+0x50/0x50 [ 1982.668495] ? dev_change_net_namespace+0xc60/0xc60 [ 1982.668499] ops_exit_list.isra.0+0xfc/0x150 [ 1982.668502] cleanup_net+0x3fb/0x960 [ 1982.668506] ? unregister_pernet_device+0x80/0x80 [ 1982.668509] ? __lock_is_held+0xb6/0x140 [ 1982.668512] process_one_work+0x989/0x1750 [ 1982.668516] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1982.668519] ? lock_acquire+0x16f/0x3f0 [ 1982.668523] ? kasan_check_write+0x14/0x20 [ 1982.668526] ? do_raw_spin_lock+0xc8/0x240 [ 1982.668530] worker_thread+0x98/0xe40 [ 1982.668533] kthread+0x354/0x420 [ 1982.668536] ? process_one_work+0x1750/0x1750 [ 1982.668540] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1982.668544] ret_from_fork+0x24/0x30 [ 1982.668729] Kernel panic - not syncing: hung_task: blocked tasks [ 1982.681806] kobject: 'queues' (000000004ed4ece7): kset_release [ 1982.689774] CPU: 1 PID: 1037 Comm: khungtaskd Not tainted 4.19.80 #0 [ 1982.689782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.689786] Call Trace: [ 1982.689809] dump_stack+0x172/0x1f0 [ 1982.689829] panic+0x26a/0x50e [ 1982.689844] ? __warn_printk+0xf3/0xf3 [ 1982.689859] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1982.689877] ? ___preempt_schedule+0x16/0x18 [ 1982.689894] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1982.689906] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 1982.689921] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 1982.704185] kobject: 'queues': free name [ 1982.713167] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1982.713187] watchdog+0x9f0/0xee0 [ 1982.713210] kthread+0x354/0x420 [ 1982.713222] ? reset_hung_task_detector+0x30/0x30 [ 1982.713234] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1982.713251] ret_from_fork+0x24/0x30 [ 1982.725536] kobject: 'bridge59' (0000000073b1e8b4): kobject_uevent_env [ 1982.731002] Kernel Offset: disabled [ 1983.480276] Rebooting in 86400 seconds..