}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 562.684804] R13: 00000000004cbd70 R14: 00000000004c3528 R15: 0000000000000003 [ 562.701125] binder: BINDER_SET_CONTEXT_MGR already set [ 562.715286] binder: 26230:26231 got reply transaction with no transaction stack [ 562.729858] binder: 26209:26213 ioctl 40046207 0 returned -16 [ 562.730396] binder: 26230:26231 transaction failed 29201/-71, size 0-0 line 2762 06:40:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x1000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 562.893082] binder: BINDER_SET_CONTEXT_MGR already set [ 562.950705] binder: 26243:26244 ioctl 40046207 0 returned -16 06:40:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000000080)=[{{&(0x7f0000001b00)=@l2, 0xfffffffffffffe54, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:14 executing program 1 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 562.998867] binder: 26243:26254 BC_ACQUIRE_DONE u0000000000000000 no match [ 563.006074] binder: 26243:26254 got reply transaction with no transaction stack [ 563.013609] binder: 26243:26254 transaction failed 29201/-71, size 0-0 line 2762 06:40:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 563.079699] binder: BINDER_SET_CONTEXT_MGR already set 06:40:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280)=0x4, 0xffffffffffffff6b) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 563.110425] binder: 26243:26244 ioctl 40046207 0 returned -16 [ 563.139246] FAULT_INJECTION: forcing a failure. [ 563.139246] name failslab, interval 1, probability 0, space 0, times 0 [ 563.151167] CPU: 0 PID: 26264 Comm: syz-executor1 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 563.159909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.169281] Call Trace: [ 563.171904] dump_stack+0x1c9/0x2b4 [ 563.175569] ? dump_stack_print_info.cold.2+0x52/0x52 [ 563.180810] ? perf_trace_lock+0x49d/0x920 [ 563.185103] should_fail.cold.4+0xa/0x11 [ 563.189216] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 563.194373] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 563.199535] ? perf_tp_event+0xc40/0xc40 [ 563.203636] ? graph_lock+0x170/0x170 06:40:15 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 563.207464] ? rcu_note_context_switch+0x680/0x680 [ 563.212431] ? find_held_lock+0x36/0x1c0 [ 563.216545] ? __lock_is_held+0xb5/0x140 [ 563.220688] ? check_same_owner+0x340/0x340 [ 563.225120] ? graph_lock+0x170/0x170 [ 563.229010] ? rcu_note_context_switch+0x680/0x680 [ 563.233982] __should_failslab+0x124/0x180 [ 563.238263] should_failslab+0x9/0x14 [ 563.242109] kmem_cache_alloc_node+0x256/0x720 [ 563.246720] ? find_held_lock+0x36/0x1c0 [ 563.250846] __alloc_skb+0x119/0x770 [ 563.254607] ? skb_scrub_packet+0x490/0x490 [ 563.258197] binder: 26276:26277 BC_ACQUIRE_DONE node 688 has no pending acquire request [ 563.258962] ? rcu_is_watching+0x8c/0x150 [ 563.267282] binder: 26276:26277 got reply transaction with no transaction stack [ 563.271299] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 563.271340] ? netlink_has_listeners+0x2cf/0x4a0 [ 563.271362] ? netlink_tap_init_net+0x3e0/0x3e0 [ 563.278847] binder: 26276:26277 transaction failed 29201/-71, size 0-0 line 2762 [ 563.283476] alloc_uevent_skb+0x89/0x220 [ 563.283515] kobject_uevent_env+0x866/0x1110 [ 563.309006] kvm_uevent_notify_change.part.32+0x2f8/0x440 [ 563.314585] kvm_put_kvm+0x1ae/0x1060 [ 563.318446] ? find_held_lock+0x36/0x1c0 [ 563.322548] ? kvm_write_guest_cached+0x40/0x40 [ 563.327254] ? _raw_spin_unlock_irq+0x27/0x70 [ 563.331782] ? _raw_spin_unlock_irq+0x27/0x70 [ 563.336294] ? lockdep_hardirqs_on+0x421/0x5c0 [ 563.340925] ? kasan_check_write+0x14/0x20 [ 563.345183] ? do_raw_spin_lock+0xc1/0x200 [ 563.349452] ? kvm_irqfd_release+0xdd/0x120 [ 563.353788] ? kvm_irqfd_release+0xdd/0x120 06:40:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x300000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1de9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 563.358155] kvm_vm_release+0x42/0x50 [ 563.361975] __fput+0x3c1/0xa80 [ 563.365291] ? kvm_put_kvm+0x1060/0x1060 [ 563.369376] ? __alloc_file+0x400/0x400 [ 563.373386] ? trace_hardirqs_on+0xbd/0x2c0 [ 563.377793] ? kasan_check_read+0x11/0x20 [ 563.381961] ? task_work_run+0x1af/0x2a0 [ 563.386049] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 563.391196] ? kasan_check_write+0x14/0x20 [ 563.395472] ? do_raw_spin_lock+0xc1/0x200 [ 563.399749] ____fput+0x15/0x20 [ 563.403055] task_work_run+0x1e8/0x2a0 [ 563.406967] ? task_work_cancel+0x240/0x240 [ 563.411338] exit_to_usermode_loop+0x318/0x380 [ 563.415970] ? syscall_slow_exit_work+0x490/0x490 [ 563.420877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 563.426447] ? ksys_ioctl+0x81/0xd0 [ 563.430111] do_syscall_64+0x6be/0x820 [ 563.434030] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 563.439419] ? syscall_return_slowpath+0x5e0/0x5e0 [ 563.444417] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 563.449492] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 563.454531] ? recalc_sigpending_tsk+0x180/0x180 06:40:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 563.459311] ? kasan_check_write+0x14/0x20 [ 563.463584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.468465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.473671] RIP: 0033:0x457099 [ 563.476894] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.495808] RSP: 002b:00007f5405178c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 563.503540] RAX: 0000000000000005 RBX: 00007f54051796d4 RCX: 0000000000457099 06:40:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfffffffc, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 563.510835] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 563.518121] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 563.525455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 563.532783] R13: 00000000004cbd70 R14: 00000000004c3528 R15: 0000000000000004 06:40:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x8b01000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 563.578759] binder: 26290:26291 BC_ACQUIRE_DONE node 690 has no pending acquire request [ 563.587162] binder: 26290:26291 got reply transaction with no transaction stack [ 563.594730] binder: 26290:26291 transaction failed 29201/-71, size 0-0 line 2762 [ 563.648875] binder: BINDER_SET_CONTEXT_MGR already set 06:40:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x1b, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfffffffffffff000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 563.685413] binder: 26299:26300 ioctl 40046207 0 returned -16 [ 563.730748] binder: 26299:26300 BC_ACQUIRE_DONE u0000000000000000 no match [ 563.737915] binder: 26299:26300 got reply transaction with no transaction stack [ 563.745505] binder: 26299:26300 transaction failed 29201/-71, size 0-0 line 2762 [ 563.821368] binder: 26310:26314 BC_ACQUIRE_DONE node 693 has no pending acquire request [ 563.829619] binder: 26310:26314 got reply transaction with no transaction stack [ 563.837145] binder: 26310:26314 transaction failed 29201/-71, size 0-0 line 2762 06:40:16 executing program 1 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x9effffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) modify_ldt$write2(0x11, &(0x7f0000000080)={0x4b, 0x1000, 0x1000, 0x3, 0x3, 0x5, 0x1, 0x2, 0x9, 0x567}, 0x10) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280)=0x4, 0xffffffffffffff6b) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 564.332618] binder: 26333:26335 BC_ACQUIRE_DONE node 695 has no pending acquire request [ 564.340932] binder: 26333:26335 got reply transaction with no transaction stack [ 564.348467] binder: 26333:26335 transaction failed 29201/-71, size 0-0 line 2762 [ 564.389948] binder: BINDER_SET_CONTEXT_MGR already set [ 564.438290] binder: 26344:26348 ioctl 40046207 0 returned -16 [ 564.454163] binder: 26344:26352 BC_ACQUIRE_DONE u0000000000000000 no match [ 564.461320] binder: 26344:26352 got reply transaction with no transaction stack [ 564.466510] FAULT_INJECTION: forcing a failure. [ 564.466510] name failslab, interval 1, probability 0, space 0, times 0 [ 564.468870] binder: 26344:26352 transaction failed 29201/-71, size 0-0 line 2762 06:40:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x73, &(0x7f00000000c0)=0x2, 0x4) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x4200, 0x0) 06:40:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x9effffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 564.487713] CPU: 0 PID: 26351 Comm: syz-executor1 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 564.496231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.505596] Call Trace: [ 564.508228] dump_stack+0x1c9/0x2b4 [ 564.511900] ? dump_stack_print_info.cold.2+0x52/0x52 [ 564.517148] ? perf_trace_lock+0x49d/0x920 [ 564.521436] should_fail.cold.4+0xa/0x11 [ 564.525545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 564.530799] ? __save_stack_trace+0x8d/0xf0 [ 564.535167] ? graph_lock+0x170/0x170 [ 564.539007] ? save_stack+0x43/0xd0 [ 564.542692] ? kasan_kmalloc+0xc4/0xe0 [ 564.546605] ? find_held_lock+0x36/0x1c0 [ 564.550707] ? __lock_is_held+0xb5/0x140 [ 564.554824] ? usbatm_atm_proc_read+0x3f8/0x790 [ 564.556866] binder: BINDER_SET_CONTEXT_MGR already set [ 564.559559] ? check_same_owner+0x340/0x340 [ 564.559581] ? mark_held_locks+0xc9/0x160 [ 564.559612] ? rcu_note_context_switch+0x680/0x680 [ 564.578279] ? kmem_cache_alloc_node+0x217/0x720 [ 564.583065] __should_failslab+0x124/0x180 [ 564.587324] should_failslab+0x9/0x14 [ 564.591146] kmem_cache_alloc_node_trace+0x259/0x720 [ 564.595244] binder: 26333:26335 ioctl 40046207 0 returned -16 [ 564.596296] __kmalloc_node_track_caller+0x33/0x70 [ 564.596323] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 564.596349] __alloc_skb+0x155/0x770 [ 564.596374] ? skb_scrub_packet+0x490/0x490 [ 564.619960] ? rcu_is_watching+0x8c/0x150 [ 564.624130] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 564.628842] ? netlink_has_listeners+0x2cf/0x4a0 [ 564.633618] ? netlink_tap_init_net+0x3e0/0x3e0 [ 564.638312] alloc_uevent_skb+0x89/0x220 [ 564.642406] kobject_uevent_env+0x866/0x1110 [ 564.646866] kvm_uevent_notify_change.part.32+0x2f8/0x440 [ 564.652432] kvm_put_kvm+0x1ae/0x1060 [ 564.656263] ? find_held_lock+0x36/0x1c0 [ 564.660351] ? kvm_write_guest_cached+0x40/0x40 [ 564.665066] ? _raw_spin_unlock_irq+0x27/0x70 [ 564.669614] ? _raw_spin_unlock_irq+0x27/0x70 [ 564.674126] ? lockdep_hardirqs_on+0x421/0x5c0 [ 564.676703] binder: 26344:26355 BC_ACQUIRE_DONE node 698 has no pending acquire request [ 564.678764] ? kasan_check_write+0x14/0x20 [ 564.678790] ? do_raw_spin_lock+0xc1/0x200 [ 564.695440] ? kvm_irqfd_release+0xdd/0x120 [ 564.699782] ? kvm_irqfd_release+0xdd/0x120 [ 564.704131] kvm_vm_release+0x42/0x50 [ 564.707952] __fput+0x3c1/0xa80 [ 564.711256] ? kvm_put_kvm+0x1060/0x1060 [ 564.715364] ? __alloc_file+0x400/0x400 [ 564.719369] ? trace_hardirqs_on+0xbd/0x2c0 [ 564.723731] ? kasan_check_read+0x11/0x20 [ 564.727921] ? task_work_run+0x1af/0x2a0 [ 564.732029] ? trace_hardirqs_off_caller+0x2b0/0x2b0 06:40:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x100000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 564.737188] ? kasan_check_write+0x14/0x20 [ 564.741462] ? do_raw_spin_lock+0xc1/0x200 [ 564.745721] ____fput+0x15/0x20 [ 564.749039] task_work_run+0x1e8/0x2a0 [ 564.752955] ? task_work_cancel+0x240/0x240 [ 564.757332] exit_to_usermode_loop+0x318/0x380 [ 564.761938] ? syscall_slow_exit_work+0x490/0x490 [ 564.766806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 564.772415] ? ksys_ioctl+0x81/0xd0 [ 564.776099] do_syscall_64+0x6be/0x820 [ 564.780024] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 564.785429] ? syscall_return_slowpath+0x5e0/0x5e0 [ 564.790382] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 564.795442] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 564.800480] ? recalc_sigpending_tsk+0x180/0x180 [ 564.805258] ? kasan_check_write+0x14/0x20 [ 564.809518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.814394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.819604] RIP: 0033:0x457099 06:40:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 564.822817] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.841744] RSP: 002b:00007f5405178c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 564.849495] RAX: 0000000000000005 RBX: 00007f54051796d4 RCX: 0000000000457099 [ 564.856783] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 564.864065] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 564.871360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 564.878668] R13: 00000000004cbd70 R14: 00000000004c3528 R15: 0000000000000005 06:40:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x8b010000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x3, 0x4) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 564.943162] binder: 26370:26371 BC_ACQUIRE_DONE node 700 has no pending acquire request [ 564.962655] binder: BINDER_SET_CONTEXT_MGR already set [ 564.978825] binder: 26370:26371 ioctl 40046207 0 returned -16 06:40:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x9105, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 564.994750] binder: 26374:26375 BC_ACQUIRE_DONE node 702 has no pending acquire request 06:40:17 executing program 1 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x4, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x3f00, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 565.256697] binder: 26400:26402 BC_ACQUIRE_DONE node 704 has no pending acquire request [ 565.269818] binder: BINDER_SET_CONTEXT_MGR already set [ 565.290638] binder: 26401:26404 ioctl 40046207 0 returned -16 [ 565.318423] FAULT_INJECTION: forcing a failure. [ 565.318423] name failslab, interval 1, probability 0, space 0, times 0 [ 565.329809] CPU: 0 PID: 26408 Comm: syz-executor1 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 565.338315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.342669] binder: 26401:26404 BC_ACQUIRE_DONE u0000000000000000 no match [ 565.347683] Call Trace: [ 565.347732] dump_stack+0x1c9/0x2b4 [ 565.347793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 565.347827] ? perf_trace_lock+0x49d/0x920 [ 565.370584] should_fail.cold.4+0xa/0x11 [ 565.374682] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 565.376013] binder: 26401:26409 BC_ACQUIRE_DONE u0000000000000000 no match [ 565.379804] ? perf_tp_event+0xc40/0xc40 [ 565.379846] ? graph_lock+0x170/0x170 [ 565.379887] ? find_held_lock+0x36/0x1c0 [ 565.398862] ? __lock_is_held+0xb5/0x140 [ 565.402972] ? check_same_owner+0x340/0x340 [ 565.407318] ? __fput+0x3c1/0xa80 [ 565.410794] ? ____fput+0x15/0x20 06:40:17 executing program 4: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0xff}, 0x1) r1 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)="5500000018007f7000fe01b2a4a280930a60000000a843029100000039000900230e0000000000000d000500ff0000000000c78b800823140180ffffffffffff6732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 06:40:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000080), 0x0) 06:40:17 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000b80)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b71611e2923b9d0f86564217b2c2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3dbe9f0f4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b9991d8"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffff9e, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x4000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 565.414275] ? rcu_note_context_switch+0x680/0x680 [ 565.419241] __should_failslab+0x124/0x180 [ 565.423515] should_failslab+0x9/0x14 [ 565.427336] kmem_cache_alloc+0x29c/0x710 [ 565.431521] skb_clone+0x1be/0x500 [ 565.435086] ? refcount_add_not_zero_checked+0x250/0x330 [ 565.440570] ? skb_split+0x11f0/0x11f0 [ 565.444486] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 565.449550] ? netlink_trim+0x1ba/0x380 [ 565.453598] ? netlink_skb_destructor+0x210/0x210 [ 565.458504] netlink_broadcast_filtered+0x10b7/0x1620 [ 565.463744] ? __netlink_sendskb+0xd0/0xd0 [ 565.468031] ? rcu_is_watching+0x8c/0x150 [ 565.472213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.477788] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 565.483314] ? refcount_add_not_zero_checked+0x330/0x330 [ 565.488790] ? netlink_has_listeners+0x2cf/0x4a0 [ 565.493573] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 565.498625] netlink_broadcast+0x3a/0x50 [ 565.502723] kobject_uevent_env+0x829/0x1110 [ 565.507189] kvm_uevent_notify_change.part.32+0x2f8/0x440 [ 565.512784] kvm_put_kvm+0x1ae/0x1060 06:40:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0xce20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x100, 0x20}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x8001, 0x40, 0x9}, 0x10) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 565.516613] ? find_held_lock+0x36/0x1c0 [ 565.520701] ? kvm_write_guest_cached+0x40/0x40 [ 565.525421] ? _raw_spin_unlock_irq+0x27/0x70 [ 565.529946] ? _raw_spin_unlock_irq+0x27/0x70 [ 565.534504] ? lockdep_hardirqs_on+0x421/0x5c0 [ 565.539149] ? kasan_check_write+0x14/0x20 [ 565.543410] ? do_raw_spin_lock+0xc1/0x200 [ 565.547678] ? kvm_irqfd_release+0xdd/0x120 [ 565.552019] ? kvm_irqfd_release+0xdd/0x120 [ 565.556369] kvm_vm_release+0x42/0x50 [ 565.560407] __fput+0x3c1/0xa80 [ 565.563775] ? kvm_put_kvm+0x1060/0x1060 [ 565.567864] ? __alloc_file+0x400/0x400 [ 565.571866] ? trace_hardirqs_on+0xbd/0x2c0 [ 565.572717] binder: 26412:26426 BC_ACQUIRE_DONE node 708 has no pending acquire request [ 565.576206] ? kasan_check_read+0x11/0x20 [ 565.576227] ? task_work_run+0x1af/0x2a0 [ 565.576246] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 565.576271] ? kasan_check_write+0x14/0x20 [ 565.576292] ? do_raw_spin_lock+0xc1/0x200 [ 565.576317] ____fput+0x15/0x20 [ 565.576341] task_work_run+0x1e8/0x2a0 [ 565.610341] binder: BINDER_SET_CONTEXT_MGR already set [ 565.613500] ? task_work_cancel+0x240/0x240 [ 565.613544] exit_to_usermode_loop+0x318/0x380 [ 565.613568] ? syscall_slow_exit_work+0x490/0x490 [ 565.613621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 565.613641] ? ksys_ioctl+0x81/0xd0 [ 565.613674] do_syscall_64+0x6be/0x820 [ 565.613694] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 565.613715] ? syscall_return_slowpath+0x5e0/0x5e0 [ 565.639023] binder: 26412:26426 ioctl 40046207 0 returned -16 [ 565.641948] ? trace_hardirqs_on_caller+0x2b0/0x2b0 06:40:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 565.641970] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 565.641988] ? recalc_sigpending_tsk+0x180/0x180 [ 565.642026] ? kasan_check_write+0x14/0x20 [ 565.642056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.642087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.642110] RIP: 0033:0x457099 [ 565.694648] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.713566] RSP: 002b:00007f5405178c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 565.721308] RAX: 0000000000000005 RBX: 00007f54051796d4 RCX: 0000000000457099 [ 565.728616] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 565.735910] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 565.743232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 565.750535] R13: 00000000004cbd70 R14: 00000000004c3528 R15: 0000000000000006 06:40:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x2, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 565.803667] binder: BINDER_SET_CONTEXT_MGR already set [ 565.827764] binder: 26434:26437 BC_ACQUIRE_DONE u0000000000000000 no match [ 565.852691] binder: 26434:26435 ioctl 40046207 0 returned -16 06:40:18 executing program 1 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffffa1, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000840)=""/132, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) 06:40:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x804, 0x63b) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e21}, 0x4) listen(r1, 0x1) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x80) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x3ff, 0x1ff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x2, 0x5, 0x3, 0x89e, 0x7, [{0x6, 0x0, 0x7a, 0x0, 0x0, 0x9}, {0x200, 0x2, 0x8, 0x0, 0x0, 0x980}, {0x800, 0x8, 0xffffffff, 0x0, 0x0, 0x200}, {0x8, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x1}, {0x8, 0x6, 0x101, 0x0, 0x0, 0x8}, {0x0, 0x8001, 0x3}]}) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c}, &(0x7f0000000100)=0x20) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r2, r3+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) fsetxattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='veth0_to_bond\x00', 0xe, 0x2) write$P9_RREADDIR(r5, &(0x7f0000000a00)={0x103, 0x29, 0x2, {0x2, [{{0x62, 0x3, 0x2}, 0x2, 0x7, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0xffff, 0xffffffffffffffe0, 0x7, './file0'}, {{0x64, 0x2, 0x2}, 0x1e6a, 0x3, 0x7, './file0'}, {{0x0, 0x2, 0x8}, 0x8000, 0x4, 0x7, './file0'}, {{0xc1, 0x2, 0x1}, 0x50000, 0x7ff, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x0, 0x4, 0x7, './file0'}, {{0x8, 0x3}, 0x4, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x3fb28709, 0x400, 0x7, './file0'}]}}, 0x103) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x3000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 566.274986] binder: BINDER_SET_CONTEXT_MGR already set [ 566.282498] binder: BINDER_SET_CONTEXT_MGR already set [ 566.306200] binder: 26456:26464 ioctl 40046207 0 returned -16 06:40:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 566.319991] binder: 26461:26463 ioctl 40046207 0 returned -16 [ 566.329975] binder: 26461:26469 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x40000) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x2, 0x4, 0x7b39, "5f38fbf0a13643e4e4f8ee329d34450748f61bfbe0b096b01ff7e30898b2235033bf556f3fdd0dcf089352e0b7c4fe932d36e528dfe2a6d4ffc0d3cc27cb89", 0x20}, 0x60) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000140)={0x1, 0x7dd}, 0x2) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r5 = msgget$private(0x0, 0xc0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000002c0)=""/232) msgrcv(r5, &(0x7f0000000180)={0x0, ""/176}, 0xb8, 0x3, 0x800) 06:40:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000840)=""/132, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) [ 566.469024] binder: BINDER_SET_CONTEXT_MGR already set [ 566.505338] binder: 26473:26474 ioctl 40046207 0 returned -16 06:40:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xa1ffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x300, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={r4, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0800b6000e1b8cdd7e5737b4f962aee9a1707b12f97d0422ff21bb8489b597b36e1709438d4774f7dd33dc8fbd5b28b72f1abc5db9d463b798e09b5305d19ff7a83f6d6ca968e01bb40f6f61062877affcd01525bab836c99e108ec24436098b8c6c6a3ddba80b25253f79de87903c3d1fc215ca86a18888c79a8856cc15ff866a7948675d8fe78f153e64afbfa7557e115ade07858b0ba0b852627190af61039e5f4e17f92549a1bacdb1b8b82aa9fc5c70c32690d9ad9c58f60c7adf0ede898efeb0f595aa6237e97c492a81a7e9b378bbf0a18cd6196c5e7f3cb951fd6d778701503c7d3751f21bf8ba24acd36100a0322a6aa8872193f69a0b6363711f71f00df8501a52fb709f421c033ff5f04207936d517d7c611980bbedb51396305865de7d921f455a8e808a090ccbf3d9050000006d2bf45f56d5cbd9a1bcc95909659d7d7d6a032276cb48b96ccbad081eda49935a083088d120804d19e0e8d93396b7c3117495ff042b32994b770af883c026d05ef5e7af18b4d6cd90f72e3da0affee428d29cbd10f1b41a4b339f55a81e7f0c4bd19dfd085113c7fb233284ebf1c53d8ff988425e456936c0cc577d8261d9c51d6a2a0c3ab2db055517cbb008a4ea40d47e60f109241e09184e1f27c58e6e2dba7d857a2eea5e0170f5d1457ed6c78ec39f33662c44ccc35011e3e162325f1c44dbc666a57a8ecffcda2682af3e17e3284d209b54c33205074c5518b825e52500741ccf6c32730630166f480921912284e440182857d1589915f771d0dade01c651ded31fc1eb582a2021073302b6908ed58c46b340a5e552b7d851b630e7b7ebdcde07ee439f7214310ac9e314e8cafc87482df7dbb13ec1295fd55cde2b64e522bfdc94d7674b7a45a12df23a0d486ac0f8ede1233df7db49a707d3e55af3c91d5101b407bd3b26d768c5290660d2f12c406fd7986e010ece6ae62188233de72ce36578256c822431845395d306d084dab1a146b197a5f1cab7c07600d8a97f757251ac46e207d8855c345ee3c1216e9b7b88b348fc6a26efaa409a87a05d5f92496d23725056a5741c370cafaccfbb2c127500607177a100000000000000000014ad1a3e09edeb8958718bc4809ff8f26ed49bd1b541443e33dc6623713c592e7256d2abd9cc3ba482ac79bf0856ce184a6873d992f19d1f9c055192c32a0e3da20c324da56a378d9a03f10c9eb3cbe7bd6d76c26bb951a2365c782ebb2c2c814b2827e4d1b1d0c8fb6f20fba682762afe12bb5b624bc423db9d8aa96b685e1d562ce6a108b330d0ec864fd6bec8d9db"], 0xbe) 06:40:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x894b, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x208000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf250e0000001800000000000000050000002a000000080004004e230000080006009a0000000c000300080005007f000001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc800) ioctl$FICLONE(r4, 0x40049409, r2) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup2(r2, r6) 06:40:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x600601) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@hyper}) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x11, &(0x7f0000000ff0)={0x4}, 0x10) [ 566.702448] binder: BINDER_SET_CONTEXT_MGR already set [ 566.712167] binder: BINDER_SET_CONTEXT_MGR already set [ 566.736531] binder: 26496:26500 ioctl 40046207 0 returned -16 06:40:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffff7f00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 566.752844] binder: 26502:26503 ioctl 40046207 0 returned -16 [ 566.802611] binder: 26502:26503 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:18 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfcffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000080)=0x80, 0x800) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000000c0)=""/14) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x108) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x1}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 06:40:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8000000000, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x8, 'syz1\x00', 0x4}, 0x0, [0x100000001, 0x6, 0x5, 0x8, 0x100000001, 0x100000000, 0x1, 0x779, 0x35, 0x4, 0x20, 0x4, 0x2, 0x5, 0x1, 0x0, 0x3, 0x7fff, 0xffffffffffffffe1, 0x7f, 0xfffffffffffffff8, 0x5, 0x7, 0x101, 0x90ae, 0x101, 0x7fffffff, 0x1, 0xffff, 0x7, 0x0, 0xfffffffffffffffa, 0x2ed0, 0x5, 0x8, 0x40, 0x0, 0x1, 0x80, 0x89d4, 0x0, 0xd0f, 0x293d, 0x0, 0xffffffffffffffe3, 0x6, 0xcaf9, 0x100000001, 0xfffffffffffffff9, 0x1000000000000, 0x7, 0x2f, 0x3, 0x4, 0x1, 0x400, 0x0, 0x9, 0x3ff, 0x9, 0xa89, 0x81, 0x0, 0x3, 0x1f, 0x5, 0x80, 0x101, 0x2, 0x2, 0x2b7, 0x37b5, 0x9, 0xc, 0x8, 0x1, 0x9, 0x53, 0x345, 0x3, 0x9, 0x41e2, 0x4, 0x5, 0x6, 0x2, 0x7, 0x1, 0x2, 0x7, 0x4, 0xffff, 0x24c9be61, 0x100000000, 0xfff, 0xf0c4, 0x1, 0x7, 0x800, 0xc890000000000000, 0x4, 0x8, 0x9, 0xfffffffffffff04f, 0x3, 0x2, 0x80000001, 0x80, 0x400, 0x20, 0x5, 0xc0b, 0x8, 0x80000001, 0x8, 0x0, 0x8000, 0x2, 0x80000000, 0x4, 0xd59e, 0x3, 0x2, 0x7fffffff, 0x0, 0x2853, 0x4, 0x6]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xa1ffffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.010587] binder: BINDER_SET_CONTEXT_MGR already set [ 567.016938] binder: BINDER_SET_CONTEXT_MGR already set [ 567.041659] binder: 26517:26526 ioctl 40046207 0 returned -16 06:40:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.055241] binder: 26519:26530 ioctl 40046207 0 returned -16 06:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfffffff0, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000240)=0xfffffffffffffff9, &(0x7f0000000280)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r4 = dup2(r1, r3) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000040)=""/182, &(0x7f0000000100)=0xb6) 06:40:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8100a, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@aname={'aname', 0x3d, '+#'}}, {@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x7}}]}}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 567.106613] binder: 26519:26530 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfcffffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.243708] binder: BINDER_SET_CONTEXT_MGR already set 06:40:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffff9e, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.265604] binder: 26551:26554 ioctl 40046207 0 returned -16 [ 567.334386] binder_transaction: 20 callbacks suppressed [ 567.334395] binder: 26560:26563 got reply transaction with no transaction stack [ 567.347424] binder_transaction: 20 callbacks suppressed [ 567.347443] binder: 26560:26563 transaction failed 29201/-71, size 0-0 line 2762 06:40:19 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x7, &(0x7f00000008c0)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:19 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x40) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x71b26719, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffe}]}) dup2(r2, r3) timerfd_gettime(r1, &(0x7f00000000c0)) r4 = getpid() capset(&(0x7f0000000100)={0x399f1736, r4}, &(0x7f0000000240)={0xa9a, 0x49, 0x3, 0x80000000, 0xfffffffffffffff7, 0x9}) 06:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffffffffffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x200000000, &(0x7f0000000080)="153f6234488dd25d766070") finit_module(r0, &(0x7f00000000c0)='GPLmime_type)\\@vboxnet1vmnet1em1\x00', 0x1) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x12f266bc29b32b91, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @remote}}, [0xad93, 0xffffffffffffffe1, 0x6, 0x8, 0xfffffffffffffe00, 0x8001, 0x0, 0x7f, 0x8, 0xcd, 0x6, 0x88, 0x0, 0x2, 0x5]}, &(0x7f00000002c0)=0x100) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) prctl$setmm(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x4644, 0x4) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c}, &(0x7f0000000100)=0x20) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r2, r3+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) fsetxattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='veth0_to_bond\x00', 0xe, 0x2) write$P9_RREADDIR(r5, &(0x7f0000000a00)={0x103, 0x29, 0x2, {0x2, [{{0x62, 0x3, 0x2}, 0x2, 0x7, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0xffff, 0xffffffffffffffe0, 0x7, './file0'}, {{0x64, 0x2, 0x2}, 0x1e6a, 0x3, 0x7, './file0'}, {{0x0, 0x2, 0x8}, 0x8000, 0x4, 0x7, './file0'}, {{0xc1, 0x2, 0x1}, 0x50000, 0x7ff, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x0, 0x4, 0x7, './file0'}, {{0x8, 0x3}, 0x4, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x3fb28709, 0x400, 0x7, './file0'}]}}, 0x103) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 567.473727] binder: BINDER_SET_CONTEXT_MGR already set [ 567.513131] binder: 26572:26575 ioctl 40046207 0 returned -16 [ 567.519891] binder: 26572:26583 got reply transaction with no transaction stack [ 567.527440] binder: 26572:26583 transaction failed 29201/-71, size 0-0 line 2762 06:40:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) ftruncate(r1, 0x7fffffff) getsockopt(r1, 0x5f, 0x6, &(0x7f0000000140)=""/241, &(0x7f0000000240)=0xf1) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfffff000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.564870] binder: 26590:26591 got reply transaction with no transaction stack [ 567.572581] binder: 26590:26591 transaction failed 29201/-71, size 0-0 line 2762 06:40:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 567.621195] binder: BINDER_SET_CONTEXT_MGR already set 06:40:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40280, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3, 0x20001) write$P9_RMKDIR(r0, &(0x7f0000000300)={0x14, 0x49, 0x2, {0x4, 0x4, 0x2}}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0xa4}]}) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="f3ad0f019e3ca47ff8c4e28528d38fc97c8086588cc5420f0138c4e1156b9a004800009a8000c0fe1c00c4c27d36803a000000260f01c9660f38802508000000", 0x40}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4000, 0x102) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) dup2(r1, r0) [ 567.652706] binder_thread_write: 2 callbacks suppressed [ 567.652721] binder: 26572:26583 BC_ACQUIRE_DONE u0000000000000000 no match [ 567.653948] binder: 26572:26575 ioctl 40046207 0 returned -16 [ 567.658223] binder: 26572:26583 got reply transaction with no transaction stack [ 567.678756] binder: 26572:26583 transaction failed 29201/-71, size 0-0 line 2762 06:40:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x9105000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x8}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000000c0)={0x10001, 0x7fffffff, 0x2020000000}) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 567.784207] binder_thread_write: 10 callbacks suppressed [ 567.784219] binder: 26604:26605 BC_ACQUIRE_DONE node 737 has no pending acquire request [ 567.798118] binder: 26604:26605 got reply transaction with no transaction stack [ 567.805667] binder: 26604:26605 transaction failed 29201/-71, size 0-0 line 2762 06:40:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a35937033eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b766bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000001a80)={{0x3c, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x1, 0x738, 0x23}, {@local, 0x4e24, 0x3, 0x0, 0xfff, 0x73}}, 0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="a03a9c21fd31665e1769c2b4faaa140ff03aa336a0fbbd3601ca45220a8efc0602e96c7bd2e2b237e297a1d4283b6694eeb8e75183c6274c435f4d55d674925d92d6f6c39ddd25821e429f8c93fd1e20915e5dfec7", 0x55}], 0x1, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r1, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 06:40:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fchdir(r0) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 4: syz_open_dev$vcsn(&(0x7f0000000940)='/dev/vcs#\x00', 0x30, 0x602) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x80001, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x2b, @broadcast, 0x4e23, 0x4, 'sed\x00', 0x8, 0x80000001}, {@broadcast, 0x4e24, 0x0, 0x0, 0x6, 0x100000001}}, 0x44) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1fe}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0xc6, "0af13634a7c7051afdf1c0e4a385e58664debe824dda24bf4f9c3331f78b8f717e2a7a5b66d7f216acac53a6c56c1f5d319073a16c6c1c18f6af39c442fd785a2f24c0c9cf38776b836451e17de297637cbade4ef9e30e91c9b192310c84172bee0ccf96d18e656547f2ae67a9ce2594fb97df4ae246e28f6ee298d77be95822d9570d0a76e845c3909005bdc3945d92462298c558068b31ad3bc42726bdea6afa3c9ceefc5d7332bac18b9819cedb8c3ff83f8a919f5c39eb690224d137a75a1898f4826522"}, &(0x7f0000000340)=0xce) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000800)=0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574cb3b02000000000000bd6800", 0x43732e5398416f1a}) recvfrom(r0, &(0x7f0000000840)=""/116, 0x74, 0x10000, &(0x7f00000008c0)=@l2={0x1f, 0x1, {0x8, 0xffffffff80000000, 0xe0, 0x4, 0x6, 0x10001}, 0xffff, 0x9}, 0x80) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x10001, 0x2}]}) getsockname(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000003540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)="3bb1ebaf5060f3cc32567b5df3bbb4cd099b1d2cc8395cb33e7ba92e0484de3ffd2d4e01d8cc054ad01dd291ad745cdc824eb38c5ad766107af6327420c4375810b09898db8dccc89cb4fb6f032a7d7d", 0x50}], 0x1, &(0x7f0000003a40), 0x0, 0x800}, 0x4}], 0x1, 0x8000) r4 = socket$inet(0x2, 0x1, 0x5) r5 = socket$inet(0x2, 0x7, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0xce, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000001000000000000000000000000000000000000000000000000000000000000000fefffffffeffff0700000000000000000000000000009900000000000000000000048234681a4fe700000000000000000000000000000000e3ffffffffffffff000000c06862d14b4f1b900000000000000000d6e4c277e58216bb000000000000000000000000000000000000000000d82a5fe8e35575d6b21df01307db9ebd632b6a5e061eccb0b225d47b326fa2e0500c2c1251008cc31e488c3a0bff5d04023312c1d660"]}, 0x146) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000580)) recvfrom(r3, &(0x7f00000000c0)=""/128, 0x80, 0x1ffd, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[], 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 568.175261] binder: BINDER_SET_CONTEXT_MGR already set [ 568.190524] binder: 26627:26628 ioctl 40046207 0 returned -16 [ 568.209107] binder: 26627:26628 BC_ACQUIRE_DONE u0000000000000000 no match [ 568.216328] binder: 26627:26628 got reply transaction with no transaction stack [ 568.223902] binder: 26627:26628 transaction failed 29201/-71, size 0-0 line 2762 [ 568.232285] binder: 26625:26641 BC_ACQUIRE_DONE node 739 has no pending acquire request [ 568.240689] binder: 26625:26641 got reply transaction with no transaction stack [ 568.248220] binder: 26625:26641 transaction failed 29201/-71, size 0-0 line 2762 [ 568.250991] binder: BINDER_SET_CONTEXT_MGR already set [ 568.262729] binder: 26627:26628 ioctl 40046207 0 returned -16 06:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2001, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r2) [ 568.373407] binder: BINDER_SET_CONTEXT_MGR already set 06:40:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 568.418817] binder: 26652:26654 ioctl 40046207 0 returned -16 06:40:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x200000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0xd5f6}, &(0x7f0000000140)=0x8) r2 = socket$inet6(0xa, 0x40000080806, 0xffffffffffffffff) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 568.459618] binder: 26652:26654 BC_ACQUIRE_DONE u0000000000000000 no match [ 568.466830] binder: 26652:26654 got reply transaction with no transaction stack [ 568.474379] binder: 26652:26654 transaction failed 29201/-71, size 0-0 line 2762 06:40:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20040, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) dup2(r0, r1) [ 568.567855] binder: 26664:26665 BC_ACQUIRE_DONE node 743 has no pending acquire request [ 568.576155] binder: 26664:26665 got reply transaction with no transaction stack [ 568.583693] binder: 26664:26665 transaction failed 29201/-71, size 0-0 line 2762 [ 568.604535] sctp: [Deprecated]: syz-executor0 (pid 26669) Use of struct sctp_assoc_value in delayed_ack socket option. 06:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 568.604535] Use struct sctp_sack_info instead [ 568.653803] sctp: [Deprecated]: syz-executor0 (pid 26674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.653803] Use struct sctp_sack_info instead 06:40:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x4, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be89ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e77d9a0fbe8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c832bc2ffddcc94bfff9ecf01e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a00000000000000000000000000000000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x38) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 568.712949] binder: BINDER_SET_CONTEXT_MGR already set 06:40:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x733) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x1) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0xffffffffffffff53}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:20 executing program 4: syz_open_dev$vcsn(&(0x7f0000000940)='/dev/vcs#\x00', 0x30, 0x602) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x80001, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x2b, @broadcast, 0x4e23, 0x4, 'sed\x00', 0x8, 0x80000001}, {@broadcast, 0x4e24, 0x0, 0x0, 0x6, 0x100000001}}, 0x44) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1fe}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0xc6, "0af13634a7c7051afdf1c0e4a385e58664debe824dda24bf4f9c3331f78b8f717e2a7a5b66d7f216acac53a6c56c1f5d319073a16c6c1c18f6af39c442fd785a2f24c0c9cf38776b836451e17de297637cbade4ef9e30e91c9b192310c84172bee0ccf96d18e656547f2ae67a9ce2594fb97df4ae246e28f6ee298d77be95822d9570d0a76e845c3909005bdc3945d92462298c558068b31ad3bc42726bdea6afa3c9ceefc5d7332bac18b9819cedb8c3ff83f8a919f5c39eb690224d137a75a1898f4826522"}, &(0x7f0000000340)=0xce) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000800)=0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574cb3b02000000000000bd6800", 0x43732e5398416f1a}) recvfrom(r0, &(0x7f0000000840)=""/116, 0x74, 0x10000, &(0x7f00000008c0)=@l2={0x1f, 0x1, {0x8, 0xffffffff80000000, 0xe0, 0x4, 0x6, 0x10001}, 0xffff, 0x9}, 0x80) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x10001, 0x2}]}) getsockname(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000003540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)="3bb1ebaf5060f3cc32567b5df3bbb4cd099b1d2cc8395cb33e7ba92e0484de3ffd2d4e01d8cc054ad01dd291ad745cdc824eb38c5ad766107af6327420c4375810b09898db8dccc89cb4fb6f032a7d7d", 0x50}], 0x1, &(0x7f0000003a40), 0x0, 0x800}, 0x4}], 0x1, 0x8000) r4 = socket$inet(0x2, 0x1, 0x5) r5 = socket$inet(0x2, 0x7, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0xce, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000001000000000000000000000000000000000000000000000000000000000000000fefffffffeffff0700000000000000000000000000009900000000000000000000048234681a4fe700000000000000000000000000000000e3ffffffffffffff000000c06862d14b4f1b900000000000000000d6e4c277e58216bb000000000000000000000000000000000000000000d82a5fe8e35575d6b21df01307db9ebd632b6a5e061eccb0b225d47b326fa2e0500c2c1251008cc31e488c3a0bff5d04023312c1d660"]}, 0x146) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000580)) recvfrom(r3, &(0x7f00000000c0)=""/128, 0x80, 0x1ffd, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[], 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 568.766024] binder: 26680:26681 ioctl 40046207 0 returned -16 [ 568.805440] binder: 26680:26682 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) [ 568.812703] binder: 26680:26682 got reply transaction with no transaction stack [ 568.820274] binder: 26680:26682 transaction failed 29201/-71, size 0-0 line 2762 [ 568.838188] binder: 26689:26690 BC_ACQUIRE_DONE node 746 has no pending acquire request [ 568.852267] binder: BINDER_SET_CONTEXT_MGR already set 06:40:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x1000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x3, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 568.861446] binder: 26680:26681 ioctl 40046207 0 returned -16 [ 568.880266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:40:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 569.076466] binder: BINDER_SET_CONTEXT_MGR already set [ 569.089031] binder: 26711:26718 BC_ACQUIRE_DONE node 748 has no pending acquire request [ 569.108006] binder: 26714:26716 ioctl 40046207 0 returned -16 06:40:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x4000000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') accept$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000680)={@local, @local, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000900)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @local, @local}, &(0x7f0000000a40)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000cc0)={@rand_addr, @empty, 0x0}, &(0x7f0000000d00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000d40)={0x0, @loopback, @remote}, &(0x7f0000000d80)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000028c0)={@rand_addr, @multicast2, 0x0}, &(0x7f0000002900)=0xc) accept$packet(r0, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003200)={{{@in=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003340)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000003440)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003740)={@local, @dev, 0x0}, &(0x7f0000003780)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000038c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000086c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000087c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008800)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000008900)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f000000fd00)={@empty, @remote, 0x0}, &(0x7f000000fd40)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000fe40)={0x0, @remote, @remote}, &(0x7f000000fe80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000fec0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f000000ff00)={@empty, 0x0}, &(0x7f000000ff40)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000112c0)={@broadcast, @local, 0x0}, &(0x7f0000011300)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000011940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000011980)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000119c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000011a00)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000011c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000011c80)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000126c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000012680)={&(0x7f0000011cc0)={0x98c, r4, 0x320, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x144, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1, 0x3, 0x1f885c30, 0x5}, {0xfffffffffffffffb, 0x3, 0xa9a, 0x4}, {0x0, 0x5, 0x5, 0x2}, {0x5, 0x0, 0x4, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x59f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x250, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000000000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x50e0}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r16}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x756}}}]}}, {{0x8, 0x1, r19}, {0xfc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x218, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x10001, 0x1ff, 0x1, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xa88c}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0x128, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r32}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r33}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3f, 0x100000001, 0x100000000, 0x5, 0x0, 0x0, 0x86280, 0x2, 0x0, 0x7, 0x2, 0xfffffffffffffff9, 0xffffffffffffff49, 0x5, 0x4, 0x10001, 0x101, 0x9, 0x8cb2, 0xffff, 0x4, 0x3f, 0xffff, 0x1, 0x7, 0x6, 0x7, 0x9, 0x1, 0xee9b, 0x80000001, 0x5, 0xfffffffffffffffe, 0x400, 0x80000000, 0x3, 0x0, 0xfffffffffffffff7, 0x4, @perf_config_ext={0x1, 0x1}, 0x2, 0x4, 0x8000, 0x7, 0x1, 0x3ff, 0x3ff}, r35, 0x8, r1, 0x2) dup2(r1, r2) [ 569.154842] binder: 26714:26716 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 569.318633] binder: 26730:26733 BC_ACQUIRE_DONE node 751 has no pending acquire request [ 569.395227] binder: BINDER_SET_CONTEXT_MGR already set 06:40:21 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558b0f750d1d38818ee49c4de44217acc2e5ddacae95c3c9205d3d4ec34f553e8be8a52c0d22a20af818b2a1ea9ad6eb17d06a5b9be2529ffa4535dc435f3a359333eda902ccae20c598458afe2f499c3e9d5692c48b4d29a54ebc5d05f19e03000000e8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc290ae852623c134c9875ce04a1d19"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x2, 0x0, 0x8202, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0xfffffffffffffffe, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x34000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x400000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="a7d00f2a13f978f5ac594574c18a658995107ee6672ed763c90aad99968183b3042fe5658058950847ee7c7c5d7351c5631b2375c9ca18f70bea2309263c1fb08a57336f1d9a0b0e385c7fe9fe856b4002211a661e0c0f24aa83c437b609292b9fbf3d44f38aeaeba7001fd37409715efa9e6d4c9c0c85d372ac0f0a80f2041816c85bc79b22175241f793ae15c32f1e88027f08d326b52ce31f47850e1715eefe1437dfdee69e8dbd3855039ba5488e5d7cbd1b4ddce4af0dbc5a1e286d571d64d35afbea78fac23bd9072abb4b0b82eda7d77a", 0xd4}], 0x1) [ 569.424424] binder: 26735:26736 ioctl 40046207 0 returned -16 [ 569.443479] binder: 26735:26736 BC_ACQUIRE_DONE u0000000000000000 no match [ 569.457612] binder: 26735:26737 BC_ACQUIRE_DONE u0000000000000000 no match [ 569.528327] binder: 26740:26744 BC_ACQUIRE_DONE node 755 has no pending acquire request 06:40:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x165) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000400)=@srh={0x3f, 0xe, 0x4, 0x7, 0x1, 0x8, 0x4, [@empty, @ipv4={[], [], @loopback}, @empty, @loopback, @local, @ipv4={[], [], @local}, @dev={0xfe, 0x80, [], 0x1f}]}, 0x78) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r4, 0x1e8}, 0x8) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100, 0x0) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000140)={0x81, 0x1}) bind$llc(r3, &(0x7f0000000080)={0x1a, 0x307, 0x7, 0x5, 0x8019, 0x8, @random="7c63557081d1"}, 0x10) 06:40:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:22 executing program 4: syz_open_dev$vcsn(&(0x7f0000000940)='/dev/vcs#\x00', 0x30, 0x602) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x80001, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x2b, @broadcast, 0x4e23, 0x4, 'sed\x00', 0x8, 0x80000001}, {@broadcast, 0x4e24, 0x0, 0x0, 0x6, 0x100000001}}, 0x44) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1fe}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0xc6, "0af13634a7c7051afdf1c0e4a385e58664debe824dda24bf4f9c3331f78b8f717e2a7a5b66d7f216acac53a6c56c1f5d319073a16c6c1c18f6af39c442fd785a2f24c0c9cf38776b836451e17de297637cbade4ef9e30e91c9b192310c84172bee0ccf96d18e656547f2ae67a9ce2594fb97df4ae246e28f6ee298d77be95822d9570d0a76e845c3909005bdc3945d92462298c558068b31ad3bc42726bdea6afa3c9ceefc5d7332bac18b9819cedb8c3ff83f8a919f5c39eb690224d137a75a1898f4826522"}, &(0x7f0000000340)=0xce) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000800)=0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574cb3b02000000000000bd6800", 0x43732e5398416f1a}) recvfrom(r0, &(0x7f0000000840)=""/116, 0x74, 0x10000, &(0x7f00000008c0)=@l2={0x1f, 0x1, {0x8, 0xffffffff80000000, 0xe0, 0x4, 0x6, 0x10001}, 0xffff, 0x9}, 0x80) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x10001, 0x2}]}) getsockname(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000003540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)="3bb1ebaf5060f3cc32567b5df3bbb4cd099b1d2cc8395cb33e7ba92e0484de3ffd2d4e01d8cc054ad01dd291ad745cdc824eb38c5ad766107af6327420c4375810b09898db8dccc89cb4fb6f032a7d7d", 0x50}], 0x1, &(0x7f0000003a40), 0x0, 0x800}, 0x4}], 0x1, 0x8000) r4 = socket$inet(0x2, 0x1, 0x5) r5 = socket$inet(0x2, 0x7, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0xce, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000001000000000000000000000000000000000000000000000000000000000000000fefffffffeffff0700000000000000000000000000009900000000000000000000048234681a4fe700000000000000000000000000000000e3ffffffffffffff000000c06862d14b4f1b900000000000000000d6e4c277e58216bb000000000000000000000000000000000000000000d82a5fe8e35575d6b21df01307db9ebd632b6a5e061eccb0b225d47b326fa2e0500c2c1251008cc31e488c3a0bff5d04023312c1d660"]}, 0x146) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000580)) recvfrom(r3, &(0x7f00000000c0)=""/128, 0x80, 0x1ffd, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[], 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 06:40:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff7f00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)="b2bb96bbf63e16c104642073ccdbad2630157e6f2e07050432bcef52321168963ce9537732acb9c58450de4e2def5cc1d25f8f0295d62bd29ef9ad9aaa9a2359314901d506431b22afb803b99d95be3fa380ab46c9888dbd1bb028e875f132bdae4dad6e0ea53e3fb0de80a15c588434410de9953c1675551d68e52dd59b3c92") getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x7, 0x10, 0x410d, 0x9}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x390, 0x4, [0x400, 0x7f, 0x10000, 0xfffffffffffffff8]}, &(0x7f0000000300)=0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) r5 = dup2(0xffffffffffffffff, r4) setsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000100)="727ef2af1d6553dc2a4eb69061bc57320311c40df23cc2e581f5d8858c57c32b92770f47d2f0f9ea87f7f2e63047cb88a0cb92045b9c774837a16d13540043a47836d75d0e05ee136aff3eda7dc9ef974a5643da48a13593eaf58b2be6aab9062884fe74a4d0f3c7cb8589", 0x6b) fcntl$setpipe(r0, 0x407, 0x3) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 570.164736] binder: BINDER_SET_CONTEXT_MGR already set [ 570.165529] binder: 26758:26766 BC_ACQUIRE_DONE node 757 has no pending acquire request 06:40:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000040)=[@fda={0x66646185, 0x4, 0x1, 0x40}], &(0x7f0000000080)=[0x0, 0x48, 0x0]}}, @register_looper], 0xe, 0x0, &(0x7f0000000240)="2836d1a4383936a81b1e77af65a2"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000002c0)="3e0f01bfb2000000c4e201a6f866baf80cb86411b780ef66bafc0cecb805000000b94cc8191e0f01d983c3070f20d835080000000f22d8653e362e0fc7589ff0215cbcdfb9800000c00f3235000800000f30b9800000c00f3235000800000f30", 0x60}], 0x1, 0x2, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0xffff, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0xfffffffffffffff7}, @efer={0x2, 0xa800}], 0x2) 06:40:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xeaffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 570.213416] binder: 26761:26768 ioctl 40046207 0 returned -16 [ 570.224619] binder: BINDER_SET_CONTEXT_MGR already set [ 570.245996] binder: 26758:26766 ioctl 40046207 0 returned -16 06:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 570.298444] binder: 26761:26774 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 570.407439] binder: 26794:26795 BC_ACQUIRE_DONE node 760 has no pending acquire request 06:40:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffffa1, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x100000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x40000008) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 570.475856] binder: BINDER_SET_CONTEXT_MGR already set [ 570.515699] binder: 26794:26795 ioctl 40046207 0 returned -16 [ 570.648292] binder: 26802:26808 BC_ACQUIRE_DONE node 762 has no pending acquire request 06:40:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf00000000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e21, 0x1, @mcast2, 0x4}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="21d796ec5e93b78ff4b0947bbedf136ce10e7201fd39f11d0400080dfc7ce63d8c10407d355e2eddf7aff39d509b6e828a913ffd0aa010fbb0434552058be46abe47dbc3a6d14a79354ae42ff93a922347421ed1208dd175172e759d3e7ae467510e13cd4d35aa625d6ff2b3dee3c67f5fd6b896c64427aaff87259bc80b9a91", 0x80}], 0x1, &(0x7f00000002c0)=[{0x70, 0x1, 0x10000, "98a30932b5155aa933909c7f6f8b3d4b95c3cd8156766e0f676c63346d0c24afc919bffa5718c716151f13d9a049549aea76bff8092bbedad950f9d019d997a6224ff343728f7fd0c0fb8c1af02c8745daaccb248622d45d9decf0"}, {0xf8, 0x115, 0x8, "befa6c658737d6da3dcfd4590b6fcccbc149609e99d696acba064c4544c96d0065de681ce514a2db5d29c70fb3fc4f72b240d04d38ecda816d239b91a4188897400011b4898320ba0e5744b3f7ff78217deb53a54d3401a3508c3c5d5312763a3f9c9ddab5fabe9327769c7136e90fa0233e8554f6fb0d75aa281ff502542c6aee017b5816d2ab4487609b89294e9c73bd556ba80924a7b4325c59ab0a21afdcbd8ed0cfac80292a1ed5bf83f9d9ae5a7055265d07ad9d7a2d4534d9938676036e91ee1c7abe26b96a694e681f6b62b966af8bdd0452a21581e90f5d216a2e69c4ea833c"}, {0x28, 0x1, 0x3, "8bfbd80d111e4c6f5fcd9afc6e529ce47574db0c"}], 0x190, 0x1}, 0x4) listen(r1, 0x1) r3 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x7, &(0x7f00000008c0)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setpipe(r0, 0x407, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x0, 0x0, [{r1, 0x0, 0x8}, {r1, 0x0, 0xffffffffffffffe1}]}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000240)=""/94) dup2(r1, r2) 06:40:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer2\x00', 0x80005, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55c4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 570.803836] binder: BINDER_SET_CONTEXT_MGR already set [ 570.828147] binder: BINDER_SET_CONTEXT_MGR already set [ 570.838155] binder: 26814:26815 ioctl 40046207 0 returned -16 [ 570.853465] binder: 26819:26821 ioctl 40046207 0 returned -16 06:40:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xeaffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 570.888563] binder: 26819:26821 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x40030000000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) socketpair(0x10, 0x0, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r0, r5}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000006c0)=""/81, &(0x7f0000000480)=0x51) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r8, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000240)=0x80, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x8, 0xfffffffffffffffe, 0xff, 0x6, 0x0, 0xffffffff, 0x20000, 0x9, 0xb, 0x7, 0x0, 0x8000, 0x1, 0x3, 0xbd61, 0x401, 0x0, 0xabfe, 0x0, 0x6, 0x7, 0x80e, 0x3, 0x9, 0x6, 0x6, 0x0, 0x3, 0x641b65ec, 0x9, 0x5, 0x9, 0x7, 0x5, 0x3f, 0x3e, 0x0, 0x2, 0x1, @perf_config_ext={0xd9b, 0x1000}, 0x8000, 0x7, 0x887, 0x4, 0x4db47b49, 0x5, 0x9}, r2, 0x0, r0, 0x0) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0xe}, 0x1d, r3}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2500, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000080)={0x9, 0x4, 0x800, 0x3, 0x2}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000380)={0x7d, 0x0, [0x6, 0x401, 0x8, 0x4]}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r5) 06:40:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x40000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 571.052497] netlink: 'syz-executor0': attribute type 1 has an invalid length. 06:40:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x18b}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 571.146991] IPVS: persistence engine module ip_vs_pe_dip not found [ 571.167427] binder: BINDER_SET_CONTEXT_MGR already set [ 571.179373] IPVS: length: 81 != 24 [ 571.211727] binder: 26854:26855 ioctl 40046207 0 returned -16 [ 571.222233] netlink: 'syz-executor0': attribute type 1 has an invalid length. 06:40:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x80000, 0x0) r2 = getpgid(0x0) socketpair$inet(0x2, 0x7, 0x4, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20}}, 0x1, 0x8000000000000004, 0x3, 0x54c7, 0x100000000001}, &(0x7f0000000340)=0x98) openat$cgroup_int(r1, &(0x7f0000000840)='io.bfq.weight\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000380)={r4, 0x5}, 0x8) recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/153, 0x99}], 0x1, &(0x7f00000006c0)=""/247, 0xf7, 0xfb}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000800)=0x80000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000009c0)={0x1, 0x8007, 0x7, 0x2, r4}, &(0x7f0000000a00)=0x10) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000940)) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000008c0)=ANY=[@ANYBLOB="030c00001c0000000700000000020002060000000100000081000780070000000000000096a78e390426a9afacbb0e36bdd789bb8c8fa6e249a2190052ad8cc5a5ac472ac89317"]) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000003c0)={r4, 0x3}, &(0x7f0000000400)=0x8) bind$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000980)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000880)=0x210041, 0x4) r9 = dup2(r6, r8) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000000440)) 06:40:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 571.306661] IPVS: persistence engine module ip_vs_pe_dip not found [ 571.337474] IPVS: length: 81 != 24 06:40:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x77, 0x0, [0x0, 0x0, 0xffffffffffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000004c0)=0xeffe) r3 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x4800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0), &(0x7f0000000600)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYBLOB="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"], 0x2) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x800, 0x700000000}, 0x2) getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000005c0)="6d6fb993353075192adc756e74737461747300") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1c, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x0) personality(0x4000009) 06:40:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x91050000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5cccdf2493e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e80800000000000000c689dfce3c6054665f905f846f702b845c9a37ee1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640), 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x18000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x4, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0xfffffffffffffe68) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x1, 0x4, 0x0, 'ppp0'}}, 0x25) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x80, 0x9, 0x100, 0x400]}) dup2(r0, r1) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/159, 0x9f) 06:40:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf00, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 571.562242] binder: BINDER_SET_CONTEXT_MGR already set [ 571.572338] binder: 26886:26887 ioctl 40046207 0 returned -16 06:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9effffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xffffffea, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@loopback, r2}, 0x14) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 571.782012] binder: BINDER_SET_CONTEXT_MGR already set [ 571.790728] binder: BINDER_SET_CONTEXT_MGR already set [ 571.805870] binder: 26913:26915 ioctl 40046207 0 returned -16 06:40:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 571.828898] binder: 26911:26912 ioctl 40046207 0 returned -16 [ 571.834413] binder: 26913:26915 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xa6b4, 0x5a, 0x2d, 0x1, 0x3ff, 0x855d, 0x1, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x40, 0x156, 0xfffffffffffffff8, 0x7}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r1, 0x1}, &(0x7f0000000300)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') sendfile(r3, r2, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) 06:40:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000100)={@hyper}) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 06:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:24 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000104000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a25eb721df3043dc0e9912df53917ba5c18b183e46cad504b2b97ef40bb379fa50000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x400300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x3f000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 572.290828] binder: BINDER_SET_CONTEXT_MGR already set 06:40:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x9effffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffea}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 572.323143] binder: 26944:26952 ioctl 40046207 0 returned -16 [ 572.336892] binder_transaction: 23 callbacks suppressed [ 572.336901] binder: 26944:26958 got reply transaction with no transaction stack [ 572.349899] binder_transaction: 23 callbacks suppressed [ 572.349916] binder: 26944:26958 transaction failed 29201/-71, size 0-0 line 2762 06:40:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xe4e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0xec, "36d3c6c7ae0aa970af3cf195e91fefdaf1d475f4137335b862c6355407a169e34b8014a94a2009b839b5afdcc8eddca46651c934914b764eeb8fb915680c84077cd6f50aac2e8aaac2716eb0634d7d6a391e38491ebb26a56df9d8e92d56c891f6268bf30984d55dc7c56d43afa45eb87943953b4f8c04a8273c3e15140875f183f688463bb6e13f0bb2e6d9f3e094873b3761c26d6d4f848a4c14dd6b2b1bb67908d2756284f2ff70bbd5fdd62eb90d230af6ffca9e009e9c459f190fca3e89ccdf6d27d255782e0613c6c2ff7a870c8259144d6ed5b5645d409884f7f60e830748b787991f310b50c6411b"}, &(0x7f00000001c0)=0xf4) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xa32, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000600)={0x0, 0x801000000cf63}) r5 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) r7 = request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000480)='\x00', 0xfffffffffffffffb) keyctl$revoke(0x3, r7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x2, 0x200, 0x9, 0x0, 0x3, 0x100000000, 0xffff, r6}, 0x20) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x20}, 0x3}, 0x1c) 06:40:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x181540, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x6, 0x7f]) dup2(r0, r1) [ 572.424082] binder: 26961:26962 got reply transaction with no transaction stack [ 572.431795] binder: 26961:26962 transaction failed 29201/-71, size 0-0 line 2762 [ 572.450884] binder: BINDER_SET_CONTEXT_MGR already set [ 572.460514] binder: 26944:26952 ioctl 40046207 0 returned -16 06:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:24 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xa6b4, 0x5a, 0x2d, 0x1, 0x3ff, 0x855d, 0x1, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x40, 0x156, 0xfffffffffffffff8, 0x7}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r1, 0x1}, &(0x7f0000000300)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') sendfile(r3, r2, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) 06:40:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x591, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 572.600361] binder: 26975:26976 got reply transaction with no transaction stack [ 572.608001] binder: 26975:26976 transaction failed 29201/-71, size 0-0 line 2762 [ 572.652414] binder: BINDER_SET_CONTEXT_MGR already set [ 572.659581] binder: BINDER_SET_CONTEXT_MGR already set [ 572.680598] binder: 26975:26976 ioctl 40046207 0 returned -16 [ 572.686160] binder: 26983:26984 ioctl 40046207 0 returned -16 [ 572.723493] binder_thread_write: 1 callbacks suppressed [ 572.723504] binder: 26983:26984 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.736086] binder: 26983:26984 got reply transaction with no transaction stack [ 572.743578] binder: 26983:26984 transaction failed 29201/-71, size 0-0 line 2762 06:40:24 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xf0ffffff00000000, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2b, 0x2402) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth0\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r0, r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x10001) 06:40:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x591, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 572.862292] binder_thread_write: 12 callbacks suppressed [ 572.862303] binder: 26991:26993 BC_ACQUIRE_DONE node 792 has no pending acquire request [ 572.876136] binder: 26991:26993 got reply transaction with no transaction stack [ 572.883671] binder: 26991:26993 transaction failed 29201/-71, size 0-0 line 2762 [ 572.898391] binder: BINDER_SET_CONTEXT_MGR already set [ 572.909424] binder: 26992:26994 ioctl 40046207 0 returned -16 [ 572.930250] binder: 26992:26994 BC_ACQUIRE_DONE u0000000000000000 no match [ 572.937359] binder: 26992:26994 got reply transaction with no transaction stack [ 572.944908] binder: 26992:26994 transaction failed 29201/-71, size 0-0 line 2762 06:40:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000104000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a25eb721df3043dc0e9912df53917ba5c18b183e46cad504b2b97ef40bb379fa50000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0xfcffffff, {0x1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffffffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 572.973083] binder: BINDER_SET_CONTEXT_MGR already set [ 572.983842] binder: 26991:26993 ioctl 40046207 0 returned -16 06:40:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x7, 0x2) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x20000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) inotify_rm_watch(r1, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r3) 06:40:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x300000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000000840)=""/11, 0xffffff65) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x37, 0x8000, 0x88a, 0x3091, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000013c0)={r1, @in6={{0xa, 0x4e21, 0x7650, @mcast2, 0x9}}, 0x5, 0x7f, 0x400, 0x6, 0x80}, &(0x7f0000001480)=0x98) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x1015, 0x7, 0x4, "76648acf79d053d4c5b764098f4cb14e", "cb04529f9c3f4e669b2f69f7b7c863719617140e68cd619789757e976e375583091307ef367812d70de09482848dbb34ffb50f387520dc7d6ad4c87505f1db995e2a10cc0daea6a612ebebc10f3a6d0a448498becb8a21112c13f7324df172157b83544219597c46c7649df7d30d6d436e04aa9cb82ec4b59448adbcd8b78def4360c3da17c60620e97674c12d3cf78c96256daee48c953b9d9b5c337946d0e03a7f9405d524c68750299270f107a2f896f7a4ed9a2a790e7d830ff9f76117dd2d7cc0c81b18397bd13900229ff1132c2bb062d66381751398a0df13443c77bff5508108f18b37af598c0eec9aef206f043ab8f9ef1895731f3f9fe747ac487be75e56cb9baf6e870cb6d6d7972301d3ad20603b4f491bb4edaeb28cd3cfebb75a1495f5eff79f42d144df163572c6020412b3bc47ab4a6e0281f531d7e4d88834b52d0fa56501c2ef5f77d40d10d72e6af5d693d3c6a53bba989ea0e5fb7bad6ba69cb91df25d05017bb721a7aed4af30e4670c104410af2d26c4450241df53ca1b7a9a1383cce3ffdb8a9a16aacc0b0e8c1a754ccb1bb9479ea7b09ced4cbf7ffba2d6383d2cc37ef5be2675d0d8f073e48aa78b9ecaf0203e23e2860b361446c4ee232482ca586bb77a928a4c6401e078588ac730216b77787d6f5aa3c043e3eb814857439fe4103011a3b7afcaea6beaeb948193a085040dc13cf0fbf047dc3c6d564ba83cea8aa6f04817918441e6de9cd81720c52aa92644ace72e4dfdebc5a0f80faa3bad2318b52ac419345d97dd5dfb466f2eff3620965e6c039bb681c7b15ac74a14e3573c661d5f4e496358ae8581e36b1c66cc7fac2923a07fa333bd9572d2222c416b238f5668486d12c47fb405877f89e67b80122558fc31dec238d49e84231b1d90c1a949d2bd76de08d954efbbef0136b7c8508f8cf1432a361f592723f3712da5325fb6eb09f8904317b96e615a4e58d775270b17e7e65374c727a40007e49254bd35f6f0f34ea519f061a651e8385ea119735349183ca862a3536f50cd510ae1ec3aaaac51305768519965d4ec7e3c806d648be98790056900f0c1b9471af0af967db34393f4863e802a0780c5b7b96d999fe7a92f6eb2bda6a6b7f0509c9764aa49e39dfb5a79ad4d9c047a85bdd34e022bfa673cd929ae19e54e867d1f888c440c314e8d729ff139c1a0735dbd3423f624aecaa7c930c2af79213151f2281da357444c24742dc493f8e5bbeed61aef1eb0622654ffc8265a75a4fc26c15b2a5a9647981eff36f076f41c4acf911e9f85f3812dab46aa9436e9fa55bcb2f1962f9c5ea06420ae200cb22ceec82f2cc544d345b266b76337e0d1d760be6050d38e96cfbaec971638dcd438e811b712b819033738d04719c1938b742a1dcb37392cb38afe16244a357c18a03a6c8798a9889dd698f810b0520b27d2a300b0fc313e94d95bc27803eaf4a87b5f83373a2ed27903be7aa83a4b2ca34f8a4b1e2270e72c2a340e304e2b15316ee811bc130fe11aa3875d3e3e642f96f4471969cd0460a6e3aa3226441499ad66e2270323954d81fd2c3ed44fdc5e900d48af4748db133e3c3f4ee8b00e5e879041f67c9b4f614f3e739a215ff3658c078ff79cfa32a548747c5ab197a58455bb142a26f87bc1b9034b33d581fea2d1bc665eb2e95b06a252cf760f9f591ab7cc6571237e714258c0ff2008536bb67e844e1a0a9a4f559a3c8d1f797be2ece55957eaa4dbd0e5b3efcbeccb5a4e0c7b595b042e47d36262d5f5aeaf50f3158346642c5383ff8abc407c42415a698ea43b93ac992dcb093f88e0908954c70c79882cf1598772584aacc14115edcb1199a88344168cf864c96af70d1fc22bacd3f437c3a9bf3be43b764371b692f27f84813c391c9d004a8bc6f5b8b4a78ffe946ae0c655ea3b68eb906a3a379045055a67aefc17b2ba1200c59021c412cf076611d2ff69b4e17bfae86bae00a657b51677e1dd8de0469945ed3acd14cfad8f69068d4ccaebfc5ea0b0b055845fb08ad3db3933b3b23c87f20790bdd3c6bbbf4244192493d5df7fb46cfa99a7d14ed23be81d589a4121c887a5e4734dcce7639b3a732534f9b800b8c0908ce79fd55790e1801845cf36662d4c0ecb22bcd14328c528ed23ceccc7e390813b594386dc10d903161eeab29ce95da49cf061671cba9204c2d85f719e4ef1ef97f4c13499e3d9478c412c150928049859584eca9f4981b93a57cfa5fb9b013a3f27e155b620fe1203fae3ecee6f398c68bbeb0f0a1fbfedc4d2c6269d2123bf066807b2b6d0376b91c28628cf424752e33d2185ed81baebe63646853316bf40395c103e7356f05cf022da9c0ea52ff79cfc2bbb8824ff899df19dc1603dcc4b790b79fe4383b120f61acf4ba3414ae2d79a98f95ef1b5033c5748ffbe841f46640db0244ccc8bf4606c6ee91ebbf4bbe249b630d6637ddf99f3eaa27107fa4006d24032736b2b310f1f679f0174341b42238d232b13a50ca610c090f069787fe34c205ea2ff8f24dbd77ed46f19b20790dbb25d3ea9754b27958f2c0b5ce87dacf05b17e6a108ad0e5d28b40bdadb106813d7ad1af33ac3eb681112c9f8f3f164b3a75a45f9a586e8812b3108d191b0e98f1bf6d9fc842a6686fa6da82feb7ccdc3257ab446b36c87f19dcf652602b4495b30132c3ffc29c41835df737b038968d109331e9604ff01732faa4e9d0ecd60fb87bc12688eb306b05dbfd784e9a0ae2eefaa400a6038a63bf1e74c273285ff209a7793ae647775e155383734ac841a67e09d54c59fb11aef115b008415400b76dcb78b5e9e8b5d144ee9e40727a2bb89a16c474e455b6d7a3a84e75e41c754d680d09c7af878fcfb1bc63fb1248a9fa2d417f6074cd9bf584d4883f7f93653aa08e0a1e718b4b7b1b6fe89dc134cae6229859827c6cde568b757b3b1415ccb79d7bfb320142de20815286ccc6a67f808e92f3dfc735309bb9e78401506bf142084eb830a2193a9b64ef2149852cd092c16f707b2009b485039975705d3876c2f2a4234474b7644e6623b1d571599a90a90caf60586896af12d3f0778145ce1b69ba87da0503f56d0182a4650d84df441513edd107a91aee99d4c2e1110525c993ef9ca00f8250a6c628f0870e638ee06d35148cb19f53afc0a247a7f8690c23cedcd1f0eb086e860754572bfc44e9c1bb5500e7cba8fad38b05c8f13fec39fe744299046d7e34c0a3b9ac1b4a9bad3ced4c3544d9bef92cc46bf088994fc25389b3309ab0a883008580ccca23d5d4303cf54ac2ddb7920269ad5b97d97f696659300e9160760c1d00a295eadf1482f0cac4b2adf52244c4aa7169da1e7ad8b852b1442e3081964c94c8ee1b895ea0c357f27ea132ffc6a288bbd0bc79fe2a8bc8a54a17cfd2731d87d44f43f838077c84710e33df55ad36d9b6e16f8687ead80b7aabd31c972f17c03f737fb6978108911e0a2232738c0810221fbd700c1dc0f382b3a613be118a957457b198ede158214f2407e6c7f16a83bc8b50b242f931e1aff9144f4de0e6fdc7da07d08ef61cb6f0b64230eb2f9170bc3e3808d254924d7c7b89c30c1400af788e079b4acf28e928534f17f7e1f3ef288c1f33aa9db6e466871b9c510d0e8047ef3b50dae6305d6f0f8a95d247842635890e1e348d420bb5ab24bb8398e6f107edce120537f37d1da4e2f7174dbfc54f2879f75461eafdd48c623574f1f6810e6c8c22c864f5f9d221c8ebcc872b111cf86dbefe8941415210e03c7e7ad2126149a1f134e45d242237c684ae38fe82f31f5369c4ff94e88fa31f76ad762e996083a8160608697aff5a63185d32d8ff5430d3eba7d99947495ebc3b7d0ef0f7316b94da40aeef2073fde3bfd84315141ae4b4ea1fa0d40c4483a8bf4b16678e4591fcba4ce3923e9100517cd5fcf3cafe3f5b4daeaa5fc74ecacb462648312425114bbcd81669b62b4d8332edeabdd56259af1cb114630885c852c168aeb81cefbf8a82c28b0aec08e338bafff0cdb0c7efd7a45d0ea51d3f5ffa92f4585ed87d618553080648971cad66ddb65723ecb9f92dba4c03ac46162202612bd7f169615a7315a4914f37231966113e91b662819705dbe51bfeb92a7ce2617edd1cabede71c43933ec6469c24eea7ce80d47f6e0923115a9b3d8d22b3983c80cb499118edee77ecb5ba69ab2da841cb7210a0033a9222eebe6b2acf2d8af4be99c791ed7fca229c7b219bc5fa81ac021f97acd7fdd59304dc77947a8bcdb622e5cae9636eecfce18c35451a7852fe5c81e01e7fa528849524ef0cea742cf89bfdcd233e7df5e2dea73b7dd1610d3ec23e685333d28147daa919ec69d16141446880223d13f28cfe0935a23c8dbf2ac2d32274a83061dd7c047caae51d32869bd6fe958acfc0569a69b5a5c37180d5c295d91b16b56a57a7aa43b512a66062f1c7069c7ac194687964fcc499554a0a432fc719e5809e1db35b75a5be4eb5b71e4d220e41bce7e0c225795db8b502c4b902f35234ec0540d0d53a8be1b0d06230a571ec6d3c1b38495e085b3205baaf8a408098c992e542d9d7a38ee60d631d33b2032f1c9f5d6a97d4b84d4c8809578bd9bae49a4b2eb8bbddbc73aca626f026d431f8e679ef1a7761f099cc41006bff1168cdf8c6c8b1ec8674b4f829ff00648b1b40a227bb2e9cfeafee674d8c8a2b74ed11640259adcc77fe84cc8dac7a4db335a9bed8bcd1f6c9d99dea4d814984698cab16f20e023dd2158a35d54cfa313a516806a4eabeb11e430dbb468a18739f91ecc4e61d6f00ea30f4709eb7b72df3b9fe2c5272427e01507f02a5d95e5daf9c78f629de458cec7d829cfc26b2a8fb4ca6c9600350a8be478e88e709a5b7ebfde9fe295134ef7732a8ada357f72d17eb70b3ba3f0d47197c5729589e96c964923be58ae6673be5941e8d4466d6877ba9f1e33ca889d4190ed6a85c1e91befa2484b6126b3276868de2ba3ef98824988598dba68ec1f7821448988b4df5810b53aff2098b49a5b4ef135d648d913748a281abe73ea567a6e02fe2907bba72852b1e8b444aa9ecf8196f0be2423b13f316ca812e34e618ee03b47f4e39ae99d5600d97946bc1ae6e5e5419a803a42f5f52f00a03eeff8e7317200288c3a98c2158d11d2f297fd3901b2d81e84f260640b2c05acac8fc164c6802657dcd89f58646fdd0bdaa4cfb87fdca5073e72dc6edc1d98ce8a6dc5eb28eaa104c16e985db7fe4e72b4d8f5525693c9bcb6d957ca67178b9be8febae951d062a3e891a9cf622f2362e11d6b79ace9efd99bb805dcff11cfd79f36fdc38ba3d73c74eba065e859f72815a5bd559cebd255e133cded1087631adf32d57ffd44697bcf3a28b27eaba84d0f75fa7320e060978fd8eaaf2e7b0dc0d31c497be002119081407d1b7d17c14813a187d1b25d62d55bdaf7c75b437add8aee28e954565f71549ce04dee7a115bfe6e0c3d561b06aa64e6072cbce467786bee3239ef82a952a1402b5981d5bc6c2b5cb7603281f59f19938249771faf8d85db67e738e827b0e627aaae35216d2b468956414c1249001e80b4d2b3005c69d8fa106c525d807e1bd6b975388d8cb9aeae4ae644cb48f5d465823e7437689d1e9fe9d9833147325d3e1250e83465ed72d80d5df998d94d1e5a71e46e44f54a8608fe80809d134d6e8192ffa38f736dbcf704c49bb47299a79f7a543055eff85d2031a1cd857942f03cb28dccaf69f92d2d2949a9881f9ffb410ba66a89e74c3de4e691389275"}, 0x1015, 0x1) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) [ 573.356381] binder: BINDER_SET_CONTEXT_MGR already set [ 573.361791] binder: 27027:27029 BC_ACQUIRE_DONE node 795 has no pending acquire request [ 573.370103] binder: 27027:27029 got reply transaction with no transaction stack [ 573.377616] binder: 27027:27029 transaction failed 29201/-71, size 0-0 line 2762 [ 573.378560] binder: 27028:27030 ioctl 40046207 0 returned -16 06:40:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x8b01000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 573.415568] binder: 27028:27039 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.422716] binder: 27028:27039 got reply transaction with no transaction stack [ 573.430255] binder: 27028:27039 transaction failed 29201/-71, size 0-0 line 2762 06:40:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x8002}, 0x1c) syz_emit_ethernet(0x437, &(0x7f00008bbfba)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x401, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @dccp={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "24a589", 0x0, '~9\f'}, "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"}}}}}}, &(0x7f0000775000)) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) write$evdev(r1, &(0x7f0000000040)=[{{r2, r3/1000+30000}, 0x15, 0x0, 0x2}], 0x18) 06:40:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}]}) dup2(r0, r1) 06:40:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 573.539318] binder: BINDER_SET_CONTEXT_MGR already set [ 573.571199] binder: 27028:27030 ioctl 40046207 0 returned -16 06:40:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) r4 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="b877706e981aa1aa437a18a75208d82dc4785c6e8f7ff81571cf5d32ef383274b96e3793b70768fa8336a744fed137d1f4ff02022374bb64a95f6eed6d3f7ea82a75ce3204e5e3c9004d5ab4e064953f8a9eae7d524da34f31873e39066a2e305157bc3711655e7e9a8611ced186", 0x6e, 0xfffffffffffffffb) keyctl$instantiate(0xc, r4, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffa) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x297) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 06:40:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x8}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 573.659153] binder: 27063:27064 BC_ACQUIRE_DONE node 798 has no pending acquire request [ 573.667478] binder: 27063:27064 got reply transaction with no transaction stack [ 573.675040] binder: 27063:27064 transaction failed 29201/-71, size 0-0 line 2762 [ 573.732620] binder: BINDER_SET_CONTEXT_MGR already set 06:40:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) syncfs(r2) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xcb, 0x80000) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f00000000c0)) [ 573.761546] binder: 27072:27073 ioctl 40046207 0 returned -16 [ 573.794927] binder: 27072:27073 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.802104] binder: 27072:27073 got reply transaction with no transaction stack 06:40:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0xffffffffffffffff, 0xee01]) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = getgid() fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x5}, [{0x2, 0x4, r3}, {0x2, 0x1, r4}, {0x2, 0x7, r5}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x4, r7}, {0x8, 0x6, r8}, {0x8, 0x3, r9}, {0x8, 0x2, r10}, {0x8, 0x0, r11}, {0x8, 0x1, r12}, {0x8, 0x3, r13}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x3) 06:40:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9effffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffea}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000002c0)={0x3, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="7a0af8ff75257009bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000e29162fb06fc3702202313bbeb01f45d251f098669bfb1127c"], &(0x7f0000000100)='GPL\x00'}, 0x48) gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000000000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0e64d082778c3938", &(0x7f0000000380)=""/85, 0x700}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0xfffffffffffffffc, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESOCT=r0]) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x9, 0x1}, 0x14) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) [ 573.809673] binder: 27072:27073 transaction failed 29201/-71, size 0-0 line 2762 06:40:26 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0x6}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfcffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000080200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@ipv4={[], [], @local}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, @local, 0x1ff, 0x37, 0x6, 0x100, 0xfff, 0x0, r2}) 06:40:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xa1ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='posix_acl_access/\x00', r0}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x3}}, 0x30) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r2) [ 573.940771] binder: 27072:27078 BC_ACQUIRE_DONE u0000000000000000 no match [ 573.974430] [ 573.976574] ********************************************************** [ 573.983428] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 573.990327] ** ** [ 573.997101] ** trace_printk() being used. Allocating extra memory. ** [ 574.003955] ** ** [ 574.010826] ** This means that this is a DEBUG kernel and it is ** [ 574.017602] ** unsafe for production use. ** [ 574.024583] ** ** [ 574.031394] ** If you see this message and you are not debugging ** [ 574.038160] ** the kernel, report this immediately to your vendor! ** [ 574.044921] ** ** [ 574.051727] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 574.058668] ********************************************************** [ 574.153347] binder: BINDER_SET_CONTEXT_MGR already set [ 574.164727] binder: 27103:27109 BC_ACQUIRE_DONE node 802 has no pending acquire request 06:40:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfcffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffffc}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x9, 0x80000) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r1, r2) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x8, 0x9f, 0x401, 0xbee, 0x3, 0x1}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000800)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="b02453cd4122b265ad0cc15acada4e88d8d75e4366dbc93a99aff54f8f5bbffa280d79d2567f7e770ad85b460586684090f30c1d96f6d9d3b33dce8850b6c1d44c08dc0d739916ca852abfbb7d8d78de8e057adaddb8c141e08cce7ed456abf07b987342e240e6500055b6969a972174fbcb742f7de4ccd20c418d1b079c24b113b054b32bd0e9450075e5ab740a906544", 0x91}, {&(0x7f0000000480)="9e944da5fb340c857ab8772a326d1cf0d360b782610bba708ca9822f35dca18cf60eecc0338bb749ae977e5d6c416abdd377cdbf8162854534b42a56fc950b4b931104c98fe2f3a959a5010f6b73e3fe88867b7fbfd73d6c828c4db57ea57c971bbe5f658983223e887f832eee625e755900dcaa65b408ba6c68a52dbc4fcabfb3196d4ac01b3c04f7073649bdd3508dd568c1d4c4eaf5326d00c59d96ba5393203e295977a29678b7f3fbdda306f6152e78a11400647243f9c2fcf153b10f8c37534c93be81c544001aebd6ecf056961dafb8d077799029077ec786332773953d6294973565a5ccb12061bf", 0xec}], 0x2, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r3, r0, r3, r0, r3, r1, r3]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x68, 0x40}, 0x20040000) [ 574.194689] binder: 27101:27107 ioctl 40046207 0 returned -16 [ 574.232788] binder: 27101:27107 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 574.354101] binder: 27125:27129 BC_ACQUIRE_DONE node 806 has no pending acquire request 06:40:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xa1ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x34000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 574.456871] binder: BINDER_SET_CONTEXT_MGR already set 06:40:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 574.497638] binder: 27136:27137 ioctl 40046207 0 returned -16 [ 574.534924] binder: 27136:27137 BC_ACQUIRE_DONE u0000000000000000 no match [ 574.611369] binder: 27149:27150 BC_ACQUIRE_DONE node 810 has no pending acquire request 06:40:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000002c0)={0x3, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="7a0af8ff75257009bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000e29162fb06fc3702202313bbeb01f45d251f098669bfb1127c"], &(0x7f0000000100)='GPL\x00'}, 0x48) gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000000000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0e64d082778c3938", &(0x7f0000000380)=""/85, 0x700}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0xfffffffffffffffc, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESOCT=r0]) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x9, 0x1}, 0x14) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 06:40:26 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000740)="6e65f42f616e796b61737436002269afb008126a119243eaeedb79e81671bdcef582") 06:40:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x2, 0x3f, 0x7, 0x4, 0x8}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x3, 0x2, 0x5, 0xffff, r3}) dup2(r1, r2) 06:40:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000040)='mime_type$$/cgroupprocselfppp0\x00', 0x3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="623a7ae1c6b3"], 0x6) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:40:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 574.908895] binder: 27167:27168 BC_ACQUIRE_DONE node 812 has no pending acquire request [ 574.921584] binder: BINDER_SET_CONTEXT_MGR already set [ 574.951728] binder: 27170:27171 ioctl 40046207 0 returned -16 [ 574.977799] binder: BINDER_SET_CONTEXT_MGR already set 06:40:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff9e}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x0, 0x101200) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x86b4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80000, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/4, 0x8000, 0x800, 0xd0}, 0x18) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendfile(r1, r4, &(0x7f0000000100), 0x1ffe09) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000140)) [ 575.003225] binder: 27170:27171 BC_ACQUIRE_DONE u0000000000000000 no match [ 575.014414] binder: 27167:27168 ioctl 40046207 0 returned -16 06:40:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}]}) sysfs$2(0x2, 0xffffffffffffff49, &(0x7f0000000040)=""/234) dup2(r0, r1) 06:40:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfcffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 575.160428] binder: 27193:27195 BC_ACQUIRE_DONE node 815 has no pending acquire request 06:40:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 575.207715] binder: BINDER_SET_CONTEXT_MGR already set [ 575.245278] binder: 27198:27200 ioctl 40046207 0 returned -16 [ 575.276341] binder: 27198:27200 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:27 executing program 0: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10800, 0x0) [ 575.312411] binder: 27198:27203 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:27 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x100000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000840)={r2, 0x40000000000, 0x0, 0x4000000006, 0x800, 0x1000000001001f}, &(0x7f0000000180)=0xfffffffffffffc5e) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)={{}, {0x0, 0x0}}) flock(0xffffffffffffffff, 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r5], 0x1) getegid() r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000740)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000ac0)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000a40)="34657468305e0a170833891ceb00") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r9, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34fdc0d9}, {}, {0x0, 0x0, 0x0, 0x21df}]}) dup2(r0, r1) 06:40:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000200000084) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x101, 0x90040) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x8000000000000009) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000640)={0x2, 0x7, 0x0, [{0x0, 0x81, 0xac1, 0x9, 0x8, 0x7ff}, {0x3f6, 0x5, 0x1, 0x65, 0x800, 0x8, 0x6}, {0x0, 0x7, 0x6, 0x1, 0xdc1, 0x8, 0x8}, {0x10, 0x9, 0x1, 0x1, 0x4e58, 0xf14c, 0x3}, {0x0, 0x35, 0x1000, 0x4, 0x8000000000, 0x1, 0x6000000000000000}, {0xd88, 0x81, 0x3, 0x101, 0x6, 0x4, 0x7}, {0x1, 0x2, 0x0, 0xfff, 0x1, 0x1ed, 0xfc5}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/113, &(0x7f0000000340)=0x71) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000840)={0x5, 0xd6, "4a08cabf4c1da7b12be3095b755b4ae3b64cce186ba786dd5c38ad2b24402d6e59d7a3e791856f4440099266c05a741d0466b816201527545f6970bc9903a944a639cb5fdf563e3f47b34f09379476858b90401a672aec4fdba17f24682936702b9ddd77df44be63ae0573b7d811274b5cd2fdf17b4d81d7e3994ade833e5f45d3b51429667c1bac217ff35e01b17f9412e989fb4fc9784acde24a9e5a160f418ffd76a42c3e3c186399de003f4ca4ebe51d185ff234d84e94673880856411a155f7d5992bd190c86b361ae8195eda3d488cf884b9db"}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000400)="796df5e9e41d6bbbd6740c48ad50222d769efa6d95a9464915bf59d4e6d23fa742b5f04dc0acfab8295f6c099faaf6824d841816d23f2f7219c42cc480f0f7614009fa8a9c9362fe8b7747b7b3417f8e5b72f8a0d01d7155b3267e73bce7c4cad52922c20da26f3efba1bc15de0e2ac456005f99872703465a90c9579d625f653253b72f738869f46d3c0f96694fa1033b8b276ea1590eaca0") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', r3}) connect(r2, &(0x7f0000000380)=@xdp={0x2c, 0x1, r4, 0x19}, 0x80) 06:40:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xeaffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff7f}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x3d3, 0x80000000, 0x1, 0x10000, 0x2, 0x3, 0x2, 0x1, 0xffffffff, 0x100, 0x7f, 0x3, 0x20, 0x2, 0x0, 0x2], 0x0, 0x400}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) r2 = accept4(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000100)={0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}]}) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000000001400000086dd606f87a900183a00fe80000000bbff0200000000000000ff000000000000000100000000000000d7d3b8ba16ded11956e95bc7eb5f80e509b765af8f0c"], 0x0) [ 575.576506] binder: 27218:27219 BC_ACQUIRE_DONE node 819 has no pending acquire request [ 575.576563] binder: BINDER_SET_CONTEXT_MGR already set [ 575.630910] binder: BINDER_SET_CONTEXT_MGR already set [ 575.633955] binder: 27216:27221 ioctl 40046207 0 returned -16 06:40:27 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) socket(0x8000000027, 0x0, 0x0) r1 = dup2(r0, r0) munlockall() epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000000c0)={0x80000002}) 06:40:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9effffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xa1ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 575.677324] binder: 27218:27219 ioctl 40046207 0 returned -16 06:40:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x3978) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x7fffffff, 0x2, 0x4, 0x5a9f}, 'syz0\x00', 0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x40, 0xa, 0x0, 0xa0, 0x3a, r3, r4}, {0x8, 0x400, 0x3, 0x8, 0x97, 0xed3a, 0xfff, 0x4}, {0x7fff, 0x100000000000000, 0xffff, 0x5}, 0x20, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3502, 0x2, 0x0, 0x80000001, 0xeb18, 0x9, 0x3}}, 0xe8) 06:40:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004580)=[{{&(0x7f0000004300)=@sco, 0x80, &(0x7f0000004500), 0x0, &(0x7f0000004540)=""/28, 0x1c}}], 0x1, 0x0, &(0x7f0000004680)={0x0, 0x989680}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) dup3(r2, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2, r3) 06:40:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x8b01}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 575.832441] binder: 27249:27250 BC_ACQUIRE_DONE node 822 has no pending acquire request [ 575.899360] binder: BINDER_SET_CONTEXT_MGR already set [ 575.938013] binder: 27253:27254 ioctl 40046207 0 returned -16 [ 575.968592] binder: BINDER_SET_CONTEXT_MGR already set [ 575.999690] binder: 27253:27254 ioctl 40046207 0 returned -16 06:40:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000740)={r2, 0x2, 0x273, 0x2, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:28 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f0000000100)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000000c0)=""/18, 0x12}], 0x5, &(0x7f0000000640)=""/194, 0xc2, 0x6}, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={0x0}, &(0x7f0000000780)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000b00)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='attr/fscreate\x00') execveat(r3, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000b40)=[&(0x7f0000000900)='{+*eth1cpusetem1*]\x00'], &(0x7f0000000a00)=[&(0x7f0000000980)='/dev/kvm\x00', &(0x7f0000000b80)='/dev/kvm\x00'], 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={r1, @in={{0x2, 0x4e21, @local}}}, 0x84) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup2(r0, r2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000ac0)={0x6000, 0xa000}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$setendian(0x14, 0x2) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000a40)={[{0x3, 0x401, 0x6, 0x2, 0x8, 0x1, 0x1, 0x21, 0x0, 0x8000000f289, 0x3, 0x7, 0x1}, {0x0, 0xfffffffffffff8b7, 0x4, 0x9865, 0x3, 0x5, 0x6, 0x2, 0xffff, 0xfffffffffffffffe, 0x3e, 0x67, 0xfbe}, {0x4, 0x1000, 0x1, 0x166, 0x399f, 0x7f, 0xfc, 0x80000000, 0x8, 0xfffffffffffffffa, 0x10000, 0x5, 0x6}], 0x800000000}) 06:40:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff9e}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 0: socket$inet6(0xa, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0xa6, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x2}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x100, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendfile(r1, r3, &(0x7f00000002c0)=0xf, 0x80008) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000480)={0x0, 0x7}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socket$inet6_sctp(0xa, 0x1, 0x84) [ 576.269989] binder: BINDER_SET_CONTEXT_MGR already set [ 576.288861] binder: BINDER_SET_CONTEXT_MGR already set [ 576.306224] binder: 27270:27278 ioctl 40046207 0 returned -16 [ 576.315534] binder: 27267:27269 ioctl 40046207 0 returned -16 06:40:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) dup2(r0, r1) [ 576.483941] binder: BINDER_SET_CONTEXT_MGR already set 06:40:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xa1ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 576.510404] binder: 27294:27295 ioctl 40046207 0 returned -16 06:40:28 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x0, @broadcast, 0x0, 0x0, 'sed\x00'}, {@broadcast}}, 0x44) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)="883e824f5a4cdab2503b34049084445ac9cba58223482977e49a16235a8a0babbd7a55d26558adb5570000ed67e30818fd59d0fba127ec60058b58a64794de7cf8d9594ae4e1fd391cf2f16c92e8e47de6ee9fce17c31205c547e852e4f2e734c4f0c0b65cd7c7b092f800ccdf8caae5839eccd5f3bdd76440886c707f4a61a5f16c45c6157d38c200d72c4a86e926") getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)="766574000000000000000000bd6800", 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{}], 0x117, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e24, 0x0, 'lblc\x00', 0x20}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x0, 0x511f}}, 0x44) 06:40:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908b267f29c8eb481dd3dd4012c7788fbb2b7d02100000000", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x8b010000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r0) 06:40:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffff0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x682002, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) 06:40:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 06:40:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="d1"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x1) [ 576.901641] binder: BINDER_SET_CONTEXT_MGR already set [ 576.907871] binder: BINDER_SET_CONTEXT_MGR already set [ 576.935793] binder: 27321:27327 ioctl 40046207 0 returned -16 [ 576.943125] binder: 27319:27326 ioctl 40046207 0 returned -16 06:40:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x40000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:28 executing program 4: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x32) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) unshare(0x2060400) execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 06:40:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 577.109792] binder: BINDER_SET_CONTEXT_MGR already set 06:40:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffa1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 577.151203] binder: 27351:27352 ioctl 40046207 0 returned -16 06:40:29 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:29 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x400, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x0, 0xfffffffffffff001, 0x3, 0x2, 0x10001, 0x9}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000140)={0x7, 0x80000001}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x36, 0x1, @tid=r3}, &(0x7f0000000200)) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_execute_func(&(0x7f0000000240)="8f28209e0d04ec00000e8fc9789bb600000000f390f00fba3e3d470fae4f00c441e573f0570fde81090000002e98c442f9a6a0020000003e652e0faef8") ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000280)={0x40, 0x0, 0x6, 0x8001, 0x9, 0x7}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x4, 0x1, 0xff, 0x4, 0x2, 0x20, 0x100}, &(0x7f0000000300)=0x20) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000340)={0x400, 0x20, [0x7, 0x8, 0x9, 0x3, 0x8, 0x4, 0x1, 0x4]}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) nanosleep(&(0x7f0000000400)={0x77359400}, &(0x7f0000000440)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) lookup_dcookie(0x6, &(0x7f0000000540)=""/80, 0x50) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={0x0, 0x4f, "9619e4252a04b4e78c0d70b1ac7d3385959a2dc5ca0fee446e12a1edd0bbc2e39698440241128a5a00f7600461ca03b934c11c1fec369ca298175d03d07b241e7659233395ab4136e3ed4502114057"}, &(0x7f0000000640)=0x57) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r5, 0x8, 0x6, [0x5, 0x3, 0xfffffffffffffff8, 0x3, 0x0, 0x8]}, &(0x7f00000006c0)=0x14) mkdir(&(0x7f0000000700)='./file0\x00', 0xa) r6 = syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0x7, 0x20c1) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000780)=0x80000001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000840)={0x9, 0x108, 0xfa00, {r7, 0x4b, "b47d1c", "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"}}, 0x110) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x4042, 0x0) write$P9_RCREATE(r0, &(0x7f00000009c0)={0x18, 0x73, 0x2, {{0x60, 0x3}, 0x10001}}, 0x18) write$UHID_CREATE(r6, &(0x7f0000000ac0)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000a00)=""/152, 0x98, 0x8, 0x9, 0xfffffffffffffffc, 0x8001, 0x7}, 0x120) 06:40:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r1, r2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = getegid() fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000240)=[r4, r5, r6]) 06:40:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x100000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x40030000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"000300000000000000973f820f7c4000", 0x80000101}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20081, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x101) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x9, @remote, 0x2}], 0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0xae16, 0x66}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(r0) [ 577.429549] binder_transaction: 26 callbacks suppressed [ 577.429559] binder: 27372:27375 got reply transaction with no transaction stack [ 577.442671] binder_transaction: 26 callbacks suppressed [ 577.442704] binder: 27372:27375 transaction failed 29201/-71, size 0-0 line 2762 [ 577.457179] binder: BINDER_SET_CONTEXT_MGR already set [ 577.472146] binder: 27374:27383 ioctl 40046207 0 returned -16 06:40:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)="9f19e9d665b72581b345fa6bedeb74213dd7785a22814a340c72dffaf1c7e58259573cd94d85a34ec5d8d9409c160d38859b05a2a5f77f39de0576a9300ad4add8e69592c9b45e5ca1b2f28b586d98c585c9e2ea99b76be59154ddbefa9d5d024fef281342b321b165ed910d9fb08e8255abbe78e82219f4202a0d1583f0979b758a7e2d0ed96bbbe9576773a78c5490e9ae1b6490707bb58def80b28da7eafeff2f0dc64a0cae059dd12b831d7b8d8beadb92") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280)}}}], 0x0, 0x0, &(0x7f00000000c0)}) [ 577.494006] binder: 27374:27383 got reply transaction with no transaction stack [ 577.501611] binder: 27374:27383 transaction failed 29201/-71, size 0-0 line 2762 [ 577.541664] binder: BINDER_SET_CONTEXT_MGR already set 06:40:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfcffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x3ff}, 0x0, 0x0, 0x1bc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153e0f34488dd25d766070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0xd, 0x3e00000, 0xfffffffffffff800, 0x3, 0x4c58}, {0x0, 0x0, 0x5, 0x0, 0x4}, {0xc0000000, 0x1a4b, 0x9, 0x0, 0x4}]}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000100)=""/86, &(0x7f0000000080)=0x56) sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) [ 577.563451] binder: 27374:27383 ioctl 40046207 0 returned -16 06:40:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x30000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 577.649510] binder_alloc: 27396: binder_alloc_buf, no vma [ 577.655226] binder: 27396:27397 transaction failed 29189/-3, size 0-0 line 2970 [ 577.662791] binder: send failed reply for transaction 847 to 27396:27397 [ 577.691193] binder: BINDER_SET_CONTEXT_MGR already set [ 577.715477] binder: BINDER_SET_CONTEXT_MGR already set [ 577.726679] binder: 27402:27404 ioctl 40046207 0 returned -16 [ 577.727106] binder: 27406:27408 ioctl 40046207 0 returned -16 [ 577.740814] binder_thread_write: 8 callbacks suppressed [ 577.740827] binder: 27402:27409 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.753398] binder: 27402:27409 got reply transaction with no transaction stack [ 577.760940] binder: 27402:27409 transaction failed 29201/-71, size 0-0 line 2762 [ 577.771625] binder_alloc: binder_alloc_mmap_handler: 27396 20001000-20004000 already mapped failed -16 [ 577.808871] binder: 27406:27408 BC_ACQUIRE_DONE u0000000000000000 no match [ 577.816088] binder: 27406:27408 got reply transaction with no transaction stack [ 577.823584] binder: 27406:27408 transaction failed 29201/-71, size 0-0 line 2762 [ 577.834390] binder: BINDER_SET_CONTEXT_MGR already set [ 577.863810] binder: 27396:27397 ioctl 40046207 0 returned -16 [ 577.885850] binder_alloc: 27396: binder_alloc_buf, no vma [ 577.891560] binder: 27396:27416 transaction failed 29189/-3, size 0-0 line 2970 [ 577.896496] binder: BINDER_SET_CONTEXT_MGR already set [ 577.909569] binder: 27406:27408 ioctl 40046207 0 returned -16 [ 577.955497] binder: 27396:27412 got reply transaction with no transaction stack [ 577.963176] binder: 27396:27412 transaction failed 29201/-71, size 0-0 line 2762 [ 577.999804] binder: undelivered TRANSACTION_COMPLETE [ 578.005091] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.020540] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.036693] binder: undelivered TRANSACTION_ERROR: 29189 06:40:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000840)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)="0200") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x401, 0x2, 0x81, 0x8, 0xbd7, r1}) ptrace$pokeuser(0x6, r1, 0xbe, 0xf30) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r4 = dup2(r2, r3) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r6 = getgid() write$FUSE_CREATE_OPEN(r4, &(0x7f00000002c0)={0xa0, 0x0, 0x8, {{0x4, 0x3, 0x9, 0x7, 0x8, 0xdf, {0x3, 0x2, 0x9, 0x9, 0xfffffffffffffffe, 0x1a, 0x3aa2, 0xfffffffffffffdde, 0xffffffffffff0000, 0x100, 0x22bc, r5, r6, 0x7fffffff, 0x77b9}}, {0x0, 0x2}}}, 0xa0) 06:40:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffff0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:30 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f0, 0x9, 0xf, 0x900, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x4}, [@typed={0x8, 0x92, @uid=r1}, @nested={0x1d4, 0x52, [@typed={0xc, 0xf, @u64}, @generic="c722b03ade8cfeb199916609826d25287f9e3580da8378", @generic="8596b0dd5e38f582d05cda9e6fee0581c0d827b77d2c9681c7ddead51e19e10643837b1ec6fbc159b55d0969113070470ee5e0884a7e8ddf85f2c70f31db6670dfcd374eb879a09b33107b4f0d2f070ce87fc23a0bfafb44827624fe066a136e65ad413eb2d19ef95095a18dff0dcc68c68a8d7c7838e44a086a17889f741e53f1b7742872b92770cd83cb51150fbb5fd365d95e01e6efe8810e2dfccf2fa2ed7a818a", @generic="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", @typed={0x8, 0x6e, @pid=r2}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() ioctl$sock_ifreq(r3, 0x89b5, &(0x7f00000000c0)={'\x00', @ifru_names='veth1_to_bond\x00'}) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000100)=""/29, &(0x7f0000000140)=0x1d) [ 578.049795] binder: undelivered TRANSACTION_ERROR: 29190 [ 578.102930] binder_thread_write: 7 callbacks suppressed [ 578.102941] binder: 27421:27423 BC_ACQUIRE_DONE node 853 has no pending acquire request [ 578.116708] binder: 27421:27423 got reply transaction with no transaction stack [ 578.124253] binder: 27421:27423 transaction failed 29201/-71, size 0-0 line 2762 [ 578.139866] binder: BINDER_SET_CONTEXT_MGR already set [ 578.163345] IPVS: length: 29 != 8 [ 578.172381] binder: 27425:27431 ioctl 40046207 0 returned -16 [ 578.187298] IPVS: length: 29 != 8 06:40:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0xffff) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x27, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001ec0)='./file0\x00', 0x0) 06:40:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x200000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffa1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 578.206881] binder: 27425:27431 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.214104] binder: 27425:27431 got reply transaction with no transaction stack [ 578.221622] binder: 27425:27431 transaction failed 29201/-71, size 0-0 line 2762 [ 578.251331] binder: BINDER_SET_CONTEXT_MGR already set 06:40:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=""/2, 0x2) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 578.309807] binder: 27421:27423 ioctl 40046207 0 returned -16 06:40:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/77) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xb3, "b104fdbae9df34af5f4079007490880411f6c7152ccb90a6e4d921e93bfddf6af09607656cc980b0548d010309c34ab93f430b1a3c9311689926c707b2bb5050a378fca41d956d39b3e8a70653f15fdfc570f41636917673df8bd96ae8a975acfe542dd489be9339abf08392bbde180a9f3970df1f2b738a4d2c0640f4b533a58fef28bf46595afc967fffdd144356ccfad63d98034d7ba105fd475dfd8d35060b1b6aa6847fa532b48ce64ba9b460c8b0555e"}, &(0x7f0000000240)=0xbb) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r3, 0x1, 0x9, 0x4, 0x3, 0x6}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) 06:40:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x200, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/127, 0x7f, 0x5, &(0x7f00000004c0)={0x77359400}) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) unshare(0x400) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000005c0)=0x10) clock_gettime(0x0, &(0x7f0000000ac0)) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000340)={'tunl0\x00', @ifru_data=&(0x7f0000000280)="6825eaeb60cbadfb0538d56a746b5e7bae03aec5ae042cf1cff1f18f0bffe14e"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000500)={{0x0, 0xaf}, {0x7fffffff, 0x2}, 0x4, 0x0, 0x157c}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000300)=0x0) io_cancel(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x101, 0x0, 0x1}, &(0x7f00000003c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000bc0)=""/4096) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000400)=ANY=[]) syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x80) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, {0x0, 0x10000, 0x0, 0x0, 0x6, 0x5}}, 0x8) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) clock_gettime(0x9, &(0x7f0000000200)) [ 578.457568] binder: 27457:27458 BC_ACQUIRE_DONE node 856 has no pending acquire request [ 578.465859] binder: 27457:27458 got reply transaction with no transaction stack [ 578.473439] binder: 27457:27458 transaction failed 29201/-71, size 0-0 line 2762 [ 578.508260] binder: BINDER_SET_CONTEXT_MGR already set [ 578.598340] binder: 27457:27465 BC_ACQUIRE_DONE u0000000000000000 no match [ 578.600654] binder: 27457:27458 ioctl 40046207 0 returned -16 [ 578.605640] binder: 27457:27465 got reply transaction with no transaction stack 06:40:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x14) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, 0x12, "cbf19bec46c0088c57c7dbe24e64f0371804"}, 0x18) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x2000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:30 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xffffffffffffffb5) socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="13a686243a7e629fe1a212a229cc5771860f15f1fede0d3888d740a3f25d087b0f50121183c6998fe7b31899a6df6be8ff5e12f59b3090aa38"]}) close(r1) 06:40:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000008c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], 0x0) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x4, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x4}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='GPL\x00', 0xe2, 0xfb, &(0x7f0000000300)=""/251}, 0x48) [ 578.874386] binder: 27482:27485 BC_ACQUIRE_DONE node 859 has no pending acquire request [ 578.882756] binder: 27482:27485 got reply transaction with no transaction stack [ 578.897443] binder: BINDER_SET_CONTEXT_MGR already set [ 578.939894] binder: 27483:27484 ioctl 40046207 0 returned -16 06:40:30 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0xb84a7fb4268bae2e, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100000000000000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x204cfd1fd45212e4}, 0x10) dup2(r1, r2) 06:40:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3f00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x2000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x140) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) inotify_init() sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffff77a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x40, 0x600000000, 0xffffffff, 0x3, 0x3e, 0x4, 0xc2, 0x40, 0x2e9, 0x4, 0x6, 0x38, 0x2, 0x0, 0x200, 0x1}, [{0x7, 0x7, 0xff, 0x8, 0x2, 0x1, 0x69d, 0x80000001}, {0x1, 0x1, 0x7fff, 0x0, 0x10001, 0x8000, 0x2, 0x100}], "042c88ef85dd736c1e05aab838997eb0d8fe22e3e2d3418cf6f1a6d42ad12eb3429b96a9464af3d16907b9caa8ba18b77391c2b09db63bd929921cbb0304499a3d427e8a1c92e0910b0d59607db8eba33aab0cffa2b632d91228e952bdcac196ba3e49150990aedaffc74b403501aeafb0df02613370317bcdca657e5c2633d3d4c4b4df0656ff4b8cae81d1737fe4a5268e66a66a29ea8a7a3c3b4cf93b94c0c11aee025bb1a5752423dbaf07d6f9cdc04e39fd4a647bb4c824197f8f208b8d485684e53e54db7dc50ea08c600883e1677c3067819f86ec2591f050beb092569faf", [[], [], []]}, 0x492) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) [ 578.985023] binder: 27483:27484 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.015155] binder: 27482:27498 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, 0xfffffffffffffffe) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000280)={0x6, 0x73, 0x9fe, 0x9}, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000300000000000000000400000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000"], 0x58) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}) r3 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x84b}, &(0x7f00000000c0)=0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) write$cgroup_type(r3, &(0x7f00000002c0)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x8}, 0x8) [ 579.166001] binder: 27517:27518 BC_ACQUIRE_DONE node 863 has no pending acquire request [ 579.182486] binder: BINDER_SET_CONTEXT_MGR already set 06:40:31 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000003900)=[{{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000100)}}, {{&(0x7f0000001b00)=@pppol2tpv3, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000001c40)=""/255, 0xff}}], 0x2, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 06:40:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffffffffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 579.210942] binder: BINDER_SET_CONTEXT_MGR already set [ 579.238198] binder: 27517:27518 ioctl 40046207 0 returned -16 [ 579.238589] binder: 27519:27522 ioctl 40046207 0 returned -16 06:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 579.323883] binder: 27519:27522 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 579.389622] binder: 27542:27543 BC_ACQUIRE_DONE node 866 has no pending acquire request [ 579.460546] binder: BINDER_SET_CONTEXT_MGR already set [ 579.468997] binder: BINDER_SET_CONTEXT_MGR already set [ 579.482950] binder: 27548:27549 ioctl 40046207 0 returned -16 [ 579.498621] binder: 27542:27550 BC_ACQUIRE_DONE u0000000000000000 no match [ 579.499719] binder: 27542:27543 ioctl 40046207 0 returned -16 [ 579.519990] binder: 27548:27549 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:31 executing program 0: syz_mount_image$f2fs(&(0x7f0000000280)='f2fs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000001c0)={[{@two_active_logs='active_logs=5'}]}) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000240)) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) 06:40:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xf5, 0x202000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000640)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0xfffffffffffffff7, 0x2}, 0x90) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x100) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000700)={0x6}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r3, r4) 06:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x4, 0x9, 0x5, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x0, @remote, 0x6}}}, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0xe5cc000000000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x81, @mcast1, 0x10001}}}, 0x84) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/32, 0x20}, {&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/121, 0x79}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/109, 0x6d}], 0xa, &(0x7f0000000c00)=""/252, 0xfc, 0xffffffff}, 0x6}, {{&(0x7f0000000d00)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/250, 0xfa}, {&(0x7f0000001e80)=""/185, 0xb9}, {&(0x7f0000001f40)=""/121, 0x79}, {&(0x7f0000001fc0)=""/14, 0xe}, {&(0x7f0000002000)=""/10, 0xa}, {&(0x7f0000002040)=""/97, 0x61}], 0x7, &(0x7f0000002140)=""/4096, 0x1000, 0x3}, 0x9}, {{&(0x7f0000003140)=@ax25, 0x80, &(0x7f0000003340)=[{&(0x7f00000031c0)=""/212, 0xd4}, {&(0x7f00000032c0)=""/8, 0x8}, {&(0x7f0000003300)=""/9, 0x9}], 0x3, &(0x7f0000003380)=""/117, 0x75, 0x5}, 0x4}], 0x3, 0x0, &(0x7f00000034c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003500)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000003600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003740)={@multicast1, @multicast1, 0x0}, &(0x7f0000003780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000037c0)={'team0\x00', 0x0}) r10 = accept4$packet(r0, &(0x7f0000003800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003840)=0x14, 0x800) getpeername$packet(r0, &(0x7f00000039c0)={0x11, 0x0, 0x0}, &(0x7f0000003a00)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40080006}, 0xc, &(0x7f0000003e00)={&(0x7f0000003a40)={0x3a4, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x200, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffc00}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffe3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x519}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0xb252, 0x0, 0x40, 0x9}, {0x7fffffff, 0x80, 0x2}, {0x9bfc, 0x3, 0x18b6c137, 0x80000000}, {0xfffffffffffffffa, 0x3, 0x9}, {0x8, 0x9, 0x6, 0x5}]}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}]}}]}, 0x3a4}}, 0x40) ioctl$KVM_NMI(r0, 0xae9a) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000003e80)=r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003ec0)={'vcan0\x00', r3}) r13 = fcntl$getown(r10, 0x9) ioprio_set$pid(0x2, r13, 0xe28) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000003f40)={0x2, 0x401, {0x57, 0x5, 0x400, {0x9, 0xfffffffffffffffa}, {0x1, 0x2}, @cond=[{0x1f, 0x4, 0x8000, 0x6, 0x81, 0x5}, {0x1f, 0xffffffffffffff76, 0x3e, 0x9, 0x100000000000, 0x7f}]}, {0x53, 0x255a, 0x1f, {0x3, 0x3}, {0x7f, 0x5}, @period={0x5b, 0x1, 0x1, 0x3c, 0x81, {0x9, 0x80, 0x1, 0x6}, 0x5, &(0x7f0000003f00)=[0x4, 0x37dd631c, 0x81, 0xffff, 0x45]}}}) getsockname$inet6(r0, &(0x7f0000003fc0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000004000)=0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000004040)=@assoc_value, &(0x7f0000004080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000040c0)={r1, @in6={{0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0x1a}, 0x1000}}, 0x1000, 0x401}, 0x90) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000004180)="32074d0b4614eba67bf6abf6e282cb24246e0908b18d386d90b45c48f66613a8b2af3a286370ee2c850a64933919") sendmsg$rds(r0, &(0x7f0000004640)={&(0x7f00000041c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004340)=[{&(0x7f0000004200)=""/61, 0x3d}, {&(0x7f0000004240)=""/251, 0xfb}], 0x2, &(0x7f0000004500)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0xffffffff}, &(0x7f0000004380)=0x303, &(0x7f00000043c0)=0x6, 0x4, 0x80, 0x800, 0x1, 0x40, 0x5b}}, @rdma_dest={0x18, 0x114, 0x2, {0x200, 0x3}}, @fadd={0x58, 0x114, 0x6, {{0xffe0000000000000, 0xfffffffffffff800}, &(0x7f0000004400)=0x2, &(0x7f0000004440)=0x4, 0x6a54, 0x8000, 0x1ff, 0x8, 0x1, 0x7f}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9faf, 0xffffffffffffffff}, &(0x7f0000004480)=0x10001, &(0x7f00000044c0)=0x9, 0xb7d, 0x3, 0x2, 0x100, 0x40, 0x2930}}], 0x120, 0x4000}, 0x4000001) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000004680)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000046c0)={0x8, 0x81, {0x57, 0x8001, 0x400, {0x9, 0x5}, {0x8}, @rumble={0x5, 0x400}}, {0x51, 0x3, 0x2, {0x5, 0x2}, {0x0, 0x100}, @rumble={0x1000, 0xbff0}}}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000004740)=0x80, &(0x7f0000004780)=0x4) 06:40:31 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 579.725921] binder: 27555:27559 BC_ACQUIRE_DONE node 870 has no pending acquire request [ 579.752662] binder: BINDER_SET_CONTEXT_MGR already set 06:40:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xeaffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = msgget$private(0x0, 0x102) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000040)=""/158) [ 579.781138] binder: 27567:27568 ioctl 40046207 0 returned -16 06:40:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffffffffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 1: r0 = socket$inet(0x2, 0x805, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x3ff, {0x2, 0x4e23, @rand_addr=0x7}, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x4, 0x101, 0x6, 0x4, 0x6, &(0x7f0000000080)='rose0\x00', 0x26e6, 0xde, 0xa4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup2(r1, r2) [ 579.851143] binder: 27567:27568 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:31 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100000001, 0x3, 0x9, 0x7, 0x9, 0xfffffffffffffffd, 0x400, 0x7f, 0x5, 0x0, 0x80000001, 0x81}) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) signalfd(r0, &(0x7f0000000040)={0x8}, 0x8) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) fcntl$setpipe(r1, 0x407, 0x7fffffff) 06:40:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 579.955139] binder: 27584:27587 BC_ACQUIRE_DONE node 875 has no pending acquire request 06:40:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8004, 0x2, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)={0x0, 0x5, 0xffffffffffff3675, &(0x7f0000000100)=0x100000001}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, "6970365f7674693000000000fffffdfd"}}) 06:40:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xa1ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 580.044978] binder: 27594:27595 BC_ACQUIRE_DONE node 877 has no pending acquire request 06:40:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)="7374617409c0d2febcf9df2deac8c1c035171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_NMI(r0, 0xae9a) fallocate(r1, 0x0, 0x0, 0xfff) fallocate(r0, 0x0, 0x0, 0x10001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xf82a, 0x7ff}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x2}) 06:40:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}]}) dup2(r1, r2) 06:40:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff7f00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 580.104241] binder: BINDER_SET_CONTEXT_MGR already set [ 580.122727] binder: BINDER_SET_CONTEXT_MGR already set [ 580.129818] binder: 27594:27595 ioctl 40046207 0 returned -16 [ 580.142196] binder: 27600:27603 ioctl 40046207 0 returned -16 06:40:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x9, 0x4000000000000, 0x0, 0x3, 0xffffffffffffffff, 0x106d}, 0x183) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000bd0002000000000087018f884bbaac9ad3740000000000009500000000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x10000, 0x8, 0x1f, 0x428462f8, 0x5, 0x80}) 06:40:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) r2 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(r2, 0x29, 0x80000000000049, &(0x7f0000000080), 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r4, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r5, r6+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916aee35a07bc6d4"], 0x1) getegid() r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r9, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) 06:40:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @aes256}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x5, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), 0x4) 06:40:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x34000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 580.322980] binder: 27621:27624 BC_ACQUIRE_DONE node 880 has no pending acquire request [ 580.357604] binder: BINDER_SET_CONTEXT_MGR already set [ 580.366181] binder: BINDER_SET_CONTEXT_MGR already set 06:40:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r0) 06:40:32 executing program 0: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x6c0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0x8e3000)=nil, 0x8e3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) setsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) [ 580.384800] binder: 27626:27630 ioctl 40046207 0 returned -16 [ 580.402623] binder: 27621:27624 ioctl 40046207 0 returned -16 06:40:32 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x5, 0x7f) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820f580002de0caf608b6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be0529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c3a3f788fcbfc36068a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17077c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 580.485820] IPVS: ftp: loaded support on port[0] = 21 06:40:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) [ 580.610850] binder: 27651:27654 BC_ACQUIRE_DONE node 884 has no pending acquire request [ 580.631658] binder: BINDER_SET_CONTEXT_MGR already set 06:40:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x200000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 580.659161] binder: 27653:27656 ioctl 40046207 0 returned -16 [ 580.668982] binder: BINDER_SET_CONTEXT_MGR already set [ 580.684689] binder: 27651:27654 ioctl 40046207 0 returned -16 06:40:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:32 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getaddr={0x58, 0x16, 0x0, 0x70bd2d, 0x25dfdbfb, {0x2, 0x8, 0x238, 0xfd, r2}, [@IFA_LABEL={0x14, 0x3, 'yam0\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bridge\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x459}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x24000000) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) setsockopt$inet_int(r0, 0x0, 0x40000000000c8, &(0x7f0000000080), 0x4) 06:40:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x100000001610200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x101100) [ 580.928022] binder: BINDER_SET_CONTEXT_MGR already set 06:40:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 580.951200] binder: 27676:27678 ioctl 40046207 0 returned -16 [ 580.987453] binder: BINDER_SET_CONTEXT_MGR already set [ 581.027700] binder: 27676:27678 ioctl 40046207 0 returned -16 [ 581.124573] IPVS: ftp: loaded support on port[0] = 21 06:40:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42040, 0x20) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x6, 0xfffffffffffffff8}, {0x8, 0x8}, 0x4, 0x0, 0x1000}) close(r1) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) r3 = dup2(r0, r1) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='lo\x00', 0x100000001}) write$P9_RSETATTR(r3, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) 06:40:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x1, 0x4000}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) socket$l2tp(0x18, 0x1, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) dup2(r0, r1) 06:40:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0x2, 0x2}, 'port1\x00', 0x2, 0x100000, 0xba, 0xfffffffffffffff8, 0x2, 0x80000001, 0x9, 0x0, 0x5, 0x6}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r1, 0x4004743b, &(0x7f0000000040)=""/174) 06:40:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x100000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9105}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:33 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3cdba0665f1517141ae03301aa0295f9265e76dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 581.324584] binder: BINDER_SET_CONTEXT_MGR already set [ 581.352246] binder: 27697:27700 ioctl 40046207 0 returned -16 [ 581.380417] binder: BINDER_SET_CONTEXT_MGR already set 06:40:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xeaffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 581.417015] binder: 27697:27700 ioctl 40046207 0 returned -16 06:40:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x410000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}]}) dup2(r1, r2) 06:40:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000001c0)=0x2, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0xef0) 06:40:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 581.577268] binder: BINDER_SET_CONTEXT_MGR already set [ 581.607083] binder: 27728:27729 ioctl 40046207 0 returned -16 06:40:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x400300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 581.619960] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 581.696869] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 06:40:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x20, 0x50000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r3 = dup2(r0, r1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000040)={0x2, 0xfffffffffffffbff, 0x5}) 06:40:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e23, 0x4, @mcast2}, {0xa, 0x4e20, 0xfffffffffffffffa, @mcast1, 0x100000001}, 0x7ff, [0xf3, 0xfc39, 0x0, 0x9b20, 0x2, 0x3, 0x80000000, 0x3]}, 0x5c) recvfrom(r0, &(0x7f0000000480)=""/85, 0x55, 0x10001, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 06:40:34 executing program 4: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0x9) mount(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)="0000000000d634bc0200d0a026d712a21c7b37a70669bfa5e8027362f6ea34f4bfe59f3a559188585960fb831b0b7e435e5951529cefe4e38738abe5b8d7202bc5ffb1ef68922422c4b30ef0dd9e445acffc1dcb4255e9e4b4a67ff7e6e70b067e9c62910963397305c0b3dabda238b539992702", 0x4, &(0x7f0000000100)='!vboxnet1\x00') r0 = open(&(0x7f0000032ff8)='./file0\x00', 0xa080, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x0) 06:40:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x0, 0x9) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000740)={0xc, 0x81, 0x7e, "71756575653000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000008eeb1d5d36a076ea", 0x6a2}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 582.247282] binder: BINDER_SET_CONTEXT_MGR already set [ 582.302343] binder: 27748:27753 ioctl 40046207 0 returned -16 06:40:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x400000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9effffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000133ffc), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x202) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) kexec_load(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="ca", 0x1}], 0x0) 06:40:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x42000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x23, 0x6, 0xd3, 0x8000, 0x7f, 0x7f, 0x1f, 0x40000000000, 0x51b, 0x80000001}, 0xb) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000100)={0x1, 0x7, 0x1}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a30fffde93d71469d42420241482d44750c04a4cb3d3227d53c1c63c10cceac3d221560d3719b2bb07b479c17925f9697c3527a3fd794008e534d3dd6eae92bb81e8ba3e53aabf1c431fb477a92f1fd6bb7094f435dbca7cad7283e38b1cfbbf797270d6b45f7454ac7f8781c157694e005e128c7b6575ae5f7cb5849ac75b9ea6e113636af33a170723de4986ed77f3acc3f9760493833908a900579b311fa96c82a371949b4eebfd44b941935bad43dd38b51119126854a0b9bf57010490c9a6d90f1a790bbd74933891e37d7675f71e26913d94ac566ee597721ee07235803c656a7c3162d715d61d3428acf3204ee85b9f1ea379027a670e4b86886e597b5c0192613a80608e0b5419d463aea81f9965757afe1cde7fd2d2e555ee30834cdc1431ae2cd96e0dad5417ab89692fad5cc9def9e160cd9263ea6377459cbf62a9a0e29703ebb7682f46a0862aa38ee97f4eaa83493cfb8411333519fe6185fd876466423daa0f8bb88afe0bb6ea4f45cb52c04b946ed876548fdb3d047665e76dd2f3c7119d08d44866cc6c0665bcc0ac7cfc27624b049c00c0f4bf2eb24f54c4eb26d864bcdd4ce836ff3313a21ddb34376ea92621fb5fa5245b9bc85f0f399ddd468a8c29d4f36b88962e2a98f6a9f603af684868b38190e8176c1ee7c10db8643e55c9a90a0ef51533f1503e11ccd8fbaad5ecc2d5a1de3ee0e089ad4011c825880660c0e298a096d21a8af0d5823f54360fa47fea2d76442248e76c9eeb439771dfefe77598bca31871450021d6a7d37c6762550a9511319609a40b22b89f44408db4399a7c9fb10ec85c7ca3a76c0ca0f96f2d4e6a5d96cfa84157599cd2b8e6cdd1a11a255017635d7eb71ec891be2177215ff7554719e02adb19a8d2224e2c4a832c4e3be07d751000d1d5147a2954dc714ff0b39364a9dc207e1edbd083386cbc5670d0568d6e6733024d5c408464a9593b713cc13cd36eca957375348237ccbbb2ad50c55373d8515cf9d6853c7437adef84d83d828fca0c742fe421e9a06351ce6d5714d9f0c07c7673021d61d0c1093b4da54dd10278baa1d16d7a2cd8e38afdebe81a32df9aafe0ae44b291cc61158b39fe46252a0abc7e7e5bf836725ca0d2048683d529c9baf65d1120d3d3e74a5c28d87fd27935b57dbd14f6e6bbc80670f873a79b98a4553a8391120aa0422025642add1dbc52e230e0525f8ba6167eda2b5b38dd69a29d97459a202f850aff7fddf3836dc4c7751a4087f84f1aeb461b415822d98dca9e426f359184f7dd2d1a3029f3589cbbb086fc88936398a38704892daf2775ed113a7c7061de0a9cd2fe942aefe235f9554eb937ab965fc76994cfd015379e2b9e76ce582549edb00d8e4311e09080885ec74467a988f395d4b6c3dd3ef9ee863fb934cc511e0112be666a7e1809991f72cbcb47ed444a357dd68825ec4d04262ac87d15a4e8c60f15864d910c65dea7f9bf2a4c22091c488afa7e9576ec5354a3b328645fa79ecac55463a57e9b4148a18c0415856f399d90545b1dfdb3c3d973c74a8610a1cca89adc12d6a2887c2251954c5bb6aa11010312be14c1bf384753b7b31fb6959b4a865907919f6b16511f3c829921a20f64e275188a96abdf19c796e0f85b64a67d4040b06289b8e331d5b10afe89d212bc06c786cfdaf210e938643e6895445d07c0c56ee6b47ecfc7346ad75f39489bdc3dfd23f432433fb4b064175ae5dd0d811750fa16f9f55269353758f0a6418460dc4bca338f55b0815a33dbbe810e5574d5c56a6731e8d61f044e95155f898abd793f46c10b7660cc21b0281bdc51ed9360ef034962bfbbdebb9e4da1a7dca581b1b2e712e4804e2004e385af78a640ba381fc2ac27f6b65a5e001af08932bb888f7f5bcdcf148e1187562032d8ddf9a8ef002c8e7b5534b4a2e99557a686c42d1982232c12ffea0eed730b268c4d010439fbb9e4c5d213bb5638f23c2c9aef8b76c924d1576c5db36cf58949c10b4d885d0fe1949774bbe7ef173cacee48c467fe226d386c69422d092a1442e16af263ed9755031a18c69de44b5acbe1fc10a7c42e116d6e7a05077ebe439b5c0be0b752070ab4cef0fc0f99f0c8439c58b91ce087cff0bb947cea85ae2ea18b1c65cd8c2c11611856bc7f2229b1ec796ee3198eb7c5e75970cf06f35a265dbc0d5a26a3417fc61aeae7c3a22c19473830cf2880f0eb4a4589f662fb859ca30ff4c4c7b365089ce7495b3f387c3c1570fbecf1a6168ce6090d9ff8685f22c956e3b0c382188ede898a6c7b65c18b9e096103d5e5f3265746e86ae99d68e8aaddf417d092e82a1ceb3d4c0c07f9cb96110ae287f08d506d97ee467362f4f3b79090306e26c801c65d5b81d3129693199e2c294b3c20e9556bd1facc99abcfc789012f76e06a54becdb8b508c71a3b27559f8fb41315dea8cadd387d238f95e124e98db002da7f3099e11326a97e233600649687533120d24bbff94764306e08945cbb42d5d3b9a5a1b69306cc985a257901dc40cfad1559d556bf51b37f2182a1d855a7985e7f0a5230cff84f8f36645ad0019c69e2f6203a2235dd90afad10a82247b92dd36a1081ae7a9ca47fe678feda38542d63e662c0c307dc3d8de111dadb632eea7c258124ae22ef81f31c9bf8ada4bc49f2e4b09ea1a638cd4364fc7d1cba7695a1c1e1e5849a02b642eaaa5dc506fc50e1182f0070ecb4b248b403b5d3b70a8ea6dd29313f3894837de58cfa4c28bfdd7285c0eadb6d092932d97bf797c5184b68af54aaa096adb62ef3664e4d3e48f9139667bea7b7927bc240b77456a3b9afdd0a947ade989eb625bbc27c0465047937bbc69ce7a4702c32c7f4415dfcf38734d5b84707a7d86ea0ed5c5168b4a965330c160ef3d39c30e0db3b906b75c9d814a02f629be4a39d0e4b137ec28019c5b9bbdd8457384ea6931a92703b9753937497c5212621cfce68f34989513f3830edc415b4fe98f03ac32161856497b4704ed50eb98d322a05ef7a5a80cdf4e1d6b0637f01e3a51649b850c8a942c4580db9b8ff9b86754864e69a9d3d4c353b7770fc177bdbf7859852f5faaf229cba61697e0f785ba01520ee6e24ff92d55d110b9ce626c137a0f3a6374c70ab1faad86c510f5b4756d2cab4c0d2ecfb7dbb0b71cff63d158a3406aec9d15a661dd13123307194fab3cf8c476851c256eea446f03aa282b141fb83a9dd4c62bc629bcc8afe19121ebab716cf5c66106a993924609a319a41d431842e68666d80dfa513b9f1d9ceb3fc9ab66c1830db101f88dfb6bd6b0cab19182332ff6ffcfc7282f434ea55ce978de1bcd9d91af706b2ea94b446e3751a6d96003c6197963494050bfa8375cc47f5559894f89a7361a557618598aa5578dee5a937621c32d6658d3055bab5afc1dbf495801caba8aaef3e3af3d9e311c15415f8021742bf8505631ed1917dc5e678abf57ecbe4d4d776ba2e57cc3ec27037eda31200490062c1cfc9369cb19459b0c99400423fea155759adbd1cffb0f17024162fb14dffa762136cdd63b58ad7284086f149279651527eb2495230e281bf6618404b1e3579616d5b24297be1bb45c5797936d7988b7c301e425bd8e48f17e3e9e04b43fde572e4a1d3c544d230ff8a507784b6b39bc9c8b8aa21a0818646786cf7238c978ed9cf65ea5b3849a539cf3deef56b7461f0fbbaa00b773d6317ba2474de1a68f40a4a2f6a7c9deb1cf2dc36fd88c2f05aee094818009279afe4264673c08905e92b8d6c11b50b364a2c7bf3f44ad0eeb2f03b36fc334f1ce8008287b0128cd7300e72a2d2b90b094391227eeb5ba093eebd3650e2e7466c5ee6b37f26e051597c9bf708f35685bc049a3dcd1d6c9116f54498703cb59e9539600a71e4c8eb82be7d651356acb8762649d50ab0ccee8a34d2d98458f4df91825cb0937cfbe84a331bc3d82058ca9c8296d05476754ab11ac67278e81a504d196c497bb0c5a772a83644ac6f51a7204b51e2a8aac3383f7b908e6661d9f25a5c64f6392a58df1cc16cfafbe92bc69b3545d2bfc558e5e3763310cf908cdde98b90cd791b3b5817d6fdcd76b8b92d95f82a3e8970daee85022d3ebac9ac06efbf5e76faaf63f643cffff1c339e1df46764a9a925ea4aba925720b34297cc1b64f525faef35437dd6145f470114201e6aad9cd6c60cb19939a2a9336f9c63e1576e9a15ed082f1e537f3c930d458b39e61b48f4867c163b30ec3fd8c919dbbfe9afa33653f39af778c8284fe3af26560713e059a9e90718661ecb858ed49ce79da3c31e721f37c638f97e1bb25c6bac60a2e523f6f61c0cfc0ed3a1ba46f1b3ad46039f264cf75ad72da9fb90599aeaa0de2f049bde0afccda01d3f1c96f12a8906f781259f8c2dfa18efd6bca1754c982acebf78251ff307f402f444e2a0e484aab5e130ae39e5f44d38e44e91c6e993f510a46afe2c3e384170c1fc291adacbdec041ed4b4d8c407e6cf02700e7e37df49beee8f6617820d98a8abe4da63558ceea791b5db3c2a72e4d7f58f51b666f01e903ea45ed8a9de5cf0947b988f74fe64fe423a7b340d9dd44a0da397a15b0853209ee7a3735cc3413bd13176d2637297faf308f0c75cee8c300f319cd3f62b06ee27a010185267b7b981217a0f5d70f3c5b5bd1b77a194e49f8b11f853021afcab2d42c2976b20c5e8c4a26c3309bcbd9d791fb0bb3d5bc7e63d622a2b1fc5123d576ef5d67af20b5acc6ea43ee81a0864e51299736e3a3f152a9e71d538e2756a38df387307a28b13465099a8d726333058f37a9c225c33284f9d08c690ef2b0fd4885594b925b75c765f395987f578dcbb0c57657c19d8c37b6179b1e90ea084bee20cf44464864d20dc7268daacd582d9476e72e8ff088491c7bb75a8ab5fae7cea9bcea25d83b478726d4b4207bd87ab69fc76bf979bc3b95d992e879f2cee7f2d2900363acc9f13a9ba7760a97f5ddff2dde7334cc50465c310bd48ae1d2a49a7b499eccef9c0698bf35313587ab5d18be7fd89985c27dad32350ba273e502680d6af01cc282b8941400dd9fbbc5b8ba034b7df5ef9f6cd2d560aa4be3c05f54a8373ba01594487cb2e28b60a08877c810e6d52fd870985bed404a0161fa2f375842fe54ae29802745cebbf75146c9c3c5bac02af9436391d0b5fb30578629fcab43a6d1f964eccbea8439b01292d64940df30793b57052100dd3577af5b28aabbc143f7dfdca8cda8412525886b2dea7a4ec95c361e20748314beb7798dd052b369ef2291e4cc2bbd5f3c0440972b95088fb0385ebc89d84e0f67aa301f4379e3de00ad6a3ab964b0b45ec63934bc323f5ed082cf9df1f1227f256ba586ddd361a6ff4dbf570f93026663a3755bee024d3df0cd1a6ef4fcb425a4331e8a95a306481dbd698f0a36352985f1f25709aa1c4e44ce61635df20f29b162d2c5b432f13817b108adb38340fc98d3cb92f1ee601d06236416886249f1443ccf830378ca950d50ab7082b0fce2175a3ebd5601eed35b4c9da7da9fac76f06bc2031af6ec3b6dcd88868d8a540150c6092f1825075f1962505c3b0f6d9c808bd4e708c6a6a88f512ee81eef64ee5fd6fefdad5242f1a5e7e832868febfbd04c7b2cf92172abc8f10d6b842a0e118621eb7f1c07fc768fb25416dd9db8276e2fb53ee0b0ef53210cad25227d6de78ebf37fcd009ef3aa09d39a1f1d000cf4548cf8422dd0284a519e7a2aab818af29f3c3d31a53bb8f3500000000"], 0x1004) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r2, r3) 06:40:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:34 executing program 4: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0/file0\x00', 0xff, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000240)="ce90c36133ea90c4851695afe83f984863c23e3f8b10f3d9ae804e79699b298a4f01cf7c30a74583569c0fd1df658832002721e8166dabd947b93ba46ca76c4aee5a0e3832fb40af4e586eae93f35522301b649cecd8cb71c90561de6f7555a2c0e3143dc0832cc4fbec2f38de906d0a61bf84f1d6b79d038212b337da3799", 0x7f, 0x800}, {&(0x7f00000002c0)="d6a9cddbb45262014dcc4e8bada7d8b79784c8d0a4bed483a2b565974e5b3881093690b22ac81d1677babc89be0c5c723d803a4ce453fc32a2e90e920f96971145443281e18ffe99132bd7a6474456d2", 0x50, 0x2}, {&(0x7f0000000340)="726b20fb058b8f4ffa6fa8664e1be1a2f5054ec65a380cc451ec307ba590120d94440710c13a75379b9fdcd2eb7e2d2ed8a1fb4a1ed0195c16a7f32300d46090b36b6215e0cff30d1b29fc031cb47e3684764378c750881e31486373c6254cd13192c9622e37b50b33b6dba95cd4f47b99d3dc67455be259192730a877ba5310f8ea0b77134a4c6ecdde697591ed0f2bd25b6a02e54f87d7c8022da5bdae6e751af4a2cf94dc0a1754cbc41001d1b97218cb3de426690c74a31e4ae62fa87e291c6a669d1bd9da1383c623584e4164f77fc5ada73dde5a7f04857c157031cc97b878a5dd6536e4f029cba55e551ac7eabc624b9575cb79", 0xf7, 0x100000000}, {&(0x7f00000004c0)="90749817cba44139a2e50ae7a5bd90e7c00dd7076af623ad22ded44aafaf5918940ce432683df72469e8ed3e7d98966d2e1f10436d47dd574a3289ffe244a5a365828068bc7e56e86ffa0368a02237ac48c437c193b85e48b47340364b5221f1ab8fbfc0324004603024561dc32606836b20acbf55039772fb", 0x79, 0x5}, {&(0x7f0000000540)="4a2a973d9a2feba7de2fbde091b6539c74ba284a02243e261c4e2ce3df2d16997bd42ae7338c940b2d6412ff852237a07642158ae50287e45f0e07697ca93e036173da751722a9bcc3fb8df97922fda05a38ce038af4a54cdc892701c8c39706b862d9eb67c00b1f7bf1b4b4f4009ed6f977fc", 0x73, 0xff}, {&(0x7f00000005c0)="388db4edd76577a8e75bfcca5bdea67e1174b4dbc65cc324c4727cf8d026aedb8c6491148a75736f55c52ea5b7596e877578cd6f904fc86ef075996a61e9233922d095c910172ea25303dfee9d8f640be072433eb6905a27af00d5285b4c09ef4cc819a91768bf3d4d230859b75cda8e522cf517f6f9561af83e04564d61a0fbaed6339bc773316efacb3b3212d78e29e3a8f12e144674b60eb38c024ed253beb5f2470607d6cf091af631594f195149975e639a10be4cf237bcaac65391d8d824d1f468333fa444c29a0dbb9b3ab8643d7125d8d73dda20d0f97bc3", 0xdc, 0x5}, {&(0x7f00000001c0)="f58a66afe14ed662732a46ffb9eed7ef6a622365bf3aef98d422a89771636376b8cb9b469173be3429b3384c80aef1ffccb914", 0x33, 0x200}, {&(0x7f00000006c0)="d5268f9ed1452dfadffd9f8500bff37efc1df05b10d9371cb04db044332a336fdeb8410f85e7352c2ea4d466c33506477854eabb512b5bada36ecd8814c73fec875dbaebd4b24fa825cbf03a770e6634afaddcb0d9b7ef702a3471d12b378ca68a3eab448a23db2bbf57f0626e3e3a9f1d94454462bad8b69eb5d72286649cd7716d884c56b195ae3134649bfcfc523af3e0ec9e8fcb3f9863c2793ee5cd8f4f9c9cb94f0f2ad07f7f333c1cdbeaaaaf9cff2b555f88dffffa485a0d0977d8a0332794e570", 0xc5}], 0x80000, &(0x7f0000000440)={[{@nospace_cache='nospace_cache'}, {@nobarrier='nobarrier'}]}) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="d7310a48f6bf89059f0d4f9f9d88dd9305213088d32d89ee0c3623af5dd978e150097b6fd6cd39f5e9d04c8e5f95016c9f70300e9fb67db8aaf3065b208bcc3b5c86a2e21396e91fd011c70102000000000000002f4f180f10eb345fb7c741fe4e9adf3a7ea6506819d1cc4d2d6bab0f8bd38571bf39aa410af1d7470c24cc0372dfdf7ea1e99a612d22a9ad26e4cd5868dd000000000000000000acbfc89b", 0x9f, 0xfffffffffffffff7}], 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="3d83c12e95188b83c92aecf5603f948961c0bb1b0000009f3ef82330f90955ed6c16a3eb6289e7f546c0b4f71473b32384c259cfc024dee764df56180900000000000000746d9747e90a9dbc42c0133ff03b4f2a5ec5ef63168884a5131b020b1ad5d9ec491c34f15ac4576174c2ee290e547ae97b09a195c6c016c9a7b8e3b1c602e70bbc5e310a8df749054186bcf996b6f88b7d"]) [ 582.466352] binder_transaction: 27 callbacks suppressed [ 582.466362] binder: 27774:27781 got reply transaction with no transaction stack [ 582.479378] binder_transaction: 29 callbacks suppressed [ 582.479395] binder: 27774:27781 transaction failed 29201/-71, size 0-0 line 2762 06:40:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x15000, 0xaf, &(0x7f00000000c0)=""/175}, {0x4, 0x99, &(0x7f0000000180)=""/153}]}) perf_event_open(&(0x7f000001d000)={0xfffffffffffffffe, 0x70, 0xffffffff00100000, 0x0, 0xffffffffffff8001, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x671, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0xfffffffffffffffe}, 0x132) write$binfmt_script(r1, &(0x7f0000002ec0)={'!! ', './file0', [], 0xc}, 0xfdef) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) 06:40:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffff0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c51f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xe1, 0x102) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1c, 0x7, 0x2, 0x4, 0x13, r2, 0xd31c}, 0x2c) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000240)=@req={0x28, &(0x7f0000000100)={'veth1_to_team\x00', @ifru_data=&(0x7f00000000c0)="b22d3b12e30c4bf3b8fcd594717aa928cd0464b466626d3bae45567cd1a10a15"}}) dup2(r1, r2) [ 582.607679] binder: BINDER_SET_CONTEXT_MGR already set 06:40:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 582.664534] binder: 27797:27798 ioctl 40046207 0 returned -16 [ 582.672144] FAT-fs (loop4): Unrecognized mount option "=ƒÁ.•‹ƒÉ*ìõ`?”‰aÀ»" or missing value 06:40:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00\x00V'], 0x1}}, 0x0) semget(0x0, 0x1, 0x20) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000240)=""/112) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$inet6(0xa, 0x1, 0x2, &(0x7f0000000640)) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000680), &(0x7f00000006c0)=0x4) read$FUSE(r1, &(0x7f0000001000), 0x1000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x4, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) [ 582.735445] binder: 27797:27807 got reply transaction with no transaction stack [ 582.743160] binder: 27797:27807 transaction failed 29201/-71, size 0-0 line 2762 06:40:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x34000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x202000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)={0x6, 0x8, [{0xff, 0x0, 0xac0b}, {0x7, 0x0, 0x3f}, {0x50, 0x0, 0x100}, {0x5, 0x0, 0x783}, {0x3ff, 0x0, 0x6}, {0x8, 0x0, 0x80000000}]}) r3 = socket(0x8, 0x805, 0x101) getpeername$unix(r3, &(0x7f0000000280), &(0x7f00000001c0)=0x6e) bind(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x0, "724505df019501ea76205fdee3578f251f9813b35efc46362eb54333fbcc6bacc79ad9a3ebf6e4250aca015fe7ceebee48551402f179ba7d2237411d98803cad1c61a313284c6005490288be1b04d488c08b1af7314d7ca0c446d415c6cfa356e1d792c17fc5886ade3d16600a67131f3b793fd3da6b0b06ef5ec027333c"}, 0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="c4c255961eb805000000b9002000000f01d966b841008ed866baf80cb89da1d281ef66bafc0cecdc070f20c035000000800f22c0b8010000000f01c1440f20c0350c000000440f22c066b828000f00d0c4c10158db", 0x55}], 0x1, 0x0, &(0x7f0000000040), 0x1e9) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 582.792552] binder: 27818:27819 got reply transaction with no transaction stack [ 582.800212] binder: 27818:27819 transaction failed 29201/-71, size 0-0 line 2762 06:40:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 582.970724] binder: BINDER_SET_CONTEXT_MGR already set 06:40:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:35 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt(r1, 0x8902, &(0x7f0000000100)) r2 = getpgid(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f00000000c0)='ns\x00') [ 583.004399] binder: 27834:27835 ioctl 40046207 0 returned -16 [ 583.046773] binder_thread_write: 9 callbacks suppressed [ 583.046785] binder: 27834:27835 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.059414] binder: 27834:27835 got reply transaction with no transaction stack [ 583.066930] binder: 27834:27835 transaction failed 29201/-71, size 0-0 line 2762 06:40:35 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x40080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0xdebd}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x8, 0x8000, 0x80000000}, 0x10) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1}]}) dup2(r2, r5) prctl$getreaper(0x0, &(0x7f0000000240)) [ 583.113461] binder_thread_write: 8 callbacks suppressed [ 583.113474] binder: 27842:27845 BC_ACQUIRE_DONE node 909 has no pending acquire request [ 583.127343] binder: 27842:27845 got reply transaction with no transaction stack [ 583.134904] binder: 27842:27845 transaction failed 29201/-71, size 0-0 line 2762 06:40:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfcffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x91050000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 583.246920] binder: 27834:27837 BC_ACQUIRE_DONE u0000000000000000 no match [ 583.254076] binder: 27834:27837 got reply transaction with no transaction stack [ 583.261621] binder: 27834:27837 transaction failed 29201/-71, size 0-0 line 2762 06:40:35 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000840)={0x6, 0x8, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x10000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000140)='vlan0\x00', 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8001, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x81, 0x4000) setsockopt$inet6_opts(r3, 0x29, 0x74a4830f5198b496, &(0x7f0000000280)=ANY=[@ANYBLOB="0004017f000033d7453349d2b90000fe8000002a6ae088b6cb0000000000000000000000aa000000"], 0x28) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000380)={0x15, 0x5, 0x3}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000300)=0x80) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r4 = dup2(r1, r1) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x6, 0x123000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x67d, 0x1, 0x6, 0x36}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f00000002c0)={0x8000, 0x8001}) 06:40:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/autofs\x00', 0x200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000980), 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x10243) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) futex(&(0x7f0000000080), 0x100000009, 0x2, &(0x7f00000000c0), &(0x7f00000acffd)=0x800000, 0x0) syz_mount_image$minix(&(0x7f0000000240)='minix\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x8, &(0x7f0000000880)=[{&(0x7f00000002c0)="86ea8f1a5ee64171be2c6dcf662610d8e4e6cb420ac4ca70093a4014da2bb3155e7e666614252f6200d03a62a7f628f63b07be93eced10af2815f87fd18ff4637914a983c37d96ef4c0646f4bb1fa3586322751b8ee6d6e66667ad75b344ad1fe0d0853c31dc", 0x66, 0x100000001}, {&(0x7f0000000340)="004c160781b6f0c7fdc8d038761f57a03ec82e54a72279042ea5146ce17aaf9604346768e3f5e069517533c3e4fd33199e9664b10c0f6b7192fa9897a820bb62705a20d32a56804bc3d9647bba22c083edf53a0d7c89652efc6a4a17dd5f5bfa8a78ce4cd1634c3c21c8ea11dc0e0b9e632140be60bb4664245ef2cff38c3317f3fe5f3619763e60a4b5e1d4ebc2b897e69d3767e752482cdc1332f2a34dea0e95a3d18a1143e96583c5b5c2bb267834dcc66de9026fa9eab337abf17de3", 0xbe, 0xffff}, {&(0x7f0000000400)="d989be3c4fcfeae8707b0267207af3a5e3900a5e2b0e28592fd882293302ba9bf0f3635633385d766fef20b932", 0x2d, 0x8}, {&(0x7f0000000440)="091d87ff783f91e6a516e3321dca455b62ed97533ea28ee6f9e161e1453909e618e0753c10fff0377e1e1b8d54b1a4daabad9d6e33626246f86aedfafb584211e854af9d0ee24b40dfebbc37f85b69244224a8220b67e229a64d7de6b1d41245e51719a0757251620d5b21f21be053c2402160488e56d787ea40f2988d7e8ae990e281eab3d806d8d54055449e68f547fcc1af44ab870026cfaba9dce6ba9278ba8f2d29f2d85d63c94198692bac21fb4fa67f35994b102f2a5562ecf41702378842b32c2641d40a5676199b4258f60b561e9352ed9206706f0a6e1fbbdd9fbbd2c206475ea6d4", 0xe7, 0xa3}, {&(0x7f0000000540)="13027cfcc0b6c3114391e9fb0dae20d1259a5f6d4e54d5ebfc3c1d8a436650c5fce3493b14d7bdf84db93c13951d9a80be0ae3bf4979aa4d7ae6cf72916e4e0265e96f699f891499ba419cb17da1b7ebcf66cc41c79785d7618751c4e162bfef86", 0x61, 0x2}, {&(0x7f0000000680)="7c11c770f385b1d732dd1f6623587deaab5c3e44e37aa44abc056fb9df3da0a50a2fd42620c1f4c0a3bbd0f64dc2bd3f6ae0205ce903b14dcd8d169b89493db7e4e5abc6d798018def1d7c12b505a7d450262cf49fbf1e0e33dd4fb017e8126be053a6c76695f738d9af0279bf121a5c018ea29e0dbd011313974d518f4781936a11bc7ebfa14ac6ffe252ab46ebf23d8ae648cec470bf73a6957b9e2efbdd3c608c3116e024108f0561ed8b9164874d23867b4e7fd364e28c4b12944a15c2bfee6ce5073e7a114143e0ad95ce6586002b", 0xd1, 0x7}, {&(0x7f0000000780)="4fa9f2543b4ce1cac76d8bb2029ccc7a118e439f4221b2479b74dd8ca5e0f7ea242ddd3c30e751b72f215aadda6549c80d0e9b119c4ed557e75f44e53a39e014c5ca315d08b13e77cb0c3e837ded60bc2b32417fb9cf741fc425bd29d7c59ba06d402a0459af08b6aa58db1bb42c1499a17d2b247dd58a1ca3a11ca42240bd43b19740887a982f4e21cd0cddc9b20504264c7dc523684b1fc70145c1a7b957385939f890cf9699059cf3262f1d97a691f69481012a961f57d3c0565be7b5e84788af27fd324611c1e933c22e8956e97902d4be6e768c5fa77df9f65cc302206035849686d7a194b2a386", 0xea, 0x80000001}, {&(0x7f00000005c0)="38d51f1f18350807276035866860d6329a27d5d5f50a9973a2f33c0f2cac56f050fa10c51bb4b0719c919ffde07d8d8a04550533f6d98570ea3ac5b11c85839b2b9005d34df34cab9d132a2b46ac5749afe9594623112372da02d5b99e1ea98a7bd7b2feb85e9b7ed0f2ccefc6a69a9ce109cd682f6160", 0x77, 0x5}], 0x2000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x8, &(0x7f0000000100)=0x4) 06:40:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x8b01}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) ioctl$RTC_AIE_OFF(r1, 0x7002) 06:40:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3f000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:37 executing program 4: personality(0x414000b) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x8) 06:40:37 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e50d22a20af818b2056a599fa6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb494341d5eb6deb62d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054151aa51863565f3bc29000000000b767bc007c41f39b0880ee51c258388c4e8b990000089db2a8f028e5fe19aa4af77aff00000000000000179bb712849d209841bec20e08e913fd8c8c5b5a3b6f000000000000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="804a0eef013a53798a9e2201bd04dc62a0988825ba7f9a536620306907a1390adfd7c6f1682ef1e2df6efee9bdf11220e6bc3c67ad61577d852160f9f152fe", @ANYRESOCT=r1, @ANYRES64=r1]) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) prctl$void(0x3f) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x1c7) io_setup(0x8, &(0x7f00000001c0)=0x0) io_destroy(r3) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x4, 0x3}}, {&(0x7f00000000c0)=""/18, 0x12}, 0xfffffffffffffffd, 0x20}, 0xa0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000340)=""/49) recvfrom(r0, &(0x7f00000004c0)=""/4096, 0x1000, 0x10141, &(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x4, 0x1}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380)={0x1e7, 0xffffffffffffff7f, 0xfffffffffffffffb, 0x40, 0x7f06}, 0x14) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x30400, 0x0) connect$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) shutdown(r2, 0x1) [ 586.028598] binder: 27900:27903 BC_ACQUIRE_DONE node 912 has no pending acquire request [ 586.033854] binder: BINDER_SET_CONTEXT_MGR already set [ 586.036859] binder: 27900:27903 got reply transaction with no transaction stack [ 586.036884] binder: 27900:27903 transaction failed 29201/-71, size 0-0 line 2762 06:40:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) io_setup(0x663a, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000000)='eth0.posix_acl_accessnodev]\x00', 0x2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) [ 586.073817] binder: 27906:27908 ioctl 40046207 0 returned -16 06:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x18b}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = memfd_create(&(0x7f0000000040)='posix_acl_access{vboxnet0ppp1*[\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x100000000) dup2(r0, r1) [ 586.120591] binder: 27906:27908 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.127734] binder: 27906:27908 got reply transaction with no transaction stack [ 586.135279] binder: 27906:27908 transaction failed 29201/-71, size 0-0 line 2762 06:40:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 586.206869] binder: BINDER_SET_CONTEXT_MGR already set 06:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9effffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 586.250533] binder: 27900:27903 ioctl 40046207 0 returned -16 06:40:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="804a0eef013a53798a9e2201bd04dc62a0988825ba7f9a536620306907a1390adfd7c6f1682ef1e2df6efee9bdf11220e6bc3c67ad61577d852160f9f152fe", @ANYRESOCT=r1, @ANYRES64=r1]) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) prctl$void(0x3f) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x1c7) io_setup(0x8, &(0x7f00000001c0)=0x0) io_destroy(r3) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x4, 0x3}}, {&(0x7f00000000c0)=""/18, 0x12}, 0xfffffffffffffffd, 0x20}, 0xa0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000340)=""/49) recvfrom(r0, &(0x7f00000004c0)=""/4096, 0x1000, 0x10141, &(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x4, 0x1}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380)={0x1e7, 0xffffffffffffff7f, 0xfffffffffffffffb, 0x40, 0x7f06}, 0x14) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x30400, 0x0) connect$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) shutdown(r2, 0x1) 06:40:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x591}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, 0xffffffffffffffff) [ 586.396792] binder: 27932:27933 BC_ACQUIRE_DONE node 915 has no pending acquire request [ 586.405080] binder: 27932:27933 got reply transaction with no transaction stack [ 586.412609] binder: 27932:27933 transaction failed 29201/-71, size 0-0 line 2762 [ 586.445550] binder: BINDER_SET_CONTEXT_MGR already set 06:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfcffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 586.487466] binder: 27936:27940 ioctl 40046207 0 returned -16 06:40:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d80)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000ec0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@mcast1, @in6=@mcast1, 0x4e22, 0x9, 0x4e20, 0x2, 0x0, 0xa0, 0x20, 0x9d, 0x0, r2}, {0x7, 0x10000, 0x1000, 0x7c, 0xffffffff, 0x9, 0x108, 0x12b7}, {0x10001, 0x9bff532, 0x8, 0x7}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d3, 0x6c}, 0xa, @in6=@remote, 0x3502, 0x3, 0x3, 0x9, 0x7, 0x101, 0x3}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000d40)=[{&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="41e60caa597fd1e039e5b6dec9537707dc5840c7ecd65b22f4d01db2a71075ef4936dda20b74a3a8a22ed9587d2fef4f7b197c00a8c08f3cccc7d22f8a3d492ad7912794cb930437cbbb8968b9b624fdcb376abbe485d503a4310941fb15e6eae6905aab79d3ba46862aafac32c4049f29815d23e5ba92cb1745b3fbb01f44cf1e7a258388c3a40e47417b92a47a9309575154fbc7de8a038dc9466b21f0d2baa4dc0013c3121eb00fae2826fb65f9d498870fbb3d35989c17ae4f841ec3a98f49071b66fe35f4013d6f70da8cb35be5e1d2514f38a93e8f4254", 0xda}, {&(0x7f00000008c0)="2c92207889cc74d934f58b604b2fe174", 0x10}, {&(0x7f0000000900)="4a6357daa743fa8837a24788d799637de52b18a9857e4fa4a3436ff69e0e9cdc5faa09c9d7298b463f331042b6467e582758d66f309393f0b1ad4743121e4b406b659c0e9d7c2e384fd9e57f1894baff5e992cbc2c5cb155a212dc4e2f4099e0931b92f3d42c3624c51787ad23804f33dccf9448fe257afc80cfa5572d5c8bc1c60c5343de552fbf5d1a7b5c90b5701c92232368c9b68b458090dd9100c9", 0x9e}, {&(0x7f00000009c0)="80a650eb59a79a0cdb87e9f628e5eb4338be36d91778b9ba2ae58a22416a1988584329b26e7512ce885eb26e3d774a970f48197c9cc703605602de8d87d3f0dd875c953853364d15493fc002b582f66e6edb0f8c0ae368b1defe912729d6ff4160b2d4a0cc7ffd818ec986942b531458a51156158cfc", 0x76}, {&(0x7f0000000a40)="903d488846c9d425bfd582286dee4d8c57f1e4639f73c6cb10a50df7dd27a06686629e80893ad84fd77199d8110ca11db39e14678fe4545a554cae3d7783cfbd20f75f1187ec9dc7b2832c3cdc1f6233ff5e1dd01adac79fc6eb73a50c6f097bf551019b872c8b1c97801e5a476fcc9e814d68a24cd4f7a3af5fb781fed2ed3772f98b8005eb360f23cc2858f3570d52c068cf49f4bb379e1571e3f09073559644409f1a26b122aef4a2bcaf1b1debc46be0a0092c50aae203bdfd6cb4fb3d7e34917772dca0cbf5332dd40e67de481452b3fed157f2", 0xd6}, {&(0x7f0000000b40)="e558dd627e8f91dbe33b95", 0xb}, {&(0x7f0000000b80)="c269a2ed160d7132f84a2082fae47bdc427475e7be7d8faca9b5c5ec8e00eb9c68614e8cad281328225baf01f1178fd1f08cbe0b762aaa5dbe66e3a43f488045171a494e4c87207c", 0x48}, {&(0x7f0000000c00)="8e30a002c3a5c3b0a68f647158d1fe28f3f306da47ac35fd8fa8c6ae261746f791c38f6c18b67037027ce17f62d1299e6cbaad7a84d0689d14ffec4ca31abeab977ff3af84628cc714b14af91d14e1936bb4e2b73a94b14ddbe6ba4dabd3b68b8e457f638563cb4f28daae956aeaa1efa8682a87d7ca91e99e1914558bdd4367c1ee4e0280b6f6f2c836ab9bec901c993d2ccaf35dfd", 0x96}], 0x8, 0x0, 0x0, 0x4001}], 0x1, 0x800) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000080)={0xff, @broadcast, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x1000, 0x20}, 0x2c) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r6 = dup2(r3, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000580)={[], 0x7, 0x40, 0x8, 0x0, 0x4, 0x7002, 0x1000, [], 0x1fe9}) fcntl$setown(r4, 0x8, r7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000740)={0x2, [0x4, 0x8001]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r8, 0x3}}, 0x18) getpeername$unix(r6, &(0x7f00000000c0), &(0x7f0000000780)=0x6e) 06:40:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xfffffffc}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:38 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x45, 0x800040000400000) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) times(&(0x7f0000000080)) [ 586.531728] binder: 27936:27940 BC_ACQUIRE_DONE u0000000000000000 no match [ 586.538887] binder: 27936:27940 got reply transaction with no transaction stack [ 586.546436] binder: 27936:27940 transaction failed 29201/-71, size 0-0 line 2762 [ 586.566372] binder: BINDER_SET_CONTEXT_MGR already set [ 586.589436] binder: 27932:27933 ioctl 40046207 0 returned -16 06:40:38 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000646217f4d55a33e7f273ff0231005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151a00907b17297c41f39b0880ee51c258388c4e8b99916a0000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80003, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff7f}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file2\x00', 0x0) mount$9p_unix(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d303491cc2c00"]) 06:40:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x300000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) dup2(r0, r1) [ 586.881294] binder: 27975:27978 BC_ACQUIRE_DONE node 918 has no pending acquire request [ 586.897870] binder: BINDER_SET_CONTEXT_MGR already set 06:40:38 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x20a00) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000140)="6e2659ec1814705a7176f8390f2e5cc0094711fdc5c7b87dc626e94e816cbf460154ea3ade03bb1504a33eec7c1bc179d598e376b2d9ed95b68b98a9f621c83c29a9d04b7636e8878d6671504c4a09e8ddba532f07151f6f4ee7e9e390deb82a28f44b14bf2b78e3d27b0cc5"}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x5, 0x2, 0x2b7, 0x1, 0xffffffffffffff80, 0xffffffffffffffa2}}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x6, 0x3ff, 0x6, 'queue0\x00', 0x80000001}) rt_sigpending(&(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x84, 0x8, 0x80}, 0x2c) 06:40:38 executing program 0: syz_read_part_table(0xffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000055aa4546492050415254", 0x48, 0x1c0}]) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r0) 06:40:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd9c4, 0x8001, 0x3, 0x1, 0x0, 0x49, 0x0, 0x2, 0x6, 0x57ac, 0x7fffffff, 0x3, 0x5, 0x7fffffff, 0x1, 0x2, 0x8000, 0xffff, 0xc000, 0x1, 0x401, 0x80000000, 0x3f, 0x5c, 0x401, 0x7ff, 0x2, 0x100000001, 0x4, 0x8, 0x7, 0x6, 0x8, 0x4, 0x1b, 0x0, 0x0, 0xb0, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x100, 0x5, 0x9, 0x1, 0x9, 0x7, 0x7}, r4, 0x8, r0, 0x1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) 06:40:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x8b010000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 586.948514] binder: 27977:27982 ioctl 40046207 0 returned -16 [ 586.956197] binder: BINDER_SET_CONTEXT_MGR already set 06:40:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffffffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 586.990715] binder: 27975:27978 ioctl 40046207 0 returned -16 [ 587.000546] binder: 27977:27982 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) prctl$setmm(0x59616d61, 0xfffdffffffffffff, &(0x7f0000ff9000/0x4000)=nil) accept(r0, &(0x7f0000000080)=@un=@abs, &(0x7f0000000000)=0x80) 06:40:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9105000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 587.190876] binder: 28005:28006 BC_ACQUIRE_DONE node 921 has no pending acquire request [ 587.207570] binder: BINDER_SET_CONTEXT_MGR already set [ 587.234671] binder: BINDER_SET_CONTEXT_MGR already set [ 587.253240] binder: 28010:28011 ioctl 40046207 0 returned -16 [ 587.255140] binder: 28005:28006 ioctl 40046207 0 returned -16 [ 587.284878] binder: 28010:28011 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x80800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) r2 = request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='#cpusetcpuset:\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r3) 06:40:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000280)=""/202, 0xca}], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000200)={{}, "73797a000000000000000000000000ff1adbb17e44aeb800000000000000000100"}) 06:40:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80300) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)=""/202, &(0x7f0000000240)=0xca) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000023c0)={"b61d3bbe52d75028290785806c026a89b9b1f382d910b3a4aa7b7a3be01627489bc78960dc4a8d8006367a195b9537b7da7acbd83e0c7d61ff9ee151c07b4a894822001e51c79ea8d975f519bd4c83773fab6d212d3bc009fdbe498bc54a964bc215400866865357fa8e35ef56474dc150404bf29ed0456914aa67901bf3d7bb3ba29e324fca8bd4a0b1b2bd278ea3a0576d82c8ae7d8e1fa5e723eee2bb10337bbd3c66f17e7948f81d8da2527dde4a2cd834303701ba103fd94a0c993fa9b5aa87cac21aa20bbe3c531f3c9e8669beca073b815e7c537fa9be19d59d746dda736ce163d030baae4f0950b5b23c7075cf9d19230bc6bf00eb1f130720d75a0f79ba1dd1d46a35bb539fc1d8a9393157a475375c53ed18909358365b478f1fbbea0a1ca9f467747ffb219a8c84c16bc5eb0f2799ef3bb223983ae829346b4f97dd22a040076fcd796b6c96b69b772fc9647ccfb451421195eab4dcec01a0ae5cf1eeb88cbf60a9a58a252997574fa4d3fa15bd5730bcb6b3dcbd030a02b62adf0c5f9b866d768f638248db923b0360cb0ebee0377228f71abe62f9c8b381f7d43be979417a721d041799eaddcaf7f92ffc2b207469251cab19ede5712a340c7c809ae5071851eae8307e464c4c9f04a6be73b0131401cbead4c9772e1bff9a75610e5ef0f22ea700bdac176d1d303bc4fc45f1a80cf38dd8cc2040c0fdec25243ab41e2d5b4371e25c4374926e7ef808821f05ff339ceca62ad91e010389279989f4146fe45ed09b80d32bce8176eeb5b00ef3c7cc5594f59d0dc9e48a4744f6d380ffb7dd8a7f662c1487e78c6941dd35a8d17c29d2c6905a770da057b33ee6e7a03a228ba26b3b9d703548ee6b2a680ee570919d73055421056009ad7f97409b83769aa2be3cbde957d65ea0396d045ad838d993ead88f01649a9c0e868ca9ee0fdd32fe11d1d18fb37bb61537f83680a80aa67c3a7b1bc26025b0286042bc453c3487fabc7d173a4edc3cb978f55cbdcc8d84d85dbaff93970e623f235b40485ca6ffdea0d56c9b87879fbcbea0f1e3e3d70d6d804d4de7e09bfa292d63b68139abe327863c86f559c3933ddc3651fd6fe5552e1654b1bca74f0dd11734a38f4de120a13f5a28fa4a16bc886c47f2a1c47572ec37de795a9aa8c943ee5162219171c3f78603e3ffeec37c20fbbd1394eda40b7e9d8a6b863f1ba8bfe778bb98527aa6e65f8d192f1b50b6d9890ae25c1ffc8e0fa432fe93d4cc7cd80d2715722a8e65f811f20176bc92e5cb1845824fc21c65d654e2d5f7d2810bcaefd14b26fb183f48606343fc981b35133d50f125bdc32f7510a7bb866b9f7d57c393ea253834ca0726e00640ebf77cffcd343dd203946443b16f59d43e59dff2e35701bc5852fafa68c03d486e2a4a65a0ef69fe29931828d5ba94ce954f3b21b493db"}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b80)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000780)=@assoc_value={0x0, 0x4}, &(0x7f00000007c0)=0x8) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000a00)=[0xee01, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000ac0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b00)={{0x0, r1, r2, r3, r4, 0x40, 0x3}, 0xb000000000000000, 0x400, 0x0, 0x8, r5, r6}) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb3936247fc0a474fa6beabe04abcd1744724c220f4fc574c7ab0b2980cf8be424d4e74b") syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0xa, &(0x7f0000000ec0)=[{&(0x7f0000000300)="71301934f008e7f17f1144bd78f8f5bcc4a521e47110e114480a73b9cad0fb0d3bf6ed89f4a433f746d661ec0e681f5cbf8486f067303542351261ba", 0x3c, 0x7}, {&(0x7f0000000340)="79a2f9c34ff30a4e74dd13b68279047ae37df0ca34929a4570dc4af018f747b58807f320a27d94c15c407f104d87674ec8eab548ec835e4e4fda7bd11ea600bf82b666c9248ee9e8fd7b2b4de3d2700d172b060793d52f11e7611bee6569f8ed79cc49096d0026a0d1f1a12f28cbc5a4abc6d1963d87cd40e8d181e94dca8ab464b9dce52808227f67ec765b345822459ee196de2dc8f1d826f2b4b74b5548789e0cf1fa41", 0xa5}, {&(0x7f0000000400)="97f8d8f869f76adf33a8ec70d48201bc3c1f423ba90c6cb996e581d28edee48a4601be755cbc3c2a39f5aa337e30bcfe46d2659fa1ada6c162cf0481349732024d2d44f8c6ae11fc93aa20a93e645e763140d1d352fda72ce6cc2b5ed68c4c29f79ba280c3fbc7729c91fa5b25cc11c41611310f25e9290f6c3b697884254d1ed6f54a8d9fa892879ceb33238f57956bfb735c3296c1452a126b4867ef8dbe691283982c244f1298c0b9857ea58a", 0xae, 0x1}, {&(0x7f00000004c0)="dd32fd1a28a018af825a39b24bf8d196aa230e3248947ffefeac4ae36de1888b5f76bf169b2c2567d3c246031d5507e12bdf37e10453136ed9a3dc29d9d8370e1452473dd0db7a84e6eda9dd0a63353e25a688", 0x53, 0x1}, {&(0x7f0000000540)="e74b8c91093fe31d6c839c3ce8dc8bc998fba75259f5f1b06ec443db92f8f700efd6ae0dfe7f24f01074c909caf6aebeb402ff5e3fb032d1f4a202a3e0cbf1c5fde963b7cd64bc24c7d6e398e66d93f31c61ef64bddf11a23aaf785dc73f12fe7d422b8bab68b57ad9b6590af350e190b7e6fa8341f039313482250539739160430b60eaeec096ef", 0x88, 0x800}, {&(0x7f0000000600)="f2ebda8c68d8f7578ccd430c2cab34dc0f8b2592ef74421ce6", 0x19, 0xa1}, {&(0x7f0000000640)="c546318870cc428b05eb08c77aa2ef3b53ebf23928b7d08e89138f4b86", 0x1d, 0x5}, {&(0x7f0000000d00)="e3d50e6676a8f6857ac20686d4bcd005b9c91fde7f7e6051ac14ea4104de3ea2ea82582432f669ea50e59656d6ac3eac26cc2940023e5a27554d8bf653629f7c6aeaac6c6dbed12a55544d5f602f3f1ef9d2ee2b2f52ed2d4f22357490a4ddadece1e89abbbd824103072ca10c4f3af22dfde5bcad5694db", 0x78, 0x5}, {&(0x7f0000000d80)="cf9b576fc2536d696f4f303ba32a0ec94bcb381f314beca6249d447e01a0e867a5e0b4cf618d89230ce0d7894c9924ef97fb930487a73ad1a694ad714f58b19dd19382130a323800a1634859c4bf2c8a0f05de24b82b1a9978d52c78b20ce98eb7e6dfaee190bc6547ec1a780e2cea2f5b97dc08ab048a1156e551973ac9f29485c0c4a304b2186b24b68287f5dfed5915a2f54057cd6635b4ef8c459fb2f80be39e7a82a55d2509c3b4e65d40a758bc719f04aaf93de279c32403318f286d5662bb5815", 0xc4, 0x1}, {&(0x7f0000000e80)="bb6d7edfc2163c8186d991d59193715872a366425b1e55dbd6413f9e2b910a78fb0dac9fb92ff42ab2c41540a36feae01290d64b75e07b9c0d", 0x39, 0x4}], 0x421, &(0x7f0000000fc0)=ANY=[@ANYBLOB="626c6f636b2d616c806f6361746f723d6861736865644072656c6f636174696f6e2c757365725f78613a8a722c636f6e762c6e6f686100000000000025c4d55c2c636f6d6d69743d3078303030303030303030303030353635372c6e6f61636c2c6572726f72733d726f2d72656d6f756e742c646174613d6a6f75726e616c2c0000000000"]) r7 = syz_open_dev$vcsn(&(0x7f0000000680)='/dev/vcs#\x00', 0xef9, 0x400) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000cc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20100808}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r8, 0x610, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff1346}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x4) 06:40:39 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000840)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00281f3f209a1fb79b0880ee51c258388c4e8b99916a0000000001000000b3"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x3, 0x401, 0x100000003}, 0xffffffffffffff41) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 587.567723] binder: 28029:28032 BC_ACQUIRE_DONE node 924 has no pending acquire request [ 587.571249] binder: BINDER_SET_CONTEXT_MGR already set [ 587.576071] binder_transaction: 4 callbacks suppressed [ 587.576081] binder: 28029:28032 got reply transaction with no transaction stack [ 587.594177] binder_transaction: 4 callbacks suppressed [ 587.594193] binder: 28029:28032 transaction failed 29201/-71, size 0-0 line 2762 [ 587.606151] binder: 28027:28033 ioctl 40046207 0 returned -16 06:40:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x3f00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffa1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x14040, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x56, 0xa5, 0x81c, "38e59217fb2aea8646f5df4334659015225f8fcf58e09c8f15a40109c1a7e1845d3706d0bd2b08aa56b6ec59e87dc2f7fa10d17f7185831f944010fc45d15453cb36a8e58b2ea76877b716b155dee3da901041c3e95a"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) [ 587.661984] input: syz0 as /devices/virtual/input/input21 [ 587.666511] binder: 28027:28033 BC_ACQUIRE_DONE u0000000000000000 no match [ 587.674661] binder: 28027:28033 got reply transaction with no transaction stack [ 587.682175] binder: 28027:28033 transaction failed 29201/-71, size 0-0 line 2762 06:40:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0xb, &(0x7f0000000000)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2c) 06:40:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 587.815550] binder: BINDER_SET_CONTEXT_MGR already set 06:40:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xffffff7f}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xffffffa1) setreuid(0x0, r1) setreuid(r1, 0x0) [ 587.848986] binder: 28029:28032 ioctl 40046207 0 returned -16 06:40:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x404800, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="e750608b09fa8f6915001119e0be6ec8", 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r0, r2) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0xfffffffffffffbb4, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x7, @loopback, 0xfffffffffffffffe}, @in={0x2, 0x4e21}], 0x3c) 06:40:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 587.965402] binder: 28061:28068 BC_ACQUIRE_DONE node 927 has no pending acquire request [ 587.973781] binder: 28061:28068 got reply transaction with no transaction stack [ 587.981307] binder: 28061:28068 transaction failed 29201/-71, size 0-0 line 2762 [ 588.007895] binder: BINDER_SET_CONTEXT_MGR already set [ 588.028177] binder: 28069:28071 ioctl 40046207 0 returned -16 [ 588.059467] binder: 28069:28071 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.066590] binder: 28069:28071 got reply transaction with no transaction stack [ 588.074112] binder: 28069:28071 transaction failed 29201/-71, size 0-0 line 2762 [ 588.154300] binder: BINDER_SET_CONTEXT_MGR already set [ 588.170289] binder: 28069:28076 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.177423] binder: 28069:28076 got reply transaction with no transaction stack [ 588.185174] binder: 28069:28076 transaction failed 29201/-71, size 0-0 line 2762 [ 588.219623] binder: 28069:28071 ioctl 40046207 0 returned -16 [ 588.400617] input: syz0 as /devices/virtual/input/input22 06:40:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000840)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00281f3f209a1fb79b0880ee51c258388c4e8b99916a0000000001000000b3"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x3, 0x401, 0x100000003}, 0xffffffffffffff41) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:40 executing program 0: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r3 = semget(0x0, 0x1, 0x200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getgroups(0x1, &(0x7f0000000480)=[0xee01]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000004c0)={{0x1, r4, r5, r6, r7, 0xb0, 0x101}, 0x8, 0xfff, 0x7}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_dump={0x40}}) 06:40:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="819cdce827dc8d8d037bd457c6c4939760865db8310f2552cad55ddf4c4783557c784c1e5ac9a01f962737e0748bc99a74a666ac4b5fdb9bc3e434b8f7f95a72a98902b30b50534e1b6de53bfcc9ecd1cf40b917c17a260cfa34b9068b8784089c40348ce7fafe1bb2379a59a6b0368cbe48b93b13f0ded729b676fff9b6316db6f529934a144d3ae97aae4cfa077dc2065385ada151fd5ac451", 0x9a}, {&(0x7f0000000240)="83dc8a56a5c4df7368f9018c5961025218385f41c3f40cb9b81edfe91515e636d384398fee51f1e89673c2f259c53400d3fc46539331bcd970c8f7ff7faf129f152ec26d9360e430286d0d820dd643f9914c1484c7b62cc47a9416723466869153eb21b7c51cd6ad9db5862b0ad2bbf09aa100b4eae87e76025de6a088ef70d54051bdd5603b13b5dca03606f6665aaf0939ca22c063240801c38c4c2070f673563504a4e963304875c068194ebf1861d127257f10f5dfe998d555cab01fec6df14241e4ecb34a983238d793ee1fdf8f2bc96d9fd456ddd8d5ec5e71ea1d", 0xffffffffffffff39}], 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) 06:40:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x400300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8, &(0x7f0000000a80)="02343f01d1f8e2f6120070e50944bb20d3c1b6c0d77b45ede12d1f83d7c54a3d741d53ca321b7222d2ef2e6f67d627bf0fb390f7d9495aabe33325538c497a694f1cc09f71b87ed5d963c2a2e6bbcd4e141795cc71581497efcd3dc8") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x805, 0x100000000) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:40 executing program 0: write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) [ 588.587694] binder: BINDER_SET_CONTEXT_MGR already set [ 588.593160] binder: 28080:28082 BC_ACQUIRE_DONE node 931 has no pending acquire request [ 588.601391] binder: 28080:28082 got reply transaction with no transaction stack [ 588.608912] binder: 28080:28082 transaction failed 29201/-71, size 0-0 line 2762 [ 588.624031] binder: 28090:28092 ioctl 40046207 0 returned -16 06:40:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x30000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xeaffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 588.651618] binder: 28090:28092 BC_ACQUIRE_DONE u0000000000000000 no match [ 588.658756] binder: 28090:28092 got reply transaction with no transaction stack [ 588.666295] binder: 28090:28092 transaction failed 29201/-71, size 0-0 line 2762 06:40:40 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r1 = geteuid() quotactl(0x14e7aed7, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000300)="95adc43be9ee80e337c63c85bf715943fdfc4eccf49a406c49e28c0919082cb8195a0f1c25fa6861cc4beb0a656ae6a26f2590cadc7419f8ec") r2 = memfd_create(&(0x7f0000000240)='tls\x00', 0x3) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0xff2}, @in={0x2, 0x4e20, @local}], 0x20) sendmsg$nfc_llcp(r2, &(0x7f0000000200)={&(0x7f0000000380)={0x27, 0x0, 0x2, 0x7, 0x2, 0x4, "9377b2f4c2629d10ff49456f25bc601bad8154f053c11c37fb0fcba6fbf8117a185b93d423eafa4979427cacc4569422ea0dc224eb63047a391daf1cfc7e5b", 0x24}, 0x60, &(0x7f00000026c0)=[{&(0x7f0000000080)="11b7dd210c074dc4c8280db4d6e8128d1767fc886682cbc5", 0x18}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000400)="49edae0232324702c02ef9b949c637b887106aa804c518d393c99f582bc27783505c0d57a1d74e98c56f0072d8df0bc67f1c92e20c44243a46ec2bf8579a2fee851a7ded7e95e54844bdcb85d9faa930b00b36adcf8176aeb5454133ed", 0x5d}, {&(0x7f0000000480)="7c575059b5c19b3b1aca34688afa747c09e5ec8cab89e5efaa1d52499a846b5163f226fe356683a4d99dabb10c7be08330c41ba734055ae1b50fb1a7fe4501e46f48215e0d357ac31235ee55b200ae74c826e1e38684c3582a02b48e289f0a447ef4caf908fa1970aac13c42a540bfbc02dab6a1a0041073173366ba603fe8bfbe4e98f4d3cfa0eb95f07e71ed9fc977e30147cc876fb47c48ff30c54a64d81880fee63bdc4acfe4657ca2e6fe95bd66c2006cc1976db5cea23c0ab0fa8823aec4f238e841e6f50a09156ba0851c3c1f789425ab639e0a94e9ee0e21f5b63a80ce", 0xe1}, {&(0x7f0000000580)="1aace6a872361753975d5b6183c5e41d9beefea28fdd22beef2181ab712081e8dc7a151741ef4a48502b01f468a4be1b3a228b17c6b710230e5b47b8bf67192f8a5e1d448d5015a30733701c1e669c0d8bb4697f41affec1455284efb311dfba25500ee930cbdd9eeca2f96fea2d6b", 0x6f}, {&(0x7f0000001640)="682672d8ab86293f3330994431e9e275529375366f872a691f8846068bd8b8b719fd7e6a4f630cf1d1ec87c60bc37d23eaef482b765371dab7b5fb8bc388dbc2d3d7fa29ef90b838771da1542af97243cd3d91c68a1e653d1ac95119f86679f4d1b828da7a2d22f748", 0x69}, {&(0x7f00000016c0)="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", 0x1000}], 0x7, &(0x7f0000002740)={0x70, 0x10e, 0x0, "6f9abd2a3a8cd1d8a47828cb8b3c2226372b281c719ebbf8edce78be96bfaa838874c56226c1da454f12a469d8f02e3a9de4db4d6eee3a2c4d77197a6110bf97067d4cde29b24c40d4cdf0b6890a81372d9ea405ba56761f11f49f79"}, 0x70, 0x800}, 0x20000000) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x5b5}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 06:40:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) inotify_init() [ 588.778976] binder: BINDER_SET_CONTEXT_MGR already set 06:40:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0xf0ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:40 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 588.818926] binder: 28080:28082 ioctl 40046207 0 returned -16 [ 588.842342] tls_set_device_offload_rx: netdev lo with no TLS offload [ 588.942887] binder: 28120:28122 BC_ACQUIRE_DONE node 934 has no pending acquire request [ 588.951200] binder: 28120:28122 got reply transaction with no transaction stack [ 588.958735] binder: 28120:28122 transaction failed 29201/-71, size 0-0 line 2762 06:40:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x204000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='syscall\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x7, 0x20, 0x7c, 0xaac0, 0x0, 0x8, 0x10082, 0x2, 0x7f, 0x8, 0x3ff, 0x57ce, 0xf1, 0x7, 0xca, 0x7, 0x0, 0x3, 0x1, 0x6, 0x3, 0x2, 0x7, 0xed, 0x9, 0x3f, 0x1, 0x1ff, 0x5, 0x7ff, 0x4a5, 0xfffffffffffffff9, 0x70, 0x1000, 0x80000000800000, 0x100, 0x0, 0xffffffff00000001, 0x3, @perf_config_ext={0x8000}, 0x1000, 0xb597, 0x9, 0x6, 0x10001, 0x3, 0x9}, r1, 0xa, r2, 0x1) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) sendfile(r0, r0, &(0x7f0000000040), 0x7fff) 06:40:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x0, 0xff}, &(0x7f0000000380)=0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r4 = getpid() unshare(0x40000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) socket$packet(0x11, 0x2, 0x300) modify_ldt$read(0x0, &(0x7f00000001c0)=""/127, 0x7f) sched_getscheduler(r2) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100}) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/ipc\x00') tkill(r4, 0x25) clock_nanosleep(0x5, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f0000000440)) 06:40:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x4000000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x22082) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) tkill(r1, 0x1d) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'syzkaller0\x00', 0x800}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'self/\x00'}, &(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x12, 0x1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000300)=""/7) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x1, {}, 0x6}) dup2(r2, r3) 06:40:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:41 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000740)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 589.203417] binder: 28131:28133 BC_ACQUIRE_DONE node 936 has no pending acquire request [ 589.211827] binder: 28131:28133 got reply transaction with no transaction stack [ 589.215622] binder: BINDER_SET_CONTEXT_MGR already set [ 589.219369] binder: 28131:28133 transaction failed 29201/-71, size 0-0 line 2762 06:40:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 589.317762] binder: 28137:28150 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.324905] binder: 28137:28150 got reply transaction with no transaction stack [ 589.332423] binder: 28137:28150 transaction failed 29201/-71, size 0-0 line 2762 [ 589.342876] IPVS: ftp: loaded support on port[0] = 21 [ 589.351095] binder: 28137:28139 ioctl 40046207 0 returned -16 06:40:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x9effffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 589.426495] binder: BINDER_SET_CONTEXT_MGR already set 06:40:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)="6d91edaed022", 0x2824, &(0x7f0000000140)='mslos\x00') sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) gettid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=""/20, 0x14}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xf4002, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[], 0x0) [ 589.461991] binder: 28137:28139 ioctl 40046207 0 returned -16 06:40:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0xfffffdd8, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x40033, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0xcc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040020000000000000000000000000000000000000001000000000000000000000020000000000000002000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000090000000000000002000000000000000f00000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0c63000010630840020000000000000003630840", @ANYRES64=r4, @ANYBLOB="04630440000000000e630c4003000000020000000000000001634040020000000000000002000000000000000000000001000000000000000000000048000000000000003000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="0000000003000000000000000000000001010000", @ANYRES64=r5, @ANYBLOB="0200000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000018000000000000000000000000000000680000000000000000000000000000005800000000000000"], @ANYBLOB="07630440030000000663044001000000"], 0x6, 0x0, &(0x7f0000000400)="4910fbb26a06"}) dup2(r1, r2) 06:40:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x40030000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 589.608745] binder: 28158:28165 BC_ACQUIRE_DONE node 939 has no pending acquire request [ 589.655260] binder: BINDER_SET_CONTEXT_MGR already set [ 589.670367] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:40:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xa1ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 589.709778] binder: 28169:28170 ioctl 40046207 0 returned -16 [ 589.779930] binder: 28169:28173 BC_ACQUIRE_DONE u0000000000000000 no match [ 589.843716] binder: 28178:28185 BC_ACQUIRE_DONE node 942 has no pending acquire request 06:40:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x22, 0x81, 0x20, 0x8000, 0x7, 0xffffffff00000000}) fcntl$notify(r2, 0x402, 0x8000003e) dup2(r0, r1) 06:40:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x1000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x40030000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000840)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:42 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4208, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000040)=""/121) fcntl$setown(r0, 0x8, r1) [ 590.098522] binder: BINDER_SET_CONTEXT_MGR already set [ 590.105883] binder: 28191:28198 BC_ACQUIRE_DONE node 944 has no pending acquire request [ 590.116176] binder: 28194:28201 ioctl 40046207 0 returned -16 [ 590.129483] binder: 28194:28201 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1d) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x100000000000014b, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000400), 0x5a, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="140011751130a521303b298642d4000042000501a108582e0efaa28800d46ab824a7e1066d192eeeb18c7f8931ecbe41c186bec4e708d7aee574"], 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'gretap0\x00', {0x2, 0x4e21, @loopback}}) r2 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)={0x6, 0x8, 0x1000, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x0, 0x7ff}, 0x1, @canfd={{0x2, 0x7, 0xf5, 0x3f}, 0x3, 0x1, 0x0, 0x0, "bceb284d3ca6b95189accd4a2f3a32b7854e8820181b745967839add90bee4548d137a09358f8f9570d18c9f356f8bccc32fbaf2a58ceabdbc8cec5a36f959b4"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x11) [ 590.161442] binder: BINDER_SET_CONTEXT_MGR already set 06:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x300000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 590.191745] binder: 28194:28201 ioctl 40046207 0 returned -16 06:40:42 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) 06:40:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:42 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0x1000000000, 0x5, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(r1, &(0x7f00000000c0)="bf7bb41f7471259933f4195936204255ed58a6a9ca3f1c4536ab221a13ab14cfc562d7ff477e621631ee02c8688d3ef8e6a7ce9b4c8018da1004669b32785d17969a86ec8b1df8733395949ab9e0a76aa4cc5ecd0de85e043f9953c61c4c764a5d6b", 0x62) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x31) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14f6}]}) dup2(r0, 0xffffffffffffffff) 06:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x8b01000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x40000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x101}, {0x6, 0x1}, 0x4, 0x4, 0x40}) getsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 590.494642] binder: 28224:28225 BC_ACQUIRE_DONE node 947 has no pending acquire request [ 590.509843] binder: BINDER_SET_CONTEXT_MGR already set 06:40:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="66696e7465720000000000000000b21b7b178e41dbfedd7a69df2b9f13115d72000001000100000700000004d0bd0000008004000000000058000000000000f049d5bda626f787009803000098030000"], 0x1) 06:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 590.553276] binder: 28223:28234 ioctl 40046207 0 returned -16 [ 590.590904] binder: 28223:28234 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 590.610314] binder: 28223:28242 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x200004, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000840)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f59872b4a4049c00708196f0f2b45210b095d0bfa99526407132a17bfd66b740d74e2cf6289853dc4a92acf925594bb2c", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000b80)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(r2, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f0000000400)={0x10f8, 0x11, 0x300, 0x70bd29, 0x25dfdbfb, {0x1d}, [@typed={0x4, 0x85}, @generic="542f6ae1733e9b07c189c656efc1df2cf42d4d0034f36ed96264a58fb43fa924f1d137af424099b08c1d30cc2d3dc775e74746f1ef77c2338e26018980b516448db2f6694372a4a03cf143e336b808fd12f7b2cce549dc95cf6fb55be0baf86838f60116bbdc596e5da2820d6f5296b2f670e6e1b54607af68366307655e3e0f9325e67ec2f858dea23666ad767dbc81bf4e5789e6292279e554c3dfc5ac750188601fa3e1ccfa9fb26062564e87aaa5b4e37130e0e2ffc42e9b88a8b24a2c18369898890e001d16559936b89bdcc03fbbcc7b7188b544967dfc2054f53f7027fe055a072ad0187fb306766ebb9c1cab45534cd1e6d5e188d95f5bc16b6b72e907f39a3203247485d5517bd8ced9f09566298981c77a3457f8d65681c14db6f008299e83e4337f9da6a2a2d8229bc0132cb548fbb541631ef1acd35f77a232a4f46010df8f25ab24d26407bea60eed24d5d9e5b8fae418bb9041d532b79376eed96f831b8a97e9f561a2d7171eab675b64e4ff46a0f734f006494ed7bc511a61b8f0ca09b816cf27c8c1afd0c14e5addad71f13600022c011a73c79248b7400258b2109afa7c2547eb1f1160c5b408164ec84b66e8c650b0626b1c39d4ec72f614bd236141a7e876ac81e172759c441e0a9b015bc1aa4c66245c66ea350056d7eb219991e8edcbd3f785c3854b94b09e599f1ebe748b8a91393bb9b1984876f0170f98fc584dece676fb251ad08b2fd6ecfc66e170720e69ef2f1e4bb0af8f7d7784eb2279e7add40ce7a4e53994bee366c4855efb187dea35b13225313e3ed26dd438092daabbf7af2ff18db7db2a13d78dfb936fa6529ad614f421c09940425440ba59f696ecda455797c5f496c06a1c266fb80ef8714b5a06318c57c7d0582c9b9442873aa8c00e37167b1584c602a8fee2ba807a4a5e4ec94b3086d793e88fa3da34a8a5a369f35d56fd4a50b453f90b7ef6e4d711f4b7a17bf21abd1d400c4fdf06434134ae53e4798b8b6a9e6967fa9ed8a7485751ac0f8846d0b4abd744f119c4541a89ee9d8a09dd68f181162542aa80bb0a66b128ba648832c19639ff7843ff8b6f2b3df29b92083842ed2ad4893f78de57111a82ffa3d864fca4656f858674e18e89640325e7b92870ee4a4af3f674d7be7e2bd02d3b9925aabcbce9c1ccaf2e149731f0ac1feec24de98425b9a51fdf0f3295570bf15cf82ac5320672c0ffb8e42b27eb52edc3fab12fa76cddc181d32beee4b09cd85912aa87c893bba953eb8e9618edfcdf542718dafc0e74974983ea58996de1968e1d4829bb62b9dd71df2c9e1cc25687f23f74fc69c1755cd418c16033aac8900d91c03e8dc27d26088dcdcc72978fb9999e811881250c967ffe78313bf7a1bc36dda6cc5759320357ef77701f135be049952b91594835271ac6811ca361641c5295a8f4dac836dca5fce05152d1391a2a3d3ad7e4014adf2bc5db208ea80ed566f5ab3901e7f7ea8120c7cebe9c63721974a81baf0170e0481e2df4adc06a0f1db97f48d96ce385df62a39275b093b2872ed649155c0780413bb8a5d16daa5db736383e0193bdb5fd6dcbf5a9907d25c2e82701b12e6c533171c74e1a57099e9d728a2fa72b57003a6980fffacb558212eed08eed8d1819a56c6979ccc92022109266ea48d1477ec5f33fe208c95e6e4e69485b00495d4c4d1832c67530b777488c7fb650a97bce526b059ca58a428e84a4512a5bb432353500ff192779c91b10616eda451db94e1db9a6393f720e1dd2baa4a875553cec84d239d6bfe95f8c6721281421fd2269d0bf69ea0f01b86266a249fbede5472cc17c0ed409f34d2c35e75a7ae434e151236dfa897373219a60d19314a0fc86d092ca77187ace24a942ce207f5fa11b343462a81c9137c948770e3b966e1c176340e9c855ba2f151ce548c50f488e9f070cb067f6986dffb396fa2463128ad33694557fe677a934558abf8d8d7036b5e034bffa2b51403fc3c60e61d5799a22ccd8f9e7abd02707eea7bcab8d78af5ac848b9049a6a78e80fe45e7bea0f0176665dd426d43914babb66782f7a61720a5c0532445ab1c71d7a72f9bb26222e6bfda27e59e94c42639ca02e2b1abe165e8620c397170723581d42283b6be8bab502d208123fa620099c3b1ae35f0b2e33adcbb0715599157051cbdb1d91d59759f782921f9d95d891c6f427e1d7be6b0b4fba8e49816b98ace6cab700dc9ff0cb604f9b9e358115305777079deb6ed3ffddbf0a3a972bd6ae6e3e6e607ac894c835fbb57e4b7ef6541cdd2002155fa4f9bc60203b1b27f44a3f591f1faa11936ecbcce7d0f59ea74266a84234264a0a7555565c243d82da1b4eca32da3c8fe017fdff62b3a7ebbc4f5c7d46563b415d20012e7b8b5c5c64da8e1c7e05c0e980309b03015fd60814d5a0461d9c7c7ecdb774d429cad065b73a7da48e7ae0a9cdc63bcecc805fb1bb65bbedfc2863527a2ea666237d54b5a2c4758a71bd19a8d63004f28a3d63e0284668b0a913843c2f387af612eb1a08058f57068376e4a9697b81c6fe77e686508cb8dd4a916e3b5166ac63872ec528d766166a45523c8bf0a14050b9a870fa35b3bc48399145f9593fe81af5d4dea88f3202121bb01241aabf84aff8e0fa808a63158f66838277ebfe99f564a08e4c3658bbbe271cf0faa6d1ba396ff5440e74208027b49a03dff2e49138c6714468c041a3383c56d522d0da071fce759f0ba7845e1deab23addaa154c5fa87e45dfb504c76bb8dcc45758c160ebf7d1458c7180bfd7e18e4d4f89873c4b6bf7f84307c86c9b6b80af0752034cca540f41799a0cc43d311bea175eaefafac9f7d29ff07f2cc94ed2a2fe7546079f4dcf4e7bbd906c3235ff35c8029f79bef724a7dbc9372ac72c942385b396964f1de7252fc3c1f6d035fed757b3c580b40a5828aea4cbfeb29971b39ca64f082abc717b088b740745955f1053ea76c204e7d1af945353f6e583a47a00ae5b12f12c357bffb12c6e1df57bbb4175588b34204e7a0ff1dc2ef0adf85919d1e3812b15023566defc4ce2a0feda5c06f58b4983f161ddba5beb3727903af4aa53342dd7fcf3599818b9abd527c5a822ae99125a65a175ba15c2cd7d647bcfa6e01102def3fd3b34d1e1e76ecd3b69511522812712f839d7b1dadff68c9fe0be5453241c60969f866e70aecf91cbb97ca75aa9ee92921c95e9d7f7186eaacb2f5bae5cae70e38fef4dfc72208a13001e7775832aaa2bb2564cadea37f6e8b5f89da37a1ecd2cbcb1697e4863a913f03d286bbf19ed4ddc694165844a16a8a51def944c346a0ae4135fb9fbdbfcc32ecb4db62ca810271dcc01fe7902af07e783ee694c414bb1d7dabc039ff907e1aa38295225dc473d818e0832f294da2524bcf61f89ac07d5ca9baab979821c33aa807e460959db2a0dccf4679234dd8acbfd474545f1f4eb969077a324c96d899334936d2902b5a4828b9b2ad55be8686f67a65e92f254e62cd8d0a52950ffdc66ce40d576a26c403494ef9009035fc8e13a0b4f91766c206c5a58d98e79fa6b92c5508c1a9560c956e129a6ac05a4b39c9384c7281e8d9d39a1f306c1aa524b55e17bbb56dbf3509893b6b9b44ee5e16cc17e626d5470379d3216238f798546713d35e90e72161134841e05e9c812b066f48af2bfcf5b67e8e92d7e969f342e075418ea5d440709fa63402907ce7efa3875d2ec04fbf68ce4ad3933347837770986fcad6171e9277b0f05832f341c8d9540cf786f0c0176014284d967f06b31d9ea3caa29e2d4b579969a5c53ea36b9dafa88a8037ad4e3b681d439fdf244307442bf4b2d16a1893fe9865d27c9446d38ef46849a5f7db556aef9b920501729ddc8f2db7fe16c63d70807c15222a919ae4a4f6beb78d8d21f30e1d23007debbcfd7c555d382d749dbc74590001fb3ee15e6f97d631789ba616f9ad47bd4ca4dd54a2d96218ebf03584e64c184262521f236f27e994ad92f846a759e27828a4e3282e4ff8a7f4caa0e4f0df51a1b196604c69159056e08b697a2f5ccd47a94cb2d0e4e33e1516178fdd1c02596044a005d62037598ce2896f9485fb24991e27e18afea5517ae26a8e3305a246b2b60ed70a72977cb2f9da6d9e48d4ee6d9480dcbbdab8f925d5adee042a709237e99114fc87f89df93ecb9c9d84f96384fad648427b0b45114a1f1b0b7804d3cacfa2cb463ab0b8d79c87864fbed26562faaeea662416b61e19cfe435ee1ec4dfb763ce5d4e77c8786b637ff81c280436f5554992c9058c4c6a2e69f149873060e91a9b9161d0b47c76e6ed9536b6a596ea94722a853237f19bc0c45fd997030643c3ab47ca8bf897674ebdc28f38e1283038cf0320c6820058b0dc474fb7ea1874a6c893ed27676f6a0b90466289b6f1486ab2c5452acef66375f97c148a2d1792e305fb1d577516eef9a1af1d882cfe9509fe1d91e5a518c1ec12aaf0114012e734e40971257aa87e6c4dbf954e99df171d22aa59037e9e140d22bf7e97617f989ae0155b06a5eeec542c70dc13ea858aca06567b2dccee79de71d09015764b64ae6d95714b4b047a1869fe9ebb4c5742404b2b1100d7c77a04387697e1d5b73bc3f2e75dbb17863589e40c83749dcb92c4f27227f115e5c3c2fce9ade156a7928304f22d594d399a95867734e95654b3e06eb79624b21e850ae5860b092339ddce136692ded82fdce12bb3fb7bac0478e1a02a75727a1f6d94bf3e3e946b0bb9db2d63f9ef7e0f9d8aa3ea5462b867f4319434f93a5f84e3f7c814af629bb23039c9125d2b6c3782099ce3296c4769cc6047a8c48f705107247e97eb25ca8f50b43d5d457b8a42abca32ba04e28968b7ca6d124969cd7f731f413e8ef6e05b6587598bbfe96a6f297d87520c3bef1abc5b7bc508991bbc067c21487335743f3580a0369dc4baaf67e962f7cbc4ae947356296c4ad2c63d6f084b7fa0d57df266294abdc28db3c1a1d792715b865f6a38088fdda056d0fd24138e1e8d15bc775ca7c18a6ab5ea54b1505081e31176518dead58ffd726a8748b5910e8c18a425f78f36a9784efc4e960b4a9458706c1de8c834378d58fcf1ffc12719c2b04b5378374eeea24deae572dd9cdb5642db5051036df679863bd83df78bed6194d3a1828fc30615adb6c67bc19cfecb55097646a2644e54851d08084669768a2c629b2d67b80234cd16d79fc4e70dd0cc4e0ac82fb75e13c78be2f378017261fefb0e0f705e4a39a0d9377b0365b3b845e828b6284caeb67edfddd512f99bdc295381fdb246991c7da00ab5b81b3ec090340939339e321c32ed8c9b7a8463090bd795c9575faa91c57b44a9acc7d0be3aa4951f88c3a3b1312bd7ced4871118ccf5e805182dead45645cd5150846a2267ab3731630e3cb8279454332330f0a7596ceafffb8046cb4876e49fb2a42fb9c86fe66632aa47aa40167642ce81e2762e27a7e1ebaf91e2a4ef228bd3ddba9e508bde286aa966dfc833bea87fc74accbcea7de365f59b4fb6bfc66db47eb0c6c7e99791e147592ac7bc3bd15147a7f7ee9ee7445a18f72d3cb4f9e923fa64e22630db7cdd923d74bedc746c5ef325a23bc807d5e583a14d81d7196da75265e52a56ff3fa3b547848935bd3f3328152643f828527f4aa9ca12b661e7720612f823831ff2456b0b188cceb72f244ff6648b2f84cd6680d3bd96758956de34994592748f503679a9045f34fe53eaeb56d79e961a1c7914839d2b9055554626934d07d7a23370dd3", @generic, @nested={0xe0, 0x8e, [@typed={0x14, 0x40, @ipv6=@local}, @typed={0x8, 0x41, @uid=r4}, @typed={0xc, 0x3c, @u64=0xffff}, @generic="95fe8c3a2033609f25ad04ac7e885e9e5042cca1ce50ef8f1aa5c4", @generic="8b8e5f30dba4e087c0ec2fac97aede116c88abfa8170642372bf5a01863fc87af7891a6501a3ea4bb104dbd252d89a912cbcc447b6f945f52093a59687d9c290b43dc0d27796a1510e994c3fab8cbd98f02a9dae53b5fb17edc31e36a3fca4ecab6cd9f3ee71abea840e8804f6abeb087aa479fd83f546e7c063220c2a295e7a474c4a4ab4", @typed={0x14, 0x61, @ipv6=@local}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sched_setscheduler(r3, 0x7, &(0x7f0000001580)=0x6) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000240)={0x1, 0x6, 0x0, [{0x80000000, 0x4, 0xffff, 0x8, 0x20, 0x1, 0x52}, {0x100000001, 0x3, 0x0, 0xffffffff, 0x4, 0x9, 0x80}, {0x3, 0x2, 0x4, 0x200, 0x2, 0x6, 0x4000000000000}, {0x7, 0x1, 0x7, 0x8001, 0x2, 0x4, 0xffffffffffffff94}, {0x400, 0x7ff, 0x1, 0x4, 0x6, 0x251e61f7, 0x100000000}, {0xfffffffffffffff9, 0x6, 0x0, 0xffffffffffff418c, 0x6db4, 0x5, 0x100000000}]}) dup2(r0, r1) 06:40:42 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0x0) r1 = dup(r0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x1}}) 06:40:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9105000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 590.710480] binder: 28251:28252 BC_ACQUIRE_DONE node 951 has no pending acquire request 06:40:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 590.780332] binder: BINDER_SET_CONTEXT_MGR already set 06:40:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000440)={0x80003}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x141000, 0x0) [ 590.826584] binder: 28255:28265 BC_ACQUIRE_DONE u0000000000000000 no match [ 590.836553] binder: 28255:28258 ioctl 40046207 0 returned -16 06:40:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xa1ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 590.900405] binder: 28269:28270 BC_ACQUIRE_DONE node 954 has no pending acquire request 06:40:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:42 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x80) dup2(r1, r2) 06:40:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff9e}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 591.061033] binder: 28281:28283 BC_ACQUIRE_DONE node 956 has no pending acquire request [ 591.114888] binder: BINDER_SET_CONTEXT_MGR already set [ 591.160398] binder: 28281:28287 BC_ACQUIRE_DONE u0000000000000000 no match [ 591.160894] binder: 28281:28283 ioctl 40046207 0 returned -16 06:40:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e24, @broadcast}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000024000)={0x10, 0xf0}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0b000004000000000000000000000000000000000000000070409cea085a67c3160331b602c5d382076663", @ANYRES32=0x0], 0x1c}}, 0x0) 06:40:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0xe3094556c74d8fcf, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0) 06:40:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3f00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffea}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:43 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000280)='cpuacct.usage\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) dup2(r3, r4) 06:40:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)={{}, {0x0}}) flock(r0, 0x6) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r5], 0x1) getegid() r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x80100, 0x0) r8 = socket$inet6(0xa, 0x7ffff, 0x9) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r9, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 591.901360] binder: BINDER_SET_CONTEXT_MGR already set 06:40:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='proc\'\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x22, 0x1000, &(0x7f0000000580)="abcc524f136c69bf0c73d1d6d4c24e6bfaf5d9e1391621a6ecac0e5c7276d054b915", &(0x7f0000000b80)=""/4096, 0x8000}, 0x28) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/mixer\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"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"}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000340)=[{0xa8, 0x19b, 0x0, "416707591b54eedb3c071093ea94289da008e67cc913163a7f8f3c0462fa2bd49b4014ee7dd1b5dbb152dc7f6477932952aeaa598bda310d4f631191d88ce2201bfb08617b6d32553b4eaa4018278980d994cbd7928e03de3e93012ada8e7cc85803cadbb6c424f2a57f5ee6f8bf38c15198d5aa4a5b290c0d7e043977d1430b1dfb6ad480d5f1274efcbe0623281a9f2058f3b9a168"}], 0xa8}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0x60030000000000) 06:40:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xeaffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 591.945700] binder: 28298:28310 ioctl 40046207 0 returned -16 06:40:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2b, 0x400000000000801, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000080)={0x4, 0x0, 0x6aea, 0x81, 0xf80000000000000, 0x100000001}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) poll(&(0x7f0000000180)=[{r1}], 0x50, 0x0) 06:40:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x7f, 0x20000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x3, 0x4, 0x3, 0x1}, {0x8434, 0x3ff, 0xa85b, 0x7fff}, {0x7, 0x7fff, 0x6, 0x9b54}, {0x6, 0x80, 0x480000000000, 0x93a}, {0x6, 0x2, 0x3ff, 0x1000}, {0x1ff, 0xc5, 0x4}, {0x7, 0x1000, 0x42, 0x100}, {0x3ff, 0x2, 0xfff, 0xfff}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') syz_mount_image$xfs(&(0x7f00000003c0)='xfs\x00', &(0x7f0000000400)='./file0\x00', 0x2, 0x0, &(0x7f0000000440), 0x800, &(0x7f0000000480)={[{@usrquota='usrquota'}, {@norecovery='norecovery'}, {@uquota='uquota'}]}) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x7c, r4, 0x502, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) dup2(r0, r2) [ 592.107841] binder: BINDER_SET_CONTEXT_MGR already set 06:40:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0xc, 0x6, 0xfffffffffffffffb}, 0xfff4}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80400, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr}, 0x10) [ 592.136437] binder: 28331:28332 ioctl 40046207 0 returned -16 06:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x200000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x91050000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 592.207582] XFS (loop1): no-recovery mounts must be read-only. 06:40:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffea}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x1000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 592.329273] XFS (loop1): no-recovery mounts must be read-only. [ 592.365636] binder: BINDER_SET_CONTEXT_MGR already set [ 592.401640] binder: BINDER_SET_CONTEXT_MGR already set [ 592.409406] binder: 28350:28351 ioctl 40046207 0 returned -16 [ 592.442565] binder: 28354:28356 ioctl 40046207 0 returned -16 06:40:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r4, r5+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)={{0x0, 0x0}, {0x0}}) flock(0xffffffffffffffff, 0x1) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r6, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRES64=r8, @ANYPTR, @ANYRESOCT=r7, @ANYPTR, @ANYRES32=r3]]], 0x1) getegid() r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r10, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r10, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r11, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:44 executing program 0: clone(0x8000200, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() socketpair$inet(0x2, 0x80a, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000240)=""/237, 0xed}], 0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000100)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 06:40:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x4, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000001440)=""/17, 0x11}, {&(0x7f0000001480)=""/165, 0xa5}], 0x2, 0x17) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 06:40:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:44 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x181000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x90000000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x103001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r2, r3) 06:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x30000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 592.775455] binder: BINDER_SET_CONTEXT_MGR already set [ 592.781737] binder_transaction: 22 callbacks suppressed [ 592.781746] binder: 28373:28375 got reply transaction with no transaction stack [ 592.794760] binder_transaction: 22 callbacks suppressed [ 592.794778] binder: 28373:28375 transaction failed 29201/-71, size 0-0 line 2762 [ 592.822554] binder: 28377:28380 ioctl 40046207 0 returned -16 [ 592.822747] binder: 28377:28388 got reply transaction with no transaction stack [ 592.836082] binder: 28377:28388 transaction failed 29201/-71, size 0-0 line 2762 06:40:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:44 executing program 4: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') 06:40:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 592.941006] binder: BINDER_SET_CONTEXT_MGR already set 06:40:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x42) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x1f, 0x8, 0x241, 0x8}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) dup2(r1, r2) 06:40:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)="dc20e68d9f933345c30f51391b1ab7a1f77fa8cf2666c5de59e1bd0f2231c65cfada02ecbf898173a1a5f957309de7877b81b42e0a1f2126d4a920b0c2a6fe0b47a48e5eec9b6103eebb7901dfbf85bbab85bb1ef3a2a0526113c7538a6f09") ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r4 = geteuid() r5 = getegid() r6 = fcntl$getown(r1, 0x9) read(r2, &(0x7f0000000240)=""/8, 0x8) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="8000070000b1", 0x6}], 0x1, &(0x7f0000000680)}, 0x8000) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc", 0x2}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r10 = getpgrp(0x0) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000008c0)) sendmsg$netlink(r2, &(0x7f0000000880)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x12000c00}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="040300001e0000042bbd7000fcdbdf250c0013000400000000000000d8012300fbdbd8eb693a198c56e46ec27b05661915a946bb45865b19ac1b8360cec3fbcd33855ff4fd0575622cf812f3674e95183012ec3548a0f5f476e85c39d2873ea8a3a79ad2a0e50c886b0116b61cf529ce9b619d557f9388bd4755372ce5a6924fdb3e08292e033cbddc577bc48a38c6b39f1deb188a805a10c3e5938483452eb108003500", @ANYRES32=r0, @ANYBLOB="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"], 0x304}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="280000000000f80200ff00deffffff0000f2ffffffffffffff0000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2], 0x100, 0x44000}, 0x0) sendfile(r1, r0, &(0x7f00000009c0), 0x880000c0) [ 592.965534] binder: 28377:28380 ioctl 40046207 0 returned -16 06:40:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 593.048388] binder: 28397:28403 got reply transaction with no transaction stack [ 593.056101] binder: 28397:28403 transaction failed 29201/-71, size 0-0 line 2762 06:40:45 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioprio_get$uid(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20e, &(0x7f0000000180)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0x0, 0x10}, 0xc) r3 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x7, 0x80000) ioctl$VT_ACTIVATE(r3, 0x5606, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f0000001340)=""/4096}, 0x18) [ 593.166068] binder: BINDER_SET_CONTEXT_MGR already set [ 593.195113] binder: 28411:28412 ioctl 40046207 0 returned -16 [ 593.226626] binder_thread_write: 5 callbacks suppressed [ 593.226638] binder: 28411:28412 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.239153] binder: 28411:28412 got reply transaction with no transaction stack [ 593.246718] binder: 28411:28412 transaction failed 29201/-71, size 0-0 line 2762 [ 593.314826] binder: 28411:28414 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.321970] binder: 28411:28414 got reply transaction with no transaction stack [ 593.329535] binder: 28411:28414 transaction failed 29201/-71, size 0-0 line 2762 06:40:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000840)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffffc}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffff0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket(0x40000000015, 0x805, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x840, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x20) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 06:40:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:45 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r0) 06:40:45 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x1) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='.!\x00') r3 = getuid() setuid(r3) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f, {0x0, 0xfffffff5}}, 0x80, &(0x7f0000005b00)}}], 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) ioctl(r0, 0x0, &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000240)) r4 = getgid() r5 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x1, r3}, {0x2, 0x3f21fd1086ce279c, r3}, {0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x0, r4}, {0x8, 0x3, r5}, {0x8, 0x0, r6}, {0x8, 0x0, r7}], {0x10, 0x4}, {0x20, 0x3}}, 0x5c, 0x2) 06:40:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 593.440615] binder: 28425:28427 got reply transaction with no transaction stack [ 593.448296] binder: 28425:28427 transaction failed 29201/-71, size 0-0 line 2762 06:40:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 593.504214] binder: BINDER_SET_CONTEXT_MGR already set 06:40:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440), 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="8a", 0x1, r1) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000180), &(0x7f0000000300)='u', 0x1, r2) r5 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000140), &(0x7f00000007c0)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000100000044c249b544230b9387fb8bd6ed266ccf59ee70995bf2e8e2ecd3fff32853747eda22d29be9b36119ec53dc60e2c80b3e9ffa1b81a808ca27e0ec82a1256a8e9a4febf85f2d925493f62113e3575f8c7eba67fc19a9497f5b07e5849d2e875b0687d6401d36616fe0f3c3002801b4621de1632a89525e8e81f750a86eb580fb46c1523b8a25e71690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3a", 0xc0, r3) r6 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000000340), &(0x7f00000002c0)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r4, r5, r6}, &(0x7f00005cd000), 0xd, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x2, 0x470, [0x0, 0x20000140, 0x20000310, 0x20000580], 0x0, &(0x7f0000000080), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1_to_team\x00', 'dummy0\x00', 'eql\x00', @dev, [], @link_local, [], 0x120, 0x150, 0x1a0, [@statistic={'statistic\x00', 0x18, {{0x0, 0x8}}}, @rateest={'rateest\x00', 0x48, {{'veth0_to_bridge\x00', 'irlan0\x00'}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'syzkaller0\x00', 'gre0\x00', 'bpq0\x00', 'nr0\x00', @broadcast, [], @empty, [], 0x110, 0x110, 0x240, [@mark_m={'mark_m\x00', 0x18}, @arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @multicast1, 0x0, @random="a8d6c454aa8f"}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:su_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x4e8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) [ 593.537889] binder: 28435:28436 ioctl 40046207 0 returned -16 06:40:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 593.593650] binder: 28435:28436 BC_ACQUIRE_DONE u0000000000000000 no match [ 593.600840] binder: 28435:28436 got reply transaction with no transaction stack [ 593.608373] binder: 28435:28436 transaction failed 29201/-71, size 0-0 line 2762 06:40:45 executing program 4: clone(0x2042205, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3f, 0x800) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000280)=""/4096) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001280)=ANY=[@ANYBLOB="050000000400740005002500200085e83ed4bb8fb105eaae0ac5ee856eaa05ba660b642a67449debd2605716f9ac5f2b5c8885167295b001fe5e33aa31b1fd7153ef8f3be663baa8098d5c89524901000080b27ee40561cd6006f2726edc01110d00"], 0xe) setrlimit(0x7, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x4, 0x2) mq_open(&(0x7f0000000040)='mime_typenodev,[\x00', 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) 06:40:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x400000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 593.702177] binder_thread_write: 8 callbacks suppressed [ 593.702188] binder: 28452:28454 BC_ACQUIRE_DONE node 985 has no pending acquire request [ 593.715945] binder: 28452:28454 got reply transaction with no transaction stack [ 593.723493] binder: 28452:28454 transaction failed 29201/-71, size 0-0 line 2762 [ 593.743372] binder: BINDER_SET_CONTEXT_MGR already set [ 593.777941] binder: 28435:28436 ioctl 40046207 0 returned -16 06:40:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8b03a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80e12f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:45 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x7, 0x4) timer_create(0x0, &(0x7f0000000380), &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xadf}, &(0x7f0000000600)=0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x77, "e6b4d34579896ef1f86541835884fd01d1f132d32b3d44cb453089eff2c3710930605ab95296f6cd1d154ae966e18562607bf996d17cfbc019d28724d73c9a95d2d6f3c4c7ea234635dfc1e177e3bf3104a93cd40d813fc1afbb4c98eac5933b3069ac551ebf3f9bc5610c4d79a47b30a49601d880001a"}, &(0x7f0000000180)=0x7f) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) listen(r1, 0xffffffffffbffffc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) sendto$inet6(r4, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x0, 0xe603000000000000, 0xfc000000]}}, 0x1c) 06:40:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x5, 0x137}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2000) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) r3 = dup2(r0, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)=0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) 06:40:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffffffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000100)={0x43, 0x9, 0x2, {0xff, 0x80, 0x0, 0x1, 0x5, 0xffffffff, 0x10000, 0x88, 0xffffffff00000000}}, 0x43) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x84300, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x7fff, 0x8d}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="20458dd3436ea7965d0a555c0d77ecef9e8443f2c4bcf8a62e80d1048705e22a080000000000000098d09041"], 0x2) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) [ 594.054630] binder: 28473:28475 BC_ACQUIRE_DONE node 987 has no pending acquire request [ 594.062946] binder: 28473:28475 got reply transaction with no transaction stack [ 594.070604] binder: 28473:28475 transaction failed 29201/-71, size 0-0 line 2762 [ 594.094569] binder: BINDER_SET_CONTEXT_MGR already set 06:40:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 594.121132] binder: 28481:28486 ioctl 40046207 0 returned -16 [ 594.157180] binder: 28481:28486 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000840)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfcffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:46 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) [ 594.164486] binder: 28481:28486 got reply transaction with no transaction stack [ 594.172110] binder: 28481:28486 transaction failed 29201/-71, size 0-0 line 2762 [ 594.236877] binder: BINDER_SET_CONTEXT_MGR already set [ 594.255332] binder: 28473:28475 ioctl 40046207 0 returned -16 06:40:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x200000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 594.469375] binder: 28515:28516 BC_ACQUIRE_DONE node 990 has no pending acquire request [ 594.481684] binder: BINDER_SET_CONTEXT_MGR already set [ 594.503845] binder: 28517:28519 ioctl 40046207 0 returned -16 [ 594.526723] binder: 28517:28519 BC_ACQUIRE_DONE u0000000000000000 no match [ 594.558661] binder: 28517:28524 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:46 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0x4d) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:46 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="011db806247a7109ca8f2ce36209a69c292e54af416b8c07967cddb6b85969ef054ca5c3886258a5599111ef18d92d515d59f83fe0a0a80fbd42a799937ddbc1bb28b10de10d69fa70614b9c4c97b3bfd37d174fca472e51665a05ac51"], 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x3ff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) capset(&(0x7f0000000340)={0x20080522, r4}, &(0x7f0000000380)={0xff, 0x800, 0x1, 0x6, 0xed, 0xffffffff8971e71d}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000400)=0x30) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x114, 0x80002) write$P9_RXATTRCREATE(r6, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) dup2(r3, r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80001, 0x0) 06:40:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffc}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x7ff) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80000) close(0xffffffffffffffff) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x80111, r0, 0x100000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x1f}}}, 0x84) 06:40:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x400300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000001c0)=""/4096) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x28201, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x23b2) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) [ 594.790956] binder: 28535:28537 BC_ACQUIRE_DONE node 994 has no pending acquire request [ 594.796735] binder: BINDER_SET_CONTEXT_MGR already set [ 594.832824] binder: 28533:28540 ioctl 40046207 0 returned -16 [ 594.843902] tpacket_rcv: packet too big, clamped from 65535 to 65392. macoff=96 06:40:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x13, 0x0, 0x100000000, &(0x7f0000000300)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7, &(0x7f00000003c0)={0x1}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r4 = dup2(r1, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchown(r0, r5, r6) 06:40:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 594.886984] binder: 28533:28540 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xa1ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:47 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="92edb1463e3d64cf038ee0cfbf760e0d", 0x10) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x3, &(0x7f0000000400)=0x4) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140), &(0x7f0000000a00)=0x18) write$binfmt_aout(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1af) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) r6 = gettid() lstat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000680)='./bus/file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f0000000800)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@dev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000009c0)=0xe8) r11 = getegid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000e00)=0x0) getgroups(0x2, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000fc0)=0x0) r15 = getuid() ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000002c0)={0x6, 0x940, 0x6}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) sendmsg$unix(r4, &(0x7f00000011c0)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000580)="fb8a3aca2e3df15d5e0e5e7448e1d92b1305e03887ae89617f6167b9bafa5c7ab2abd86618fba9f00b65955b52d05b079788f3ee0812a95475ef3132f7c30d6f90d9eea63e8273bb9d53d9d682dc5647dae1b9f24191e43a14ee39724656eda3697a5edb9573ea92987acdba4101f84723b0", 0x72}], 0x1, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, 0x0, r13}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r4, r5, r0, r2, r2, r4, r3]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r2, r2]}], 0x110}, 0x4080) r17 = dup(r2) sendfile(r4, r4, &(0x7f00000000c0), 0x8080fffffffe) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000940)=0x99) syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x100, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="1ee9da3cecb80c954230469a7b7bd5e48e824a0a2fd10586479b2a56ba3155f50239d6ddc02d8cdd3b1c461edc1fee288cb6b4e6d291d3c76e788122b35689f5784417d00d3f76a2d7c445514e2490ba1ff8d3816a92499f74602eb6dd2608d2a3c3ad2d4347c528f934a03cef9a7f162c6e8fbd1604bc46e37fedd423fd873aea0e", 0x82, 0x8}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="75cedd1d", @ANYRESHEX=r18]) accept$nfc_llcp(r17, 0x0, &(0x7f0000000440)=0xffffffffffffff40) [ 595.017254] binder: 28553:28556 BC_ACQUIRE_DONE node 998 has no pending acquire request 06:40:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff7f00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 595.196656] binder: BINDER_SET_CONTEXT_MGR already set [ 595.239909] binder: 28569:28575 BC_ACQUIRE_DONE u0000000000000000 no match [ 595.250282] binder: 28569:28572 ioctl 40046207 0 returned -16 [ 595.315350] binder: 28577:28579 BC_ACQUIRE_DONE node 1001 has no pending acquire request [ 595.335584] binder: BINDER_SET_CONTEXT_MGR already set [ 595.369593] binder: 28569:28572 ioctl 40046207 0 returned -16 06:40:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x2, 0x5, 0x8000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r4 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r4}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) write$P9_RREADDIR(r5, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x9, [{{0x18, 0x4, 0x2}, 0xb27, 0x400, 0x7, './file0'}]}}, 0x2a) dup2(r1, r2) 06:40:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 596.064636] syz-executor0 (28531) used greatest stack depth: 12824 bytes left 06:40:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x2000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:48 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82ef42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b7c7e115b7cd9a6f6efb951324a23967bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) prctl$setendian(0x14, 0x2) 06:40:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000fcffffff0000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xf4, &(0x7f0000000280)=""/244}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0xa9, &(0x7f00000003c0), &(0x7f00000004c0)=""/169}, 0x28) 06:40:48 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) prctl$intptr(0x34, 0x3) getcwd(&(0x7f0000000040), 0x0) [ 596.176139] binder: 28600:28601 BC_ACQUIRE_DONE node 1003 has no pending acquire request [ 596.178696] binder: BINDER_SET_CONTEXT_MGR already set 06:40:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/220, 0xdc, 0x0, 0x3, 0x9, 0x2, 0x7f}, 0x120) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0x2b5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sigaltstack(&(0x7f0000012000/0x3000)=nil, &(0x7f0000000100)) 06:40:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xb, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 596.225552] binder: BINDER_SET_CONTEXT_MGR already set [ 596.242531] binder: 28594:28617 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.256231] binder: 28600:28601 ioctl 40046207 0 returned -16 06:40:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff7f}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:48 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x6) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x6002, 0x1000}) [ 596.274596] binder: 28594:28607 ioctl 40046207 0 returned -16 06:40:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = fcntl$getown(r2, 0x9) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x208480) ioctl$TCFLSH(r4, 0x540b, 0x404) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0xfb, 0xfffffffffffffff9, 0x8, 0x5, 0x0, 0x80000000, 0x2, 0x8, 0x1, 0x3f, 0x2, 0x7349, 0x8001, 0x4, 0x354, 0x9, 0x7, 0x7, 0x7f, 0x2, 0x100, 0x7, 0x142a, 0x2adbe848, 0x2, 0x70, 0x8, 0x9, 0x10001, 0x11, 0x3f, 0x5f5c, 0x3, 0x100000001, 0x9, 0x92a, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x4, 0x6, 0x2, 0x7f, 0x2771, 0x6}, r3, 0x10, r0, 0x0) r5 = dup3(r2, r2, 0x80000) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) dup2(r1, r2) 06:40:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400201) r1 = socket$inet_sctp(0x2, 0x5, 0x84) semget$private(0x0, 0x3, 0x5a) r2 = semget(0x3, 0x1, 0x200) semctl$SEM_INFO(r2, 0x80003, 0x13, &(0x7f0000000100)=""/150) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10000000}) 06:40:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0x2000004c, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 596.416706] kvm: pic: level sensitive irq not supported [ 596.437312] kvm: pic: single mode not supported [ 596.455484] binder: 28630:28631 BC_ACQUIRE_DONE node 1006 has no pending acquire request [ 596.472831] kvm: pic: single mode not supported [ 596.472844] kvm: pic: level sensitive irq not supported [ 596.498635] kvm: pic: level sensitive irq not supported [ 596.504180] binder: BINDER_SET_CONTEXT_MGR already set [ 596.521988] kvm: pic: single mode not supported 06:40:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8204, 0x52, 0x3, 0x0}, &(0x7f0000000080)=0x10) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@remote, @mcast2, @remote, 0x8, 0xfffffffffffff58b, 0x0, 0x500, 0x6, 0x1000c0, r4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x200, 0x8, 0x3, 0x7, 0x80}, 0x98) 06:40:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 596.522002] kvm: pic: level sensitive irq not supported [ 596.546571] binder: 28633:28646 BC_ACQUIRE_DONE u0000000000000000 no match [ 596.547286] kvm: pic: level sensitive irq not supported [ 596.592144] binder: 28633:28638 ioctl 40046207 0 returned -16 [ 596.598428] kvm: pic: level sensitive irq not supported [ 596.630152] kvm: pic: level sensitive irq not supported [ 596.641412] binder: 28649:28653 BC_ACQUIRE_DONE node 1009 has no pending acquire request [ 596.697940] binder: BINDER_SET_CONTEXT_MGR already set [ 596.713148] binder: 28633:28638 ioctl 40046207 0 returned -16 06:40:48 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x803, 0x9) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916ac49aa9257d9e4c491155a27fbe9d97c0aff509070fce4977dbf7579ef0ab9d4a3ce1252dc93e4b30c12f3999"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:48 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x34000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e21, @loopback}}) dup2(r0, r1) 06:40:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3, @u64=0x3}]}, 0x20}}, 0x0) [ 596.813860] QAT: Invalid ioctl [ 596.880440] QAT: Invalid ioctl [ 597.035138] kvm: pic: level sensitive irq not supported 06:40:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000180)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) 06:40:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0xe241) dup(r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr(r2, &(0x7f00000000c0)=@random={'system.', '\'GPLproc\x00'}, &(0x7f0000000100)='IPVS\x00', 0x5, 0x3) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r3, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') write$tun(r3, &(0x7f0000000580)=ANY=[], 0x0) 06:40:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x9effffff, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9effffff00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20084, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x9ea}}, {@common=@fscache='fscache'}, {@timeout={'timeout', 0x3d, 0x200}}, {@common=@access_user='access=user'}, {@sq={'sq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x2}}, {@rq={'rq', 0x3d, 0x2}}]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) [ 597.035704] kvm: pic: single mode not supported [ 597.115836] binder: 28671:28673 BC_ACQUIRE_DONE node 1012 has no pending acquire request [ 597.137140] binder: BINDER_SET_CONTEXT_MGR already set [ 597.159231] binder: 28672:28674 ioctl 40046207 0 returned -16 06:40:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be4c99aacc2e5ddc34f553e8be8a52cf5ce8cef61042af882e45c797d0d22a20af818b2d6eb8ca617d06a5b9be2529ffa4535ea435f3a35933304a992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62d7e3db09f0f41aa9ba55d4208e41cf002015fe6187ed77f250ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f157fdfd49c986188e15eaad2521094e1151aa51863565f3bc2901d19ee79b767bc00907b17297c"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 597.179381] binder: BINDER_SET_CONTEXT_MGR already set 06:40:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 597.202572] binder: 28671:28673 ioctl 40046207 0 returned -16 06:40:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x40030000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) 06:40:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 597.350336] binder: BINDER_SET_CONTEXT_MGR already set 06:40:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x1000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x8b01, @u64=0x3}]}, 0x20}}, 0x0) [ 597.406932] binder: 28698:28699 ioctl 40046207 0 returned -16 [ 597.464429] binder: BINDER_SET_CONTEXT_MGR already set [ 597.504430] binder: 28698:28699 ioctl 40046207 0 returned -16 06:40:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000180)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) 06:40:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3a, @mcast1, 0xff}, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, [], 0x18}, 0x8}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x7b7c984d, 0x5, [0xffffffffffffffc0, 0x0, 0x1, 0x8d6, 0x9]}, &(0x7f0000000280)=0x12) 06:40:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf00}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffff9e, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000013c0)) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x200, 0x4) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) sendto$inet6(r0, &(0x7f0000000100)="ed35f699ae1b6ef8624b10487fa9798cbfca4d1d49784bf74ef65c7299d5d9f26bb72b25dfd8efec6b3504fa83e48c9cc9329e306e2df066d4bcf689dbc6ec695e3933469bf0cff964b3d595975f7211b71e", 0x52, 0x20000001, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @ipv4={[], [], @multicast1}, 0x80000000}, 0x1c) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) socket$inet6(0xa, 0x80000, 0x6) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000000200)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, &(0x7f0000fc8000), 0x0, 0x0, 0x0, 0x4}, 0x8000) sendto$inet6(r2, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) write$FUSE_OPEN(r3, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x0, 0x6}}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@remote}}, {{@in=@loopback}}}, &(0x7f0000001380)=0xe8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) 06:40:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 597.724642] binder: BINDER_SET_CONTEXT_MGR already set [ 597.751482] binder: 28724:28725 ioctl 40046207 0 returned -16 [ 597.782137] binder_transaction: 21 callbacks suppressed [ 597.782147] binder: 28724:28725 got reply transaction with no transaction stack [ 597.795171] binder_transaction: 21 callbacks suppressed [ 597.795189] binder: 28724:28725 transaction failed 29201/-71, size 0-0 line 2762 06:40:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffffffc, @u64=0x3}]}, 0x20}}, 0x0) 06:40:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000380)="2f005b37dfa5b433c070c3f613bcbc395ccb42723153977e90e32731299dee0c4a3db1740f27ae61cac1bd8388d6f229bd48d1d5d9be79db4ee9002d40f841195854f2f2ac3b4c4a0d70e3626bbbaf99f3a8638c3ff99487a0b5fe7c8aa3e24061957627d2075f8cee184c3f3adbfb9567e950ce46881c16e2a7ade170a364bc000000000200000000", &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[]) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=""/13, 0xfffffffffffffd9c}, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000240)={0xd, 0x1f, {0x0, 0x8, 0x4, {0x8}, {0x9, 0x6}, @const={0x2, {0x7, 0x3, 0x7, 0x8}}}, {0x56, 0x5, 0x5, {0x8, 0x2}, {0x6, 0x95}, @rumble={0x3, 0x101}}}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) listxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000440)=""/185, 0xb9) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000500)=""/207) sendfile(r1, r3, &(0x7f0000000300), 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0xff, 0x4) getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in=@local}}, {{@in6=@local}}}, &(0x7f0000000800)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)) geteuid() gettid() getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003840)={{{@in6=@remote, @in6=@local}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000003940)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003d40)) stat(&(0x7f0000004380)='./bus\x00', &(0x7f00000043c0)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r4) 06:40:49 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x300}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 597.916407] binder: 28724:28736 got reply transaction with no transaction stack [ 597.923962] binder: 28724:28736 transaction failed 29201/-71, size 0-0 line 2762 06:40:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f00000000c0), 0x10) [ 598.000084] binder: 28750:28751 got reply transaction with no transaction stack [ 598.007658] binder: 28750:28751 transaction failed 29201/-71, size 0-0 line 2762 [ 598.018927] 9pnet_virtio: no channels available for device / [ 598.062570] binder: BINDER_SET_CONTEXT_MGR already set 06:40:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf00000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x100000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 598.087784] binder: 28758:28759 ioctl 40046207 0 returned -16 [ 598.115287] binder: 28758:28759 got reply transaction with no transaction stack [ 598.122912] binder: 28758:28759 transaction failed 29201/-71, size 0-0 line 2762 [ 598.193763] binder: 28758:28761 got reply transaction with no transaction stack [ 598.201329] binder: 28758:28761 transaction failed 29201/-71, size 0-0 line 2762 06:40:50 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)="5a84bc5a85018335b9b18412526cb0c8c3b96d6fd9ac40b227fa21767e3a1e249f62821e05ecfaa153bc74323ac7422ba9b44d4714bfaebd3028a85413292a26399c3df05f3299fdfa11af88bfb4a6eb21ca98f5ffffad49c18ab0f6a3c7578d38d1b58143ee1b072ab0225b73548abaa6e4117cfd4842ce0bb161b25ad5f66dde66cff7e082f64c16a7cc4159b0197c22fea296b4e85bea79f914") setresgid(0x0, 0x0, r2) 06:40:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x0, 0x9f, &(0x7f0000000300)=""/159}, 0xfffffe52) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) epoll_create1(0x80000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000440)="10", &(0x7f0000000480)=""/112}, 0x18) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x630, 0x0, 0x118, 0x330, 0x548, 0x548, 0x548, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x3}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffff8000000000, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:apt_var_log_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x680) 06:40:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x400000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x400000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 598.359485] binder: 28777:28779 got reply transaction with no transaction stack [ 598.367084] binder: 28777:28779 transaction failed 29201/-71, size 0-0 line 2762 [ 598.377816] binder: BINDER_SET_CONTEXT_MGR already set 06:40:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) gettid() ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000200)={0x0, 0x0, 0x1}) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000680)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) [ 598.429992] binder: 28772:28784 ioctl 40046207 0 returned -16 [ 598.483986] binder_thread_write: 8 callbacks suppressed [ 598.484000] binder: 28772:28790 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.496593] binder: 28772:28790 got reply transaction with no transaction stack [ 598.504120] binder: 28772:28790 transaction failed 29201/-71, size 0-0 line 2762 06:40:50 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x8000, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x355) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f0000000080)) 06:40:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x2000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 598.598101] binder: 28772:28784 got reply transaction with no transaction stack [ 598.605672] binder: 28772:28784 transaction failed 29201/-71, size 0-0 line 2762 [ 598.680258] binder: 28800:28803 got reply transaction with no transaction stack [ 598.687823] binder: 28800:28803 transaction failed 29201/-71, size 0-0 line 2762 [ 598.796404] 9pnet_virtio: no channels available for device / 06:40:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/147, 0x93}], 0x6, &(0x7f0000000700)=""/104, 0x68, 0x7}, 0xa7756cdb26bbe891) r2 = socket(0xa, 0x805, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0xffffffffffffffc3, @mcast1, 0x7}}, 0x7, 0x219}, &(0x7f0000000840)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000880)={r4, 0x7, 0x9d, "84e1ab3cb890aca928f16721509477d280d6338df262cf9f7ea54dfcecbafa1cbc055be7048628d387ca93c74f42ca271fd9656b40cd789679299417131b9847a41965ea88f0c28511362e20083aade0217422e5ccb93bb2c2ee425381943a02e78f28f84db9939c121a4c32903b87ecb4c7c9d2cc4f21544c44cf0d24a8136fe2cfa42ddab22b474bdf2adc4d3ab348411d662270b6559c21ac8089e9"}, 0xa5) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0x400008bca) 06:40:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffff7f00000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xeaffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:50 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb664, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200ff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) r3 = dup2(r0, r2) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={[], 0x1, 0x7ff, 0x7fffffff, 0x0, 0x6, 0x2001, 0x1000}) [ 598.980727] binder_thread_write: 7 callbacks suppressed [ 598.980738] binder: 28813:28815 BC_ACQUIRE_DONE node 1037 has no pending acquire request [ 598.994558] binder: 28813:28815 got reply transaction with no transaction stack [ 599.002106] binder: 28813:28815 transaction failed 29201/-71, size 0-0 line 2762 [ 599.016971] binder: BINDER_SET_CONTEXT_MGR already set 06:40:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x400300, @u64=0x3}]}, 0x20}}, 0x0) [ 599.033668] binder: 28814:28825 ioctl 40046207 0 returned -16 [ 599.060004] binder: 28814:28825 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:51 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000840)={r2, 0x2, 0x273, 0xf8b, 0xf9, 0x1f}, &(0x7f0000000180)=0xfffffffffffffe02) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r2], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x2000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x80000) dup2(r0, r1) [ 599.110985] binder: BINDER_SET_CONTEXT_MGR already set [ 599.130970] binder: 28813:28815 ioctl 40046207 0 returned -16 06:40:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 599.172624] binder: 28832:28833 BC_ACQUIRE_DONE node 1040 has no pending acquire request 06:40:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf, @u64=0x3}]}, 0x20}}, 0x0) [ 599.258229] binder: BINDER_SET_CONTEXT_MGR already set [ 599.283288] binder: 28844:28845 ioctl 40046207 0 returned -16 06:40:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 599.312671] binder: 28844:28845 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.350529] binder: 28848:28849 BC_ACQUIRE_DONE node 1043 has no pending acquire request [ 599.353250] binder: 28844:28847 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001600)='memory.stat\x00', 0x0, 0x0) fsync(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000001540)=[{&(0x7f0000000240)="4cf0cd319ad7e33e555599f8638891b1bf980cad3f923efd4d451f1ff5657e54c60d8359cd5aaa3b0c77086fe587eced14569e8b127c339894018ce16b99557b053a9382c8828094ec5422db9e2ddd1fd3c5459b40fa4eb52832ccecfa1ff4729d422e2b4c96020aca807b690bdcadb54ceaecf85eb58e57a4842b19e7f2691cf6715213f321f2bf9243d50d25f9ed89c937651fb200a60506acae6dbfaca21b9b99fb1d183da9fbad81326a3ab5b10c98cff97a2fe5d7d398dcef233ff508b6d624e88f1f445aad2621f4a2e0ef1dea794b3ad27481bce1cdbd988ed33b19dde4f5ca61b35c", 0xe6, 0xfffffffffffffff7}, {&(0x7f00000000c0)="24583c6ca97248b9277e053bc7e2500fb714d05e9cb9a44c00e00adbb9fb40825631119e88cc842f7a6a09923f63bc7796e56229dfd8e4e1363dd64b8e678183210d26febf8e90b85393b6d6f46ac458db1e91b3485fc1ade02df006d88c3aac5e14e37800f5ff417b9995595add6353449cceb985eb1394cceaa0", 0x7b, 0x1000}, {&(0x7f0000000340)="db8dfc4749265e49bf9a98bff215e5694ccf405287327a2035bcddbdd10e2b5555be6e51e32b65784102bcbaa0ec2dc2ec6dc7270dd7342f4a8d282d07fb4bd9138314e3d9e77ce1b917b37c98e610727acbebb08d49d3405fbee9c55792c5f7689b343b3fe1f9098ef06eb1383aaa787cff3bd78e94e2b1e1e76efe4d62b2b067b586ec7e45", 0x86, 0x9}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="56d7e48540c38b87dc2c71c29de7d274f259f60e7cc566920095a0609115e024787907c7713cdfd8e5c6930e60fe8870c395eb785294b3238e5103784800a29a540b177d44087242897a47775ebc234a771adab3f0684f9bdec62e2fb0d5c0b101143bb52af2e90fa23148e5cc8653c7b630aa87cacb5b6d283580d78724fafc10b8e75916090909d20491b2f4e5ccdc3fe79495d0d49b8aa01c8c2c5b7c38e50c52f7e8e498eae7ef56cb6dba27d75ca17f74d4b56eea20b6d3a76f4fcf0621b1a1724b7dee739f", 0xc8}, {&(0x7f0000001500)="9ad580dfc7f26f155ba3706e4d55231756b8f1994dccfc087472b6e0801019dc44dc02ed4b5ba4c4e755c65972a311", 0x2f, 0x6}], 0x200c00, &(0x7f0000001700)=ANY=[@ANYBLOB="646969646469722c0400000000000000000000fbea279f8c9340db7bb57c5759133a9e4bc5269c316810c1801bfaa49400f7fdc6ce6f34b49269e23fd7a95d3a116e08df2231cb006b0d70f87a93d628fc19a50b2c766ced6ae9fe48e0de5808b1261a03933126e83907da1b6d4d611e41b41a3b6036e1f469dc69a6ed7d9e855e4865dc4ff80f34da3f21193b76698eec8cc19b218ad7667a19a0ea3bcf55c7ff313ecfcb4c0f56592cec5a20fddd86b98fe313463798db4fe1e951c625e6ca3b92825e670525da5876a0a1ee4aa278beeb0c7e0662558f0fc1a466ace82a52186032220970addf026b3025be11f6bf00"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) [ 599.489745] gfs2: invalid mount option: diiddir [ 599.494620] gfs2: can't parse mount arguments 06:40:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/147, 0x93}], 0x6, &(0x7f0000000700)=""/104, 0x68, 0x7}, 0xa7756cdb26bbe891) r2 = socket(0xa, 0x805, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0xffffffffffffffc3, @mcast1, 0x7}}, 0x7, 0x219}, &(0x7f0000000840)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000880)={r4, 0x7, 0x9d, "84e1ab3cb890aca928f16721509477d280d6338df262cf9f7ea54dfcecbafa1cbc055be7048628d387ca93c74f42ca271fd9656b40cd789679299417131b9847a41965ea88f0c28511362e20083aade0217422e5ccb93bb2c2ee425381943a02e78f28f84db9939c121a4c32903b87ecb4c7c9d2cc4f21544c44cf0d24a8136fe2cfa42ddab22b474bdf2adc4d3ab348411d662270b6559c21ac8089e9"}, 0xa5) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0x400008bca) 06:40:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="000028abaaaaaaaaaabbaaaaaaaaaabb0180c20000000000000000af5cec5a000000aa26aaaaaabb0000fc6619d7362578b5ffff0167b11d913cd35282f01fc737e683a2b349b8a2508e4e1b3a513458"]) 06:40:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4000000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x34000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 599.641636] binder: 28870:28871 BC_ACQUIRE_DONE node 1046 has no pending acquire request [ 599.653895] binder: BINDER_SET_CONTEXT_MGR already set [ 599.686151] binder: 28872:28873 ioctl 40046207 0 returned -16 [ 599.691682] binder: BINDER_SET_CONTEXT_MGR already set [ 599.711091] binder: 28872:28873 BC_ACQUIRE_DONE u0000000000000000 no match [ 599.752238] binder: 28870:28871 ioctl 40046207 0 returned -16 06:40:51 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff855e8d78feca52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5bc2727762063e41c9435f35359333eda992c48b4d29a54ebc5d05f1f37805c4de2b69a79e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c0559665f1576dfd49c98151aa51863565f3bc2901f0cc6b1117c445d907b17297c41f39b0880ee51c200000000000000000000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x18b, @u64=0x3}]}, 0x20}}, 0x0) 06:40:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r0, r1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 06:40:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf0ffffffffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:51 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="800000000002000019000000e60100006c000000002800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef76bb30808700d40b3c942057442bfcee39f5ace3c214eae9069ae42a28a42abc98a4c7", 0x5d, 0x400}], 0x0, &(0x7f0000000100)=ANY=[]) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000000)=0x6e, 0x80000) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={r1, 0x0, 0x7fffffff, 0x1, 0x7f1}) 06:40:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 599.979516] binder: 28895:28898 BC_ACQUIRE_DONE node 1049 has no pending acquire request [ 599.986176] binder: BINDER_SET_CONTEXT_MGR already set [ 600.010980] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem 06:40:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffff000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x40030000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='vboxnet0*\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=""/139, &(0x7f0000000180)=0x8b) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x80040, 0x118) ioctl$int_in(r1, 0x800000000005452, &(0x7f00000001c0)=0x3) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)='minix\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='cpuset-wlan0*})\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) [ 600.024194] binder: 28896:28900 ioctl 40046207 0 returned -16 [ 600.028710] binder: BINDER_SET_CONTEXT_MGR already set [ 600.043177] EXT4-fs (loop4): invalid first ino: 2754095844 [ 600.055579] binder: 28896:28900 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)) dup2(r1, r2) [ 600.094413] binder: 28895:28898 ioctl 40046207 0 returned -16 [ 600.094873] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem 06:40:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 600.176579] EXT4-fs (loop4): invalid first ino: 2754095844 06:40:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xf}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x200000000000000, @u64=0x3}]}, 0x20}}, 0x0) [ 600.225212] binder: BINDER_SET_CONTEXT_MGR already set [ 600.227463] binder: 28922:28923 BC_ACQUIRE_DONE node 1052 has no pending acquire request 06:40:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) unshare(0x400) tee(r1, r0, 0x8, 0x0) [ 600.265565] binder: 28924:28925 ioctl 40046207 0 returned -16 [ 600.298684] binder: 28924:28925 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.334496] binder: 28924:28930 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffffa1}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000200)="eb5bc80700315f85715070") ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)) pkey_alloc(0x0, 0x2) 06:40:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x300000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r3, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r2, 0x1, &(0x7f0000000340)={{r4, r5+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333ed1549ff5a76bb71c90fa992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51"], 0x1) getegid() r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000580)={r9, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:52 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x4fd2) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="aaa5806027d38c863852804183c47140", 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20100) accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0xffff, 0x0, 0x0, 0x0, 0x3, @dev}, 0xf) connect$llc(r2, &(0x7f0000000200)={0x1a, 0x0, 0x3, 0x3, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xffffffe1) [ 600.647668] binder: 28954:28956 BC_ACQUIRE_DONE node 1056 has no pending acquire request [ 600.657729] binder: BINDER_SET_CONTEXT_MGR already set [ 600.679332] binder: 28949:28958 ioctl 40046207 0 returned -16 06:40:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff7f00000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000200)="eb5bc80700315f85715070") ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)) pkey_alloc(0x0, 0x2) 06:40:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff855e8d78feca52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5bc2727762063e41c9435f35359333eda992c48b4d29a54ebc5d05f1f37805c4de2b69a79e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c0559665f1576dfd49c98151aa51863565f3bc2901f0cc6b1117c445d907b17297c41f39b0880ee51c200000000000000000000"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 600.724455] binder: 28949:28958 BC_ACQUIRE_DONE u0000000000000000 no match [ 600.744644] binder: BINDER_SET_CONTEXT_MGR already set [ 600.764696] binder: 28949:28958 ioctl 40046207 0 returned -16 06:40:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffff, @u64=0x3}]}, 0x20}}, 0x0) [ 600.768580] binder: 28949:28967 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) r0 = timerfd_create(0x8, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x208001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) read(r0, &(0x7f0000a16000)=""/71, 0x47) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x8000) bind$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 600.832742] binder: 28973:28974 BC_ACQUIRE_DONE node 1060 has no pending acquire request 06:40:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x300000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 600.924482] binder: BINDER_SET_CONTEXT_MGR already set [ 600.968236] binder: 28982:28983 ioctl 40046207 0 returned -16 06:40:53 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40) ioctl$RTC_VL_CLR(r0, 0x7014) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x801000, 0xd1e, 0x9}, 0x10) getdents(r1, &(0x7f0000000400)=""/135, 0x74) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x46, 0xc9000) socket$packet(0x11, 0x0, 0x300) 06:40:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfcffffff, @u64=0x3}]}, 0x20}}, 0x0) 06:40:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:53 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x3, &(0x7f0000000000)={0xfffffffffffffff7}, 0x0, 0xffffffffffffff69) r2 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000080)=[{{0x77359400}, 0x1, 0x1, 0x7}, {{}, 0x2, 0x6, 0x6}, {{r3, r4/1000+30000}, 0x14, 0x8, 0x5}, {{}, 0x1, 0xcc, 0x4}], 0x60) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffff80}) read(r6, &(0x7f0000481000)=""/128, 0x80) 06:40:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 601.217040] binder: 29001:29003 BC_ACQUIRE_DONE node 1064 has no pending acquire request [ 601.228177] binder: BINDER_SET_CONTEXT_MGR already set [ 601.251549] binder: 29004:29006 ioctl 40046207 0 returned -16 06:40:53 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x7, &(0x7f00000008c0)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca601d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f39e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d406041ec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x7, 0x81) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0x4) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000840)='net/anycast6\x00') 06:40:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x10, &(0x7f00000001c0), 0x3f3) close(r3) r4 = dup3(r1, r2, 0x0) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', r5}) [ 601.266584] binder: BINDER_SET_CONTEXT_MGR already set 06:40:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfffffffc}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf000, @u64=0x3}]}, 0x20}}, 0x0) [ 601.297572] binder: 29001:29003 ioctl 40046207 0 returned -16 06:40:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x591}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:53 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40) ioctl$RTC_VL_CLR(r0, 0x7014) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x801000, 0xd1e, 0x9}, 0x10) getdents(r1, &(0x7f0000000400)=""/135, 0x74) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x46, 0xc9000) socket$packet(0x11, 0x0, 0x300) 06:40:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf00, @u64=0x3}]}, 0x20}}, 0x0) [ 601.436614] binder: 29028:29030 BC_ACQUIRE_DONE node 1067 has no pending acquire request [ 601.454143] binder: BINDER_SET_CONTEXT_MGR already set 06:40:53 executing program 0: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x200000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock2(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1) [ 601.484145] binder: 29031:29032 ioctl 40046207 0 returned -16 [ 601.516156] binder: BINDER_SET_CONTEXT_MGR already set 06:40:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 601.547160] binder: 29031:29032 ioctl 40046207 0 returned -16 06:40:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x9effffff00000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:53 executing program 4: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000018f000/0x2000)=nil) madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x20) timerfd_create(0x5, 0x80800) 06:40:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 601.711444] binder: BINDER_SET_CONTEXT_MGR already set [ 601.726846] binder: 29057:29060 ioctl 40046207 0 returned -16 06:40:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x4}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x3, 0xe6e0}) ioctl$int_in(r0, 0xaf01, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x9, 0x3, {0x1, 0x1, 0xfe, 0x1, 0x7}}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200)={0x0, r2}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 06:40:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x100000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000540)='./file0/file0\x00', 0x82000, 0x80) openat$cgroup_subtree(r1, &(0x7f0000000580)='cgroup.subtree_control\x00', 0x2, 0x0) close(r0) r2 = socket$kcm(0xa, 0x2, 0x11) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) fcntl$lock(r2, 0x7, &(0x7f0000000500)={0x0, 0x4, 0x8, 0x2, r3}) fremovexattr(r2, &(0x7f0000000740)=@random={'btrfs.', '.wlan0@*\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000600)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x1dc) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000700)={0x40, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000100)={"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"}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x36}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x6, @empty, 0x2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0xba}], 0x94) bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0xc3c6, {0x7, 0x0, 0x0, 0x5, 0xffffffff, 0x1}, 0x5}, 0xe) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000640)={'veth0_to_bond\x00', {0x2, 0x4e20, @broadcast}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 06:40:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 602.096651] binder: BINDER_SET_CONTEXT_MGR already set [ 602.109586] binder: BINDER_SET_CONTEXT_MGR already set [ 602.129637] binder: 29071:29072 ioctl 40046207 0 returned -16 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x4000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9105}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 602.151774] binder: 29068:29069 ioctl 40046207 0 returned -16 06:40:54 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 06:40:54 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000003e00000004000000"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000680)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000006c0)={{0x101, 0xffffffffffffffff, 0x5174, 0x20, 0xcc5, 0x2b}, 0xfff}) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmmsg(r0, &(0x7f0000007e00), 0x1bb, 0x0) 06:40:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 602.270082] binder: BINDER_SET_CONTEXT_MGR already set 06:40:54 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000680), 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200028bd7000fbdbdf250300000300000000000000ffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004081) read(r0, &(0x7f0000000200)=""/90, 0x5a) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2000000000000000, r2}) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x30000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x30000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 602.308689] binder: 29101:29102 ioctl 40046207 0 returned -16 06:40:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='ifb0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x0, 0x8) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000000c0)=""/127) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x2004) 06:40:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0044d1e, &(0x7f0000000080)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 06:40:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xeaffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3f000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 602.437337] binder: BINDER_SET_CONTEXT_MGR already set [ 602.476159] binder: 29121:29122 ioctl 40046207 0 returned -16 [ 602.527960] binder: BINDER_SET_CONTEXT_MGR already set [ 602.552697] binder: 29121:29122 ioctl 40046207 0 returned -16 06:40:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7166cb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49c98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880ee51c258388c4e8b99916a"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)="76657468305f746f5fe8f45f6400") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f0000000740)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000003c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x43) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0)) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8d51926f404d0d7120dea00000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x9effffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 0: syz_mount_image$hfs(&(0x7f0000000680)='hfs\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c80)={[{@iocharset={'iocharset', 0x3d, 'none'}}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xb5, "f2b91e4689992ffa6b401e8780f32453512d0ff718481238207c16195b2ab0420d98c65782bea2641cc96bf1055f75d93b03c2718b61b783f15ff089e87416cba59986db55a076200d8216dfde5d0bedfae1b4b0f1be824b115c82391a785a4ead2251b71576320264f7827b6a753b32f92c5abd997c6b6334f567427353f130158b84982c7437c2dea61e473ac74fedfc982d0a13893a5810f06da9ea2b50b559570671c7819252fd3cd9cf9180f6127f6f7581ea"}, &(0x7f0000000180)=0xbd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x30, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e24, @rand_addr=0x7}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0xe1, 0xffe8, 0x8, 0xfff, 0x6, 0x24, 0xff, {r2, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x3, 0x9, 0x6, 0x80000001, 0x5}}, &(0x7f0000000340)=0xb0) r3 = dup(0xffffffffffffff9c) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) [ 602.696880] binder: BINDER_SET_CONTEXT_MGR already set [ 602.706398] binder: BINDER_SET_CONTEXT_MGR already set [ 602.721441] binder: 29146:29148 ioctl 40046207 0 returned -16 [ 602.729529] binder: 29145:29147 ioctl 40046207 0 returned -16 06:40:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 1: unshare(0x24020400) unshare(0x100) recvmmsg(0xffffffffffffff9c, &(0x7f0000004000)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/126, 0x7e}], 0x4, &(0x7f0000000300)=""/76, 0x4c, 0x100}, 0x6}, {{&(0x7f0000000380)=@alg, 0x3dc, &(0x7f0000002940)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/55, 0x37}, {&(0x7f00000016c0)=""/205, 0xcd}, {&(0x7f00000017c0)=""/150, 0x96}, {&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x9, &(0x7f0000002a00)=""/62, 0x3e, 0x4}, 0x80}, {{&(0x7f0000002a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002ac0)=""/41, 0x29}], 0x1, &(0x7f0000002b40)=""/207, 0xcf, 0xbe9}, 0x40a}, {{&(0x7f0000002c40)=@nl=@proc, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002cc0)=""/246, 0xf6}, {&(0x7f0000002dc0)=""/29, 0x1d}, {&(0x7f0000002e00)=""/179, 0xb3}, {&(0x7f0000002ec0)=""/64, 0x40}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/48, 0x30}], 0x6, &(0x7f0000003fc0)=""/16, 0x10, 0x2}, 0xfffffffffffffd2a}], 0x4, 0x20, &(0x7f0000004100)={0x77359400}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000004140)={0x18, 0x0, {0x0, @broadcast, 'bond0\x00'}}) 06:40:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000340)) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x541280, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="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") ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000002c0)={0x7}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffffffffa9b, 0x101}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r3, 0x8, 0x6, [0x7, 0x7fff, 0x400, 0x800003f, 0x4, 0xff]}, 0xffffff36) [ 602.843277] binder_transaction: 32 callbacks suppressed [ 602.843286] binder: 29166:29167 got reply transaction with no transaction stack [ 602.856387] binder_transaction: 32 callbacks suppressed [ 602.856404] binder: 29166:29167 transaction failed 29201/-71, size 0-0 line 2762 06:40:54 executing program 4: socket$inet6(0xa, 0xf, 0x8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) recvfrom(r1, &(0x7f0000000a00)=""/156, 0x9c, 0x40012000, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000004c0)="599ab290639ec0658052ec2161a7cc873861d7b1abdb438632948b9a7e241fda2d78e5f6c451dc80d737fe9f84a5e00b8ce4ec3f47ebf379a3744763a3b73ed397dad7f3b48ba79aa1fc133512da118136e74a704e2645665c0e9211e38d1d1537f535493d9085659ad4b104e8be2af343f350792cdec3010a5c9a07c523f1b4d8184d1e40c479cfa3572ded15a254b0f5c19ad929eb3f59ff557596c5ed0de7fd82fa593973c6b8", 0xa8, 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000600)="ce267b18dd4a744c4e56ddf109f123e53303c89e66771b2cf098fa0b40452087c7085d0716446cd23965f90f81ea3b93829ef6aa0fa00b1ee8bc463c0e59fd382fe423aee80bc31900f80a88965dc6ff392fa5ac2581faff68465ea663149e045316efa4c660fb7d051dbba2acd93fbd2356f73a3355d3b6440041809610e181a0cf103e69a7056735f4570c78b0b06f7e7c5004756df4c3aeee6ca0e5a76adc3d1af5c6c342e894b40c02b61ab1e2131733896de40937b8f8e4d0c745fee501e62daf674cf32cf4cc02733f6a3c5a2d69fdbd4c4bb1e7fd3c5ea99c4300199c895345c3906b93", 0xe7, 0xfffffffffffffffb) r5 = request_key(&(0x7f0000000700)='.dead\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000780)='cpu.stat\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r3, r4, r5}, &(0x7f0000000800)=""/208, 0xd0, &(0x7f0000000980)={&(0x7f0000000900)={'sha224-ssse3\x00'}, &(0x7f0000000940)="0fbed55c42e6a6a328045bfc52622411baf2ab317592", 0x16}) waitid(0x2, r2, &(0x7f0000000240), 0xa0000009, &(0x7f0000000280)) sched_getparam(0x0, &(0x7f0000000180)) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}, 0xe00}, {{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x26}}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005c80), 0x0, 0x20000000}}], 0x5fa, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000240), 0x0) socketpair$inet(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000ac0)={0x5, 0x10000, 0x279c}) connect$unix(r7, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000b00)={0x6, 0x3, 0x8, 0x6, 0x5, 0x3}) sendmmsg(r8, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 06:40:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xffffff9e}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @remote}, 0x14) r2 = socket(0xa, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000000, @dev={0xac, 0x14, 0x14, 0x1a}, [0x0, 0x500]}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 06:40:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffffffffffff, @u64=0x3}]}, 0x20}}, 0x0) [ 602.953294] binder: BINDER_SET_CONTEXT_MGR already set [ 602.966206] binder: 29166:29167 ioctl 40046207 0 returned -16 [ 602.998108] binder: 29179:29181 got reply transaction with no transaction stack [ 603.005655] binder: 29179:29181 transaction failed 29201/-71, size 0-0 line 2762 06:40:55 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer2\x00', 0x8000, 0x0) getcwd(&(0x7f0000001800)=""/11, 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x0, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r1, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(0xffffffffffffffff, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000001040000000000000000005b34c68e4fb820d071d2be71b7165eb6361ff8558be44217acc2e5ddc34f553e8be8a52c0d22a20af818b2056a599fb6a1ea9ad6eb8ca617d06a5b9be2529ffa4535ea435f3a359333eda992c48b4d29a54ebc5d05f19e9b586a8ee8988b410b80d62f7e3db09f0f41aa9ba55d4208e40ce82eb42d40605aec46ac33817c9c8a3c8301e8c4cadba2bf546cacc689dfce3c6054665f1576dfd49ca9ea6e6ad4f5b459ba0cbf98151aa51863565f3bc2901d19ee79b767bc00907b17297c41f39b0880"], 0x1) getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000840)) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000640)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xc}, 0x100}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xffffffffffffff80, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x10001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xa4f, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}, @in={0x2, 0x4e21, @rand_addr=0x7}], 0xb0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000540)={0x3, 0x0, 0x2, 0x1, 0x8001}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000780)={0x6, 0x80, 0x80, 'queue0\x00', 0x1}) clone(0x24000, &(0x7f0000000240)="b479036b2ab0f4bba908a967f29c8eb481dd3d3767ad9c26ae4d6ba1c305d4d09f", &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000900)="1d72180636e186311ba7553647cd9648908da88bc44e830e826cb6b490caeb86cfa893d7eb27302110e03f82e104101b1bbb68e4ff0447f3245c9435bf0208b328650ff3397ca0c06e6651602680b78806b78e0cfa0b1334a411f6b04a4abb2efda53ec410c978482d77dec86941badfa240b035fcb61d6cd846805b2b23ddcf96d8f0ceeb9a00f5062fe24423e026343a3438d387fbd06fa01d085f558a0167014e213d0643fa44ef39a96eaa4a4930f10b8562d554b7dfce18a6354a6af37456f3f59b7ff3bfb1be9962a06a96f781beb6798cf0c7d3a7aa4e3ef12c9297714f") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000a40)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e23, 0xbf60, @mcast2, 0xff}}, 0x1, 0xffffffff, 0x1, 0x4, 0x6}, &(0x7f00000001c0)=0x98) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 06:40:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 0: r0 = epoll_create1(0x80000) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$setown(r0, 0x8, r1) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x3) 06:40:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffff7f, @u64=0x3}]}, 0x20}}, 0x0) [ 603.329532] binder: BINDER_SET_CONTEXT_MGR already set [ 603.336797] binder: 29196:29197 got reply transaction with no transaction stack [ 603.344414] binder: 29196:29197 transaction failed 29201/-71, size 0-0 line 2762 06:40:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0xfcffffff}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 0: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)='\n') socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x2fc) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14, 0x80800) bind$bt_hci(r0, &(0x7f0000000280), 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) tee(r2, r1, 0x7ff, 0x1) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000009c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1f}, 0xf) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 603.370779] binder: 29198:29204 ioctl 40046207 0 returned -16 [ 603.376948] binder: 29198:29209 got reply transaction with no transaction stack [ 603.384521] binder: 29198:29209 transaction failed 29201/-71, size 0-0 line 2762 06:40:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffffea, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 603.478383] binder: BINDER_SET_CONTEXT_MGR already set 06:40:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x2}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 603.503701] binder: 29198:29204 ioctl 40046207 0 returned -16 [ 603.572775] binder: 29220:29221 got reply transaction with no transaction stack [ 603.580365] binder: 29220:29221 transaction failed 29201/-71, size 0-0 line 2762 06:40:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1, 0x0, 0x3f00000000000000}, [@typed={0xc, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffff000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @remote}, 0x14) r2 = socket(0xa, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000000, @dev={0xac, 0x14, 0x14, 0x1a}, [0x0, 0x500]}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 06:40:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x101, 0x6, 0xa, 0xe81, 0x7}, 0x14) 06:40:55 executing program 4: syz_open_dev$sg(&(0x7f0000000a00)='/dev/sg#\x00', 0x3, 0x13b140) openat$userio(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/userio\x00', 0x10040, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000340), 0x0, 0x9) r1 = creat(&(0x7f00000008c0)='./file1\x00', 0x8) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000900)) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xf) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) getsockopt$nfc_llcp(r1, 0x118, 0x7, &(0x7f0000000900)=""/203, 0xcb) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r3, 0x8, &(0x7f0000000880)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xf, 0x400, r2, &(0x7f00000001c0)="0369054d374d4a1d25fdacdc00e3b5ecc6334efa5ef1fc1953908784b5264feeb7", 0x21, 0x7, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000240)="68471790da025301cb2b1f48860d3d6c3f7732e70f23327acc5fb1712a2ff31eca9c51493f20977ba645468f34c5eb6db087", 0x32, 0x100, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000380)="dc2e5d52f4471517b815eed268e8af439477aec5ad5b8a7ec7f746fadc39a0d386accc09039984befa41cf44bc4bb552b2b70aaeecac4cee", 0x38, 0x0, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8e, r1, &(0x7f0000000400)="38eea93092f2ebfc5709ae0ba20ddacc1cd7217babc50cb416a1da928a460efb6be5e9253aba73943fab2ced7f59f38a37620bed65217c6836b3d8c6801f06ec31b75a5208bd08c2296f538a5ba471c28460dab42b8a2c6d7baf0f950156973e3d332a35aa56c8c5649c6f040dedbbe8f8256b916ad3ad04e098423c816490ec16724ed7bc1ccaffbefd1ead5942c997ee8969c1f02ae7b42ecfdbfbe582adab186f2789ba2f9a7dc3e3a98c6ee33aca59d66ef57cd815aeea2aa2b272630ee85c6203943e2cac0c53b06b687afff70c9745a3168d55b3e3eec4", 0xda, 0x23516a79, 0x0, 0x2, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x100000001, r1, &(0x7f0000000540)="2b606cbf4c8e393a550f8be61503fdc300cc5758249eff00a6a6736644b966eacc23145cc2", 0x25, 0x2, 0x0, 0x3, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f00000005c0)="a1fd0b0a5ed26abb0104d42453d4fde06b1e8c4ed985ba39818cba34883fcc305f6732c74fdbac2569527a445eb4b9709c48812fcd0875907a2e3fb48694871d765803709067f761e60db8ce8bd716092dd090879e898d98f273328ca9e2fd4db85b0fa97295591e733e8f11dee19f7b51c9200114d52e4aab057500accb7ce77fd3f775b916a311706649f8cfdae1d90a7328bfafd04e5f8e4912b870a6786b042195976d1ec1a8e88fe23625d15a293453ea72beaca0e50be1b59d50d1e96c896f76a90b9388221f383ea41d5f1e", 0xcf, 0x660, 0x0, 0x0, r1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x58df, r1, &(0x7f0000000700)="ade5a95cb42f4812b6c159a36cd0ecea84b89e7a7dd1b30f6ea0ff60f6c1f6b5c28986218e89b4d8b452208f706fb730257eb56c23f2aeb3bea8e2b21fad1f8497d6df6a093fa21cf88346e5fd3f5112ca5b4b2fd2c73ec8735b79a068f9281bd3324963d85c631b9e5a6dd473da4bf40dc9e2f351b08d8abb44f3447bef956b0c6da142b7b41b3519baf9286a1a3d4c5d4f8be7cb779952136175e0afcbc8722f185784e0e530a10ec97c02d11da5d3", 0xb0, 0x8, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x10000, r1, &(0x7f0000000800)="0d4a12aa", 0x4, 0x5, 0x0, 0x0, r1}]) [ 603.888605] binder: 29233:29234 got reply transaction with no transaction stack [ 603.896287] binder: 29233:29234 transaction failed 29201/-71, size 0-0 line 2762 [ 603.914553] binder: BINDER_SET_CONTEXT_MGR already set [ 603.940593] binder: 29236:29240 ioctl 40046207 0 returned -16 [ 603.971133] binder_thread_write: 9 callbacks suppressed [ 603.971144] binder: 29236:29240 BC_ACQUIRE_DONE u0000000000000000 no match [ 603.983699] binder: 29236:29240 got reply transaction with no transaction stack 06:40:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0x2000004c, 0x0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xeaffffff, @u64=0x3}]}, 0x20}}, 0x0) 06:40:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 603.991289] binder: 29236:29240 transaction failed 29201/-71, size 0-0 line 2762 [ 604.062928] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p21 [ 604.151197] loop4: partition table partially beyond EOD, truncated 06:40:56 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) r3 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="d649529a963d71163a09aff9f168d20f5bb0f541f0ea3b1ace0c2fcc96d0723857f36ba8eda77a41e240ca5ccefa", 0x2e, r3) 06:40:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xb, 0x0, @u64=0x3}]}, 0x20}}, 0x0) [ 604.160133] binder_thread_write: 11 callbacks suppressed [ 604.160145] binder: 29254:29258 BC_ACQUIRE_DONE node 1101 has no pending acquire request [ 604.174080] binder: 29254:29258 got reply transaction with no transaction stack [ 604.181636] binder: 29254:29258 transaction failed 29201/-71, size 0-0 line 2762 [ 604.291503] loop4: p1 start 1 is beyond EOD, truncated [ 604.297554] loop4: p2 size 2 extends beyond EOD, truncated [ 604.366299] loop4: p3 start 201 is beyond EOD, truncated [ 604.372009] loop4: p4 start 301 is beyond EOD, truncated [ 604.377625] loop4: p5 start 1 is beyond EOD, truncated [ 604.383037] loop4: p6 start 1 is beyond EOD, truncated [ 604.388687] loop4: p7 start 1 is beyond EOD, truncated [ 604.394378] loop4: p8 start 1 is beyond EOD, truncated [ 604.400047] loop4: p9 start 1 is beyond EOD, truncated [ 604.405416] loop4: p10 start 1 is beyond EOD, truncated [ 604.411149] loop4: p11 start 1 is beyond EOD, truncated [ 604.416664] loop4: p12 start 1 is beyond EOD, truncated [ 604.422260] loop4: p13 start 1 is beyond EOD, truncated [ 604.427959] loop4: p14 start 1 is beyond EOD, truncated [ 604.433579] loop4: p15 start 1 is beyond EOD, truncated [ 604.439164] loop4: p16 start 1 is beyond EOD, truncated [ 604.444869] loop4: p17 start 1 is beyond EOD, truncated [ 604.450550] loop4: p18 start 1 is beyond EOD, truncated [ 604.456210] loop4: p19 start 1 is beyond EOD, truncated [ 604.461956] loop4: p20 start 1 is beyond EOD, truncated [ 604.467523] loop4: p21 start 1 is beyond EOD, truncated [ 604.473210] loop4: p22 start 1 is beyond EOD, truncated [ 604.478847] loop4: p23 start 1 is beyond EOD, truncated [ 604.484558] loop4: p24 start 1 is beyond EOD, truncated [ 604.490287] loop4: p25 start 1 is beyond EOD, truncated [ 604.495886] loop4: p26 start 1 is beyond EOD, truncated [ 604.501440] loop4: p27 start 1 is beyond EOD, truncated [ 604.507008] loop4: p28 start 1 is beyond EOD, truncated [ 604.512557] loop4: p29 start 1 is beyond EOD, truncated [ 604.518147] loop4: p30 start 1 is beyond EOD, truncated [ 604.523716] loop4: p31 start 1 is beyond EOD, truncated [ 604.529356] loop4: p32 start 1 is beyond EOD, truncated [ 604.534908] loop4: p33 start 1 is beyond EOD, truncated [ 604.540608] loop4: p34 start 1 is beyond EOD, truncated [ 604.546166] loop4: p35 start 1 is beyond EOD, truncated [ 604.551791] loop4: p36 start 1 is beyond EOD, truncated [ 604.557359] loop4: p37 start 1 is beyond EOD, truncated [ 604.562937] loop4: p38 start 1 is beyond EOD, truncated [ 604.568586] loop4: p39 start 1 is beyond EOD, truncated [ 604.574156] loop4: p40 start 1 is beyond EOD, truncated [ 604.579607] loop4: p41 start 1 is beyond EOD, truncated [ 604.585147] loop4: p42 start 1 is beyond EOD, truncated [ 604.590739] loop4: p43 start 1 is beyond EOD, truncated [ 604.596308] loop4: p44 start 1 is beyond EOD, truncated [ 604.601834] loop4: p45 start 1 is beyond EOD, truncated [ 604.607420] loop4: p46 start 1 is beyond EOD, truncated [ 604.613140] loop4: p47 start 1 is beyond EOD, truncated [ 604.618920] loop4: p48 start 1 is beyond EOD, truncated [ 604.624576] loop4: p49 start 1 is beyond EOD, truncated [ 604.630330] loop4: p50 start 1 is beyond EOD, truncated [ 604.635917] loop4: p51 start 1 is beyond EOD, truncated [ 604.641727] loop4: p52 start 1 is beyond EOD, truncated [ 604.647348] loop4: p53 start 1 is beyond EOD, truncated [ 604.653068] loop4: p54 start 1 is beyond EOD, truncated [ 604.658859] loop4: p55 start 1 is beyond EOD, truncated [ 604.664477] loop4: p56 start 1 is beyond EOD, truncated [ 604.670068] loop4: p57 start 1 is beyond EOD, truncated [ 604.675652] loop4: p58 start 1 is beyond EOD, truncated [ 604.681119] loop4: p59 start 1 is beyond EOD, truncated [ 604.686620] loop4: p60 start 1 is beyond EOD, truncated [ 604.692207] loop4: p61 start 1 is beyond EOD, truncated [ 604.697807] loop4: p62 start 1 is beyond EOD, truncated [ 604.703409] loop4: p63 start 1 is beyond EOD, truncated [ 604.708987] loop4: p64 start 1 is beyond EOD, truncated [ 604.714568] loop4: p65 start 1 is beyond EOD, truncated [ 604.720187] loop4: p66 start 1 is beyond EOD, truncated [ 604.725829] loop4: p67 start 1 is beyond EOD, truncated [ 604.731469] loop4: p68 start 1 is beyond EOD, truncated [ 604.737118] loop4: p69 start 1 is beyond EOD, truncated [ 604.742818] loop4: p70 start 1 is beyond EOD, truncated [ 604.748462] loop4: p71 start 1 is beyond EOD, truncated [ 604.754073] loop4: p72 start 1 is beyond EOD, truncated [ 604.759630] loop4: p73 start 1 is beyond EOD, truncated [ 604.765340] loop4: p74 start 1 is beyond EOD, truncated [ 604.771066] loop4: p75 start 1 is beyond EOD, truncated [ 604.776600] loop4: p76 start 1 is beyond EOD, truncated [ 604.782147] loop4: p77 start 1 is beyond EOD, truncated [ 604.787590] loop4: p78 start 1 is beyond EOD, truncated [ 604.793062] loop4: p79 start 1 is beyond EOD, truncated [ 604.798550] loop4: p80 start 1 is beyond EOD, truncated [ 604.804160] loop4: p81 start 1 is beyond EOD, truncated [ 604.809810] loop4: p82 start 1 is beyond EOD, truncated [ 604.815592] loop4: p83 start 1 is beyond EOD, truncated [ 604.821064] loop4: p84 start 1 is beyond EOD, truncated [ 604.826491] loop4: p85 start 1 is beyond EOD, truncated [ 604.831931] loop4: p86 start 1 is beyond EOD, truncated [ 604.837344] loop4: p87 start 1 is beyond EOD, truncated [ 604.842809] loop4: p88 start 1 is beyond EOD, truncated [ 604.848217] loop4: p89 start 1 is beyond EOD, truncated [ 604.853651] loop4: p90 start 1 is beyond EOD, truncated [ 604.859061] loop4: p91 start 1 is beyond EOD, truncated [ 604.864478] loop4: p92 start 1 is beyond EOD, truncated [ 604.869889] loop4: p93 start 1 is beyond EOD, truncated [ 604.875322] loop4: p94 start 1 is beyond EOD, truncated [ 604.880750] loop4: p95 start 1 is beyond EOD, truncated [ 604.886176] loop4: p96 start 1 is beyond EOD, truncated [ 604.891586] loop4: p97 start 1 is beyond EOD, truncated [ 604.897066] loop4: p98 start 1 is beyond EOD, truncated [ 604.902493] loop4: p99 start 1 is beyond EOD, truncated [ 604.907941] loop4: p100 start 1 is beyond EOD, truncated [ 604.913437] loop4: p101 start 1 is beyond EOD, truncated [ 604.918941] loop4: p102 start 1 is beyond EOD, truncated [ 604.924437] loop4: p103 start 1 is beyond EOD, truncated [ 604.929949] loop4: p104 start 1 is beyond EOD, truncated [ 604.935459] loop4: p105 start 1 is beyond EOD, truncated [ 604.941010] loop4: p106 start 1 is beyond EOD, truncated [ 604.946590] loop4: p107 start 1 is beyond EOD, truncated [ 604.952104] loop4: p108 start 1 is beyond EOD, truncated [ 604.957594] loop4: p109 start 1 is beyond EOD, truncated [ 604.963102] loop4: p110 start 1 is beyond EOD, truncated [ 604.968597] loop4: p111 start 1 is beyond EOD, truncated [ 604.974100] loop4: p112 start 1 is beyond EOD, truncated [ 604.979598] loop4: p113 start 1 is beyond EOD, truncated [ 604.985107] loop4: p114 start 1 is beyond EOD, truncated [ 604.990605] loop4: p115 start 1 is beyond EOD, truncated [ 604.996121] loop4: p116 start 1 is beyond EOD, truncated [ 605.001614] loop4: p117 start 1 is beyond EOD, truncated [ 605.007135] loop4: p118 start 1 is beyond EOD, truncated [ 605.012635] loop4: p119 start 1 is beyond EOD, truncated [ 605.018154] loop4: p120 start 1 is beyond EOD, truncated [ 605.023642] loop4: p121 start 1 is beyond EOD, truncated [ 605.029400] loop4: p122 start 1 is beyond EOD, truncated [ 605.034905] loop4: p123 start 1 is beyond EOD, truncated [ 605.040416] loop4: p124 start 1 is beyond EOD, truncated [ 605.045948] loop4: p125 start 1 is beyond EOD, truncated [ 605.051449] loop4: p126 start 1 is beyond EOD, truncated [ 605.056951] loop4: p127 start 1 is beyond EOD, truncated [ 605.062462] loop4: p128 start 1 is beyond EOD, truncated [ 605.067966] loop4: p129 start 1 is beyond EOD, truncated [ 605.073474] loop4: p130 start 1 is beyond EOD, truncated [ 605.078976] loop4: p131 start 1 is beyond EOD, truncated [ 605.084509] loop4: p132 start 1 is beyond EOD, truncated [ 605.089994] loop4: p133 start 1 is beyond EOD, truncated [ 605.095516] loop4: p134 start 1 is beyond EOD, truncated [ 605.101008] loop4: p135 start 1 is beyond EOD, truncated [ 605.106551] loop4: p136 start 1 is beyond EOD, truncated [ 605.112069] loop4: p137 start 1 is beyond EOD, truncated [ 605.117565] loop4: p138 start 1 is beyond EOD, truncated [ 605.123091] loop4: p139 start 1 is beyond EOD, truncated [ 605.128613] loop4: p140 start 1 is beyond EOD, truncated [ 605.134130] loop4: p141 start 1 is beyond EOD, truncated [ 605.139620] loop4: p142 start 1 is beyond EOD, truncated [ 605.145127] loop4: p143 start 1 is beyond EOD, truncated [ 605.150611] loop4: p144 start 1 is beyond EOD, truncated [ 605.156119] loop4: p145 start 1 is beyond EOD, truncated [ 605.161764] loop4: p146 start 1 is beyond EOD, truncated [ 605.167275] loop4: p147 start 1 is beyond EOD, truncated [ 605.172798] loop4: p148 start 1 is beyond EOD, truncated [ 605.178309] loop4: p149 start 1 is beyond EOD, truncated [ 605.183827] loop4: p150 start 1 is beyond EOD, truncated [ 605.189342] loop4: p151 start 1 is beyond EOD, truncated [ 605.194825] loop4: p152 start 1 is beyond EOD, truncated [ 605.200323] loop4: p153 start 1 is beyond EOD, truncated [ 605.205846] loop4: p154 start 1 is beyond EOD, truncated [ 605.211384] loop4: p155 start 1 is beyond EOD, truncated [ 605.216912] loop4: p156 start 1 is beyond EOD, truncated [ 605.222436] loop4: p157 start 1 is beyond EOD, truncated [ 605.227941] loop4: p158 start 1 is beyond EOD, truncated [ 605.233450] loop4: p159 start 1 is beyond EOD, truncated [ 605.238998] loop4: p160 start 1 is beyond EOD, truncated [ 605.244621] loop4: p161 start 1 is beyond EOD, truncated [ 605.250173] loop4: p162 start 1 is beyond EOD, truncated [ 605.255664] loop4: p163 start 1 is beyond EOD, truncated [ 605.261175] loop4: p164 start 1 is beyond EOD, truncated [ 605.266663] loop4: p165 start 1 is beyond EOD, truncated [ 605.272183] loop4: p166 start 1 is beyond EOD, truncated [ 605.277670] loop4: p167 start 1 is beyond EOD, truncated [ 605.283168] loop4: p168 start 1 is beyond EOD, truncated [ 605.288661] loop4: p169 start 1 is beyond EOD, truncated [ 605.294185] loop4: p170 start 1 is beyond EOD, truncated [ 605.299670] loop4: p171 start 1 is beyond EOD, truncated [ 605.305182] loop4: p172 start 1 is beyond EOD, truncated [ 605.310690] loop4: p173 start 1 is beyond EOD, truncated [ 605.316207] loop4: p174 start 1 is beyond EOD, truncated [ 605.321710] loop4: p175 start 1 is beyond EOD, truncated [ 605.327251] loop4: p176 start 1 is beyond EOD, truncated [ 605.332743] loop4: p177 start 1 is beyond EOD, truncated [ 605.338270] loop4: p178 start 1 is beyond EOD, truncated [ 605.343771] loop4: p179 start 1 is beyond EOD, truncated [ 605.349277] loop4: p180 start 1 is beyond EOD, truncated [ 605.354781] loop4: p181 start 1 is beyond EOD, truncated [ 605.360292] loop4: p182 start 1 is beyond EOD, truncated [ 605.365817] loop4: p183 start 1 is beyond EOD, truncated [ 605.371324] loop4: p184 start 1 is beyond EOD, truncated [ 605.376828] loop4: p185 start 1 is beyond EOD, truncated [ 605.382357] loop4: p186 start 1 is beyond EOD, truncated [ 605.387872] loop4: p187 start 1 is beyond EOD, truncated [ 605.393371] loop4: p188 start 1 is beyond EOD, truncated [ 605.398860] loop4: p189 start 1 is beyond EOD, truncated [ 605.404423] loop4: p190 start 1 is beyond EOD, truncated [ 605.409918] loop4: p191 start 1 is beyond EOD, truncated [ 605.415443] loop4: p192 start 1 is beyond EOD, truncated [ 605.420946] loop4: p193 start 1 is beyond EOD, truncated [ 605.426454] loop4: p194 start 1 is beyond EOD, truncated [ 605.431966] loop4: p195 start 1 is beyond EOD, truncated [ 605.437472] loop4: p196 start 1 is beyond EOD, truncated [ 605.442961] loop4: p197 start 1 is beyond EOD, truncated [ 605.448461] loop4: p198 start 1 is beyond EOD, truncated [ 605.454071] loop4: p199 start 1 is beyond EOD, truncated [ 605.459614] loop4: p200 start 1 is beyond EOD, truncated [ 605.465101] loop4: p201 start 1 is beyond EOD, truncated [ 605.470617] loop4: p202 start 1 is beyond EOD, truncated [ 605.476104] loop4: p203 start 1 is beyond EOD, truncated [ 605.481624] loop4: p204 start 1 is beyond EOD, truncated [ 605.487134] loop4: p205 start 1 is beyond EOD, truncated [ 605.492635] loop4: p206 start 1 is beyond EOD, truncated [ 605.498150] loop4: p207 start 1 is beyond EOD, truncated [ 605.503673] loop4: p208 start 1 is beyond EOD, truncated [ 605.509176] loop4: p209 start 1 is beyond EOD, truncated [ 605.514711] loop4: p210 start 1 is beyond EOD, truncated [ 605.520205] loop4: p211 start 1 is beyond EOD, truncated [ 605.525711] loop4: p212 start 1 is beyond EOD, truncated [ 605.531210] loop4: p213 start 1 is beyond EOD, truncated [ 605.536716] loop4: p214 start 1 is beyond EOD, truncated [ 605.542205] loop4: p215 start 1 is beyond EOD, truncated [ 605.547705] loop4: p216 start 1 is beyond EOD, truncated [ 605.553187] loop4: p217 start 1 is beyond EOD, truncated [ 605.558733] loop4: p218 start 1 is beyond EOD, truncated [ 605.564258] loop4: p219 start 1 is beyond EOD, truncated [ 605.569816] loop4: p220 start 1 is beyond EOD, truncated [ 605.575339] loop4: p221 start 1 is beyond EOD, truncated [ 605.580853] loop4: p222 start 1 is beyond EOD, truncated [ 605.586335] loop4: p223 start 1 is beyond EOD, truncated [ 605.591834] loop4: p224 start 1 is beyond EOD, truncated [ 605.597335] loop4: p225 start 1 is beyond EOD, truncated [ 605.602827] loop4: p226 start 1 is beyond EOD, truncated [ 605.608314] loop4: p227 start 1 is beyond EOD, truncated [ 605.613913] loop4: p228 start 1 is beyond EOD, truncated [ 605.619407] loop4: p229 start 1 is beyond EOD, truncated [ 605.624949] loop4: p230 start 1 is beyond EOD, truncated [ 605.630488] loop4: p231 start 1 is beyond EOD, truncated [ 605.636080] loop4: p232 start 1 is beyond EOD, truncated [ 605.641584] loop4: p233 start 1 is beyond EOD, truncated [ 605.647145] loop4: p234 start 1 is beyond EOD, truncated [ 605.652690] loop4: p235 start 1 is beyond EOD, truncated [ 605.658210] loop4: p236 start 1 is beyond EOD, truncated [ 605.663699] loop4: p237 start 1 is beyond EOD, truncated [ 605.669224] loop4: p238 start 1 is beyond EOD, truncated [ 605.674711] loop4: p239 start 1 is beyond EOD, truncated [ 605.680218] loop4: p240 start 1 is beyond EOD, truncated [ 605.685699] loop4: p241 start 1 is beyond EOD, truncated [ 605.691225] loop4: p242 start 1 is beyond EOD, truncated [ 605.696796] loop4: p243 start 1 is beyond EOD, truncated [ 605.702305] loop4: p244 start 1 is beyond EOD, truncated [ 605.707808] loop4: p245 start 1 is beyond EOD, truncated [ 605.713325] loop4: p246 start 1 is beyond EOD, truncated 06:40:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x480000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0xfffffffeffffffff, 0xffff, 0x79e, 0x4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 06:40:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:57 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) r3 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="d649529a963d71163a09aff9f168d20f5bb0f541f0ea3b1ace0c2fcc96d0723857f36ba8eda77a41e240ca5ccefa", 0x2e, r3) 06:40:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) [ 605.718817] loop4: p247 start 1 is beyond EOD, truncated [ 605.724318] loop4: p248 start 1 is beyond EOD, truncated [ 605.729829] loop4: p249 start 1 is beyond EOD, truncated [ 605.735353] loop4: p250 start 1 is beyond EOD, truncated [ 605.740876] loop4: p251 start 1 is beyond EOD, truncated [ 605.746385] loop4: p252 start 1 is beyond EOD, truncated [ 605.751890] loop4: p253 start 1 is beyond EOD, truncated [ 605.757449] loop4: p254 start 1 is beyond EOD, truncated [ 605.762954] loop4: p255 start 1 is beyond EOD, truncated 06:40:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x8b010000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:57 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000001440)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYBLOB='trusted.bdev\x00']) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x3b, "2d6f2a5972016c58d7a6f4c5f5f824ca2f2a2b31db27054d9595e3f5ea7530546e372fced6a05f42f8c6af48d479e76e412b3548c43cd1ae79032f"}, &(0x7f00000002c0)=0x43) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x0, 0x20, 0x1f, 0x5}, &(0x7f0000000240)=0x18) 06:40:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @remote}, 0x14) r2 = socket(0xa, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000000, @dev={0xac, 0x14, 0x14, 0x1a}, [0x0, 0x500]}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) [ 605.805634] binder: 29275:29276 BC_ACQUIRE_DONE node 1103 has no pending acquire request [ 605.813977] binder: 29275:29276 got reply transaction with no transaction stack [ 605.821519] binder: 29275:29276 transaction failed 29201/-71, size 0-0 line 2762 [ 605.824104] binder: BINDER_SET_CONTEXT_MGR already set 06:40:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffff, @u64=0x3}]}, 0x20}}, 0x0) 06:40:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 605.891859] binder: 29279:29280 ioctl 40046207 0 returned -16 [ 605.891988] binder: 29279:29284 BC_ACQUIRE_DONE u0000000000000000 no match [ 605.904934] binder: 29279:29284 got reply transaction with no transaction stack [ 605.912443] binder: 29279:29284 transaction failed 29201/-71, size 0-0 line 2762 06:40:57 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) r3 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="d649529a963d71163a09aff9f168d20f5bb0f541f0ea3b1ace0c2fcc96d0723857f36ba8eda77a41e240ca5ccefa", 0x2e, r3) 06:40:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffffff, @u64=0x3}]}, 0x20}}, 0x0) 06:40:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffffff, @u64=0x3}]}, 0x20}}, 0x0) [ 606.019604] binder: 29300:29301 BC_ACQUIRE_DONE node 1106 has no pending acquire request [ 606.083604] binder: BINDER_SET_CONTEXT_MGR already set 06:40:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffffffffffff000, @u64=0x3}]}, 0x20}}, 0x0) [ 606.106923] binder: 29279:29280 ioctl 40046207 0 returned -16 06:40:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xa1ffffff, @u64=0x3}]}, 0x20}}, 0x0) [ 606.167171] binder: 29311:29312 BC_ACQUIRE_DONE node 1108 has no pending acquire request 06:40:58 executing program 0: 06:40:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:58 executing program 4: 06:40:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x200000000000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x1000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:58 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) r3 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="d649529a963d71163a09aff9f168d20f5bb0f541f0ea3b1ace0c2fcc96d0723857f36ba8eda77a41e240ca5ccefa", 0x2e, r3) 06:40:58 executing program 1: 06:40:58 executing program 1: [ 606.789223] binder: 29327:29331 BC_ACQUIRE_DONE node 1110 has no pending acquire request [ 606.797873] binder: BINDER_SET_CONTEXT_MGR already set [ 606.816822] binder: 29324:29328 ioctl 40046207 0 returned -16 06:40:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x4000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:58 executing program 0: 06:40:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffffff0, @u64=0x3}]}, 0x20}}, 0x0) [ 606.835326] binder: 29324:29328 BC_ACQUIRE_DONE u0000000000000000 no match [ 606.848382] binder: BINDER_SET_CONTEXT_MGR already set 06:40:58 executing program 1: 06:40:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 606.886508] binder: 29327:29331 ioctl 40046207 0 returned -16 06:40:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:58 executing program 0: 06:40:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x1000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 4: 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffffffffffff000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 1: 06:40:59 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) [ 607.035999] binder: 29347:29348 BC_ACQUIRE_DONE node 1113 has no pending acquire request [ 607.053027] binder: BINDER_SET_CONTEXT_MGR already set 06:40:59 executing program 0: 06:40:59 executing program 4: 06:40:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffffa1, @u64=0x3}]}, 0x20}}, 0x0) [ 607.092510] binder: 29349:29350 ioctl 40046207 0 returned -16 [ 607.128497] binder: 29349:29355 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 1: [ 607.187589] binder: BINDER_SET_CONTEXT_MGR already set [ 607.196708] binder: 29349:29350 ioctl 40046207 0 returned -16 06:40:59 executing program 4: 06:40:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 0: 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x8b01000000000000, @u64=0x3}]}, 0x20}}, 0x0) [ 607.261211] binder: 29367:29368 BC_ACQUIRE_DONE node 1116 has no pending acquire request 06:40:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfffffffc, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 1: [ 607.310729] binder: BINDER_SET_CONTEXT_MGR already set 06:40:59 executing program 4: 06:40:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 607.351215] binder: 29373:29374 ioctl 40046207 0 returned -16 [ 607.357186] binder: 29373:29377 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x31, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0xffffff90}}, 0x0) 06:40:59 executing program 1: syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, &(0x7f00000007c0)=@nl=@unspec, &(0x7f00000005c0)=0x80, 0x80000) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000840)=0x28000, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000380)) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="481916e52a0d9b0a2014de62bd98974c8dd6d3752f9b07bfc7fdc496293d7c4ba4baa00e72f6660b1a20f3e12420e90726fc8a80aba114c70b5556c03e4f37e3ee49d34cb71fda1953e85c1bf23e1f82d70295c462341914de74ab6a15c77d5569ad407be532cd87435cb15987b53888e42754ef67af310abb56ff5664cac8bb6f36d7c23d0beef4f5c6edbf16ff391e7ddbaf3bb88e9259b3277ad1d20e9f3922a02832296e747555096163bda6a9dc252300dd02856d784413fbb2019b5d0b0f7a707f", 0xc4}, {&(0x7f0000000080)="b3", 0x1}, {&(0x7f0000000400)="95860ad3f49884d862d8ffdef322e57f6a3b4ec5f16168d0a465f588eff2974ba41fbbf90740d2b5e47288a798b340e8ddca9981d775663ab8d868b3e2151aecf1e301c797c8fa62e23b629799fb1abe43f7d7fcda56ae5dac5c58b500417b8b42c69a55c9f44bc154f4c1db8dd9a6beb6403bc9edd079103f28f78834a8a7cde867fb0b6f34a3176d3a4e201ed8a402e9", 0x91}, {&(0x7f0000000180)="5ec80882d4beadc68fbc99bce15c5c2bdd2bbc236a1a55a49c8092cfa116a2898a7ffa8be1b071297f7bb5dcfe871cc155ec8d587476deac2e187b7da20a4714eaf18d761650e5e92f6969a6", 0x4c}, {&(0x7f00000004c0)="29e18377e493783e8258889f507b189c03afcc5ae3220398b7316fff47b5cb65661c9cb25def525cb8fa5e4958eff79756d6e4328e984b0c9bf12ac4809038361923e941ae7c33b296337710e37e1caa3e684099a3d1a0e1b23757fa3d5f2ebcb43fa2ab0ec64d4bb6987b0e2fd3ba8470377c7eb76bcac07e43ba6e80f3e1f43493d2e706699fba951984ed3a4b7fc9d462e495515ed59e4cc0052fe216fc94904769f44360cc7c335fd77ff32477bcc053884b89417ad6584033b707c0827e21da349c7db26fc6", 0xc8}, {&(0x7f0000000700)="802fe61ed9a7cf97cbca96608161bfbd7473f3c100aaaf860a7a3683c53935d4d2761b4ebe00af9ec0d9109350f8001774976fe029caebec8651d94a69f9c7a415d4bcc1ae1e928ec4f3cac545c5c6b439f9d8305124e8d6214a4bd235a372886f56ab7f9421d55273759afb4051aec04b096fef30b5d3b1936d4626de654f18a495529fd7703bc31273d7eaa8", 0x8d}, {&(0x7f00000000c0)="d873a025c687638b4077a6570d5af74a53ac3efa8cc8c3ba132a55144efea5e20ca3b6de8d7908bb54e08f6ba8b4a1283ad9bc41a7e595fba38c6b5e", 0x3c}], 0x7, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d0588c6d81e7d0819afb26acf3f03107", 0x10}], 0x1, &(0x7f0000000400)}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5a8, 0x800) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) io_setup(0x80000007ff, &(0x7f00000006c0)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x3f00, 0x0, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}]) 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xa1ffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) [ 607.438130] binder: 29385:29386 BC_ACQUIRE_DONE node 1119 has no pending acquire request [ 607.446941] binder: BINDER_SET_CONTEXT_MGR already set [ 607.467122] binder: 29373:29377 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:40:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3000000000000, @u64=0x3}]}, 0x20}}, 0x0) [ 607.487578] binder: 29373:29374 ioctl 40046207 0 returned -16 06:40:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x10001, 0x400000) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffffffffff9, 0xfffffffffefffffe, 0x0, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x1) dup2(r0, r1) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000240)) mlockall(0x2) 06:40:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffa, 0x28001) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/20, 0x14) write$evdev(r0, &(0x7f0000000000), 0x433) 06:40:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0ffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) [ 607.621218] binder: 29405:29406 BC_ACQUIRE_DONE node 1122 has no pending acquire request 06:40:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x40000000, @u64=0x3}]}, 0x20}}, 0x0) [ 607.667842] binder: BINDER_SET_CONTEXT_MGR already set 06:40:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0x951a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) 06:40:59 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000280)={0x6, 0x8}) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x10001000000, 0x100) recvfrom$unix(r0, &(0x7f00000000c0)=""/93, 0x5d, 0x20, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0xffffffffe0eb06e4, 0x1, 'client0\x00', 0x1, "aaddd9cfb0104bc7", "71a9fd1226aeb4102e13d247ed5e7edede99efc4744f3e946548b9960e2aaf5f", 0x4, 0x5}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+30000}}) prctl$intptr(0x17, 0x0) syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x480000) [ 607.698791] binder: 29415:29416 ioctl 40046207 0 returned -16 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3000000, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 607.751296] binder: 29415:29416 BC_ACQUIRE_DONE u0000000000000000 no match 06:40:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', 'self\x00'}, &(0x7f0000000100)='security.ima\x00', 0xd, 0x0) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) flistxattr(r0, &(0x7f0000000200)=""/26, 0x8973f473ee7fadf9) 06:40:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) [ 607.815717] binder: 29431:29433 BC_ACQUIRE_DONE node 1126 has no pending acquire request 06:40:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:40:59 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x2, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:40:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0x951a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) 06:40:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0, @u64=0x3}]}, 0x20}}, 0x0) 06:40:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) [ 607.922266] binder_transaction: 13 callbacks suppressed [ 607.922291] binder: 29439:29443 got reply transaction with no transaction stack [ 607.935270] binder_transaction: 13 callbacks suppressed [ 607.935287] binder: 29439:29443 transaction failed 29201/-71, size 0-0 line 2762 [ 607.989206] binder: BINDER_SET_CONTEXT_MGR already set 06:41:00 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) [ 608.012403] binder: 29447:29450 ioctl 40046207 0 returned -16 [ 608.025299] binder: BINDER_SET_CONTEXT_MGR already set [ 608.045554] binder: 29439:29443 ioctl 40046207 0 returned -16 06:41:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xffffffa1, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xf0, @u64=0x3}]}, 0x20}}, 0x0) [ 608.088187] binder: 29447:29450 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.095291] binder: 29447:29450 got reply transaction with no transaction stack [ 608.102815] binder: 29447:29450 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0x951a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) [ 608.193080] binder: 29469:29471 got reply transaction with no transaction stack [ 608.200616] binder: 29469:29471 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) 06:41:00 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x30000, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x300, @u64=0x3}]}, 0x20}}, 0x0) [ 608.326700] binder: BINDER_SET_CONTEXT_MGR already set [ 608.338921] binder: BINDER_SET_CONTEXT_MGR already set [ 608.355476] binder: 29469:29471 ioctl 40046207 0 returned -16 [ 608.370984] binder: 29482:29483 ioctl 40046207 0 returned -16 06:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0x951a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x4, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) [ 608.421733] binder: 29482:29483 BC_ACQUIRE_DONE u0000000000000000 no match [ 608.428907] binder: 29482:29483 got reply transaction with no transaction stack [ 608.436424] binder: 29482:29483 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3f000000, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e21, 0x0, @empty, 0xffffffffffffffff}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) write(r1, &(0x7f00000001c0)="25546d95824ba2b424f218d3c485c8eea0bf8cb101151119d4cc9e45c680af34867e08ec4efecb10300dd84448153c97d95b7c781a7f04738d581199a7ddaa48d79e75ae651a2d0389c0effa169f6a7681e11acca5d828c491797e9372a19be23a9ad2db87fc0e8b4ba57f7196bede2210e320f630d0b2b0f7d5c78ae50b60f0def3f1a7eef05b9988c6387bd5de13ad23884ba06809b3bddb985308", 0x9c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x7, 0x3, 0x41, 0x6}, 0x10) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) fstat(r1, &(0x7f0000000080)) 06:41:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r0}) recvmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/85, 0x55}], 0x5, 0x0, 0x0, 0x40}, 0x1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00', 0x1}) r2 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="daaa1239af1d62ab35222b08602045b70f655435506c34ac209be3c1ade611e16cc2fb7c50a2a5b5b8695b61796f1989bd770ba71a64ebe84b1ec9fd4b8696215fff2043ee19ac62f99013ec8dc5fc9d7c7d77462f0af725513b2515bcb5cef54496e9bb9d17a40e56", 0x69, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)='usercpuset%\x00', 0xfffffffffffffffb) keyctl$instantiate(0xc, r2, &(0x7f0000000280)="85484551dd8c2ef6b825786ddfc9b5f61425f5b4b57a09e9ba710c0dc1dd57c11e1aa57180e11c5cefe14e5bb4356a939cb1b7558ecdefee00246034b094d38d101196b8464745827acc1c3eda565faf7a4217a9709ca36e6391746a46a5c36be0c9501951b0f3606819e3d93896dda10f2eeb0fedcec42952149a740c0d0af13ff650251c846c369204a52bd0057fc505e955dab01131914b47f1b7a1edcb760e7abcaed0e018a56ab22c54d91bda9320fcb95b223a4a9c6e2707202fddf5dc648fd554f521", 0xc6, r3) 06:41:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 608.508597] binder: 29495:29496 got reply transaction with no transaction stack [ 608.516185] binder: 29495:29496 transaction failed 29201/-71, size 0-0 line 2762 [ 608.530572] binder: BINDER_SET_CONTEXT_MGR already set [ 608.537747] binder: 29495:29496 ioctl 40046207 0 returned -16 [ 608.608666] binder: 29508:29511 got reply transaction with no transaction stack [ 608.616481] binder: 29508:29511 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x2, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x300, @u64=0x3}]}, 0x20}}, 0x0) 06:41:00 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x6, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r2 = memfd_create(&(0x7f0000000040)='{\x00', 0x3) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x8, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x80000000) 06:41:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) 06:41:00 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:41:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xfcffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) [ 608.797510] binder: 29521:29525 got reply transaction with no transaction stack [ 608.805160] binder: 29521:29525 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0xeaffffff00000000, @u64=0x3}]}, 0x20}}, 0x0) [ 608.846597] binder: BINDER_SET_CONTEXT_MGR already set 06:41:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="fa49e76999b45aa3d9930973dd9902021485dc7b57375be09642a8f1540d57b04dae4df9f4136ad7e43e0d8391de19f56ec5f228328a504693891d28017a3f6edc0bf64dd088999c9490c907af92017acefda72cc876b704dba2113ea7fffdd5441e2b28c79d9975cd52a039580df0e6c86ea3d98022b7024d3e06958ab7f940b0a783d09177d25895ff863d1970aac28d92b33ba8b22e7782e626638be2", 0x9e, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0xffff}, 0x1c) unshare(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x81) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100020a0009000100000000013ffe58", 0x1f}], 0x1) [ 608.870154] binder: 29533:29534 ioctl 40046207 0 returned -16 [ 608.892411] binder: BINDER_SET_CONTEXT_MGR already set [ 608.912577] binder: 29533:29534 BC_ACQUIRE_DONE u0000000000000000 no match 06:41:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) r3 = accept4(r1, 0x0, &(0x7f0000000340)=0x951a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) [ 608.919704] binder: 29533:29534 got reply transaction with no transaction stack [ 608.926205] binder: 29521:29525 ioctl 40046207 0 returned -16 [ 608.927213] binder: 29533:29534 transaction failed 29201/-71, size 0-0 line 2762 06:41:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0xffff800b}]}, 0x20}}, 0x0) 06:41:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xcfe, &(0x7f0000000240)="f000003af5b02f1508d65a04a3ddb25226b75fe524991fac08b000190000000000766070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000290000bed3aa8b265e781b1069261d3cd5af9faf7d00000000000000000000"], 0x27}}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/158, &(0x7f0000000180)=0x9e) r1 = socket$inet6(0xa, 0x2, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x10001) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x8a000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000200)=0x84) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000280)={0x7fff, 0x1, {0x1, 0x0, 0xcde, 0x1, 0xfffffffeffffffff}}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={r5, 0x55}, 0x8) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) connect(r3, &(0x7f0000000300)=@generic={0x2, "5fb4a7e47a0c5b491989538462505dd4c91a6a36a41c3a4b06e00d06a29ab31bdfa9a6a2eabf742f8e959f336379aab88c1846d5b7a79205ecbda2a7cce42a35540ab731ba9b678d6336589a59bc6c85a179d2b32c9abc5b90f99230c6ea658be60fa622cc6805bde2a4c234bf35206f9e4bb8be32d7ab28f549fa545c9c"}, 0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000600)={{0x6, 0x4}, 'port1\x00', 0x10, 0x40, 0x8, 0x100000001, 0xaaa, 0x8, 0x4, 0x0, 0x7, 0x200}) 06:41:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x91050000, @u64=0x3}]}, 0x20}}, 0x0) [ 609.028247] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 609.066844] IPVS: length: 158 != 24 06:41:01 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700030000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000480)={{0x7}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417}) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='-\x00', 0x0) 06:41:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0x6}]}, 0x20}}, 0x0) [ 609.095498] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 609.102201] binder: 29559:29563 got reply transaction with no transaction stack [ 609.110433] binder: 29559:29563 transaction failed 29201/-71, size 0-0 line 2762 06:41:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) 06:41:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0xffff800b}]}, 0x20}}, 0x0) [ 609.156316] IPVS: length: 158 != 24 [ 609.185874] kasan: CONFIG_KASAN_INLINE enabled [ 609.190925] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 609.198433] binder: BINDER_SET_CONTEXT_MGR already set [ 609.199294] general protection fault: 0000 [#1] SMP KASAN [ 609.199315] CPU: 0 PID: 29569 Comm: syz-executor3 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 609.214982] binder: BINDER_SET_CONTEXT_MGR already set [ 609.218594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:41:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x591, @u64=0x3}]}, 0x20}}, 0x0) [ 609.218628] RIP: 0010:rhashtable_walk_start_check+0xd3/0x1400 [ 609.218650] Code: f2 c7 40 30 f2 f2 f2 f2 c7 40 34 00 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 44 c0 09 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 0f 85 a4 0f 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b [ 609.218666] RSP: 0018:ffff8801b962eee8 EFLAGS: 00010246 [ 609.231029] binder: 29559:29563 ioctl 40046207 0 returned -16 [ 609.233359] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90012444000 [ 609.233383] RDX: 0000000000000e1d RSI: ffffffff8373162c RDI: 0000000000000000 06:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 609.233408] RBP: ffff8801b962f130 R08: ffff8801c93924c0 R09: ffffed00392cbd1c [ 609.233416] R10: ffffed00392cbd1c R11: ffff8801c965e8e3 R12: 0000000000000000 [ 609.233426] R13: 0000000000000000 R14: ffff8801b962f270 R15: fffffffffffff000 [ 609.233442] FS: 00007feb9fa1b700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 609.251125] binder: 29570:29573 ioctl 40046207 0 returned -16 [ 609.258220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.258231] CR2: 00007fd526e30270 CR3: 00000001d7cfc000 CR4: 00000000001426f0 [ 609.258246] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.258271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.258276] Call Trace: [ 609.258317] ? __kmalloc_node_track_caller+0x33/0x70 [ 609.295184] binder: 29570:29579 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.298594] ? kmem_cache_alloc_node_trace+0x320/0x720 [ 609.298614] ? rhashtable_walk_stop+0x480/0x480 [ 609.298630] ? kasan_unpoison_shadow+0x35/0x50 [ 609.298651] ? kasan_kmalloc+0xc4/0xe0 06:41:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}], 0xffffffffffffffcc, 0xfdfd, &(0x7f00000001c0)}) [ 609.305939] binder: 29570:29579 got reply transaction with no transaction stack [ 609.314138] ? __kmalloc_node_track_caller+0x47/0x70 [ 609.314172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.314192] ? __alloc_skb+0x4c6/0x770 [ 609.320091] binder: 29570:29579 transaction failed 29201/-71, size 0-0 line 2762 [ 609.325944] ? skb_scrub_packet+0x490/0x490 [ 609.325960] ? kmem_cache_alloc_node_trace+0x6b0/0x720 [ 609.325976] ? __kmalloc_node_track_caller+0x33/0x70 [ 609.326000] ? rcu_read_lock_sched_held+0x108/0x120 [ 609.360980] binder_thread_write: 6 callbacks suppressed [ 609.360990] binder: 29581:29582 BC_ACQUIRE_DONE node 1144 has no pending acquire request [ 609.362513] ? kasan_unpoison_shadow+0x35/0x50 [ 609.362541] tipc_nl_sk_walk+0x52/0x1d0 [ 609.362559] ? __kmalloc_node_track_caller+0x47/0x70 [ 609.362574] ? tipc_send_packet+0x60/0x60 [ 609.362595] tipc_nl_sk_dump+0x24/0x30 [ 609.376693] binder: BINDER_SET_CONTEXT_MGR already set [ 609.377120] __tipc_nl_compat_dumpit.isra.11+0x20b/0xad0 [ 609.377144] ? __alloc_skb+0x4c6/0x770 [ 609.388916] binder: 29581:29582 ioctl 40046207 0 returned -16 [ 609.393624] ? __tipc_add_link_prop.isra.9+0x2d0/0x2d0 [ 609.393646] ? lock_release+0x9f0/0x9f0 [ 609.393698] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 609.481443] binder: 29584:29585 BC_ACQUIRE_DONE node 1146 has no pending acquire request [ 609.486850] ? skb_put+0x17b/0x1e0 [ 609.486877] tipc_nl_compat_dumpit+0x1f4/0x440 [ 609.486899] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 609.486928] tipc_nl_compat_recv+0x12b3/0x19a0 [ 609.515677] binder: BINDER_SET_CONTEXT_MGR already set [ 609.517537] ? tipc_nl_compat_doit+0x650/0x650 [ 609.517562] ? tipc_socket_stop+0x30/0x30 [ 609.517579] ? __tipc_nl_compat_dumpit.isra.11+0xad0/0xad0 [ 609.517596] ? radix_tree_descend+0x13c/0x2e0 [ 609.517632] genl_family_rcv_msg+0x8a3/0x1140 [ 609.536786] binder: BINDER_SET_CONTEXT_MGR already set [ 609.537246] ? genl_unregister_family+0x8b0/0x8b0 [ 609.537268] ? __radix_tree_insert+0x8f0/0x8f0 [ 609.545005] binder: 29586:29587 ioctl 40046207 0 returned -16 [ 609.547050] ? lock_acquire+0x1e4/0x4f0 [ 609.547066] ? genl_rcv+0x19/0x40 [ 609.547103] genl_rcv_msg+0xc6/0x168 [ 609.547123] netlink_rcv_skb+0x172/0x440 [ 609.556847] binder: 29584:29585 ioctl 40046207 0 returned -16 [ 609.561348] ? genl_family_rcv_msg+0x1140/0x1140 [ 609.561368] ? netlink_ack+0xbe0/0xbe0 [ 609.561384] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 609.561432] genl_rcv+0x28/0x40 [ 609.561466] netlink_unicast+0x5a0/0x760 [ 609.573185] binder: 29586:29590 BC_ACQUIRE_DONE u0000000000000000 no match [ 609.576843] ? netlink_attachskb+0x9a0/0x9a0 [ 609.576866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.576900] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 609.576941] netlink_sendmsg+0xa18/0xfc0 [ 609.644610] ? netlink_unicast+0x760/0x760 [ 609.648862] ? aa_sock_msg_perm.isra.13+0xba/0x160 [ 609.653829] ? apparmor_socket_sendmsg+0x29/0x30 [ 609.658617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.664171] ? security_socket_sendmsg+0x94/0xc0 [ 609.668941] ? netlink_unicast+0x760/0x760 [ 609.673189] sock_sendmsg+0xd5/0x120 [ 609.676919] ___sys_sendmsg+0x7fd/0x930 [ 609.680913] ? copy_msghdr_from_user+0x580/0x580 [ 609.685705] ? lock_downgrade+0x8f0/0x8f0 [ 609.689879] ? __fget_light+0x2f7/0x440 [ 609.693877] ? fget_raw+0x20/0x20 [ 609.695081] binder: 29594:29595 BC_ACQUIRE_DONE node 1149 has no pending acquire request [ 609.697352] ? __fd_install+0x2db/0x880 [ 609.697390] ? get_unused_fd_flags+0x1a0/0x1a0 [ 609.697434] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.697467] ? sockfd_lookup_light+0xc5/0x160 [ 609.724279] __sys_sendmsg+0x11d/0x290 [ 609.728189] ? __ia32_sys_shutdown+0x80/0x80 [ 609.732630] ? __x64_sys_futex+0x47f/0x6a0 [ 609.736895] ? do_syscall_64+0x9a/0x820 [ 609.740901] ? do_syscall_64+0x9a/0x820 [ 609.744904] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 609.750041] __x64_sys_sendmsg+0x78/0xb0 [ 609.754123] do_syscall_64+0x1b9/0x820 [ 609.758039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 609.763436] ? syscall_return_slowpath+0x5e0/0x5e0 [ 609.768396] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 609.773432] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 609.778491] ? recalc_sigpending_tsk+0x180/0x180 [ 609.783262] ? kasan_check_write+0x14/0x20 [ 609.784126] binder: 29593:29598 BC_ACQUIRE_DONE node 1151 has no pending acquire request [ 609.787514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.787546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.787560] RIP: 0033:0x457099 [ 609.787579] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.787593] RSP: 002b:00007feb9fa1ac78 EFLAGS: 00000246 [ 609.822683] binder: BINDER_SET_CONTEXT_MGR already set [ 609.827903] ORIG_RAX: 000000000000002e [ 609.827914] RAX: ffffffffffffffda RBX: 00007feb9fa1b6d4 RCX: 0000000000457099 [ 609.827924] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 609.827933] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 609.827944] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 609.827954] R13: 00000000004d4bc0 R14: 00000000004c910b R15: 0000000000000000 [ 609.827995] Modules linked in: [ 609.882214] Dumping ftrace buffer: [ 609.884271] binder: 29593:29598 ioctl 40046207 0 returned -16 [ 609.885768] --------------------------------- [ 609.885818] syz-exec-27161 0.N.2 574919672us : 0: u000000006b9b3166 [ 609.885848] syz-exec-27161 0...2 574919885us : 0: u000000006b9b3166 [ 609.902886] syz-exec-27161 0...2 574919945us : 0: u000000006b9b3166 [ 609.909584] syz-exec-27161 0...2 574919985us : 0: u000000006b9b3166 [ 609.916299] syz-exec-27161 0.N.2 574920125us : 0: u000000006b9b3166 [ 609.923006] syz-exec-27161 0...2 574920279us : 0: u000000006b9b3166 [ 609.929719] syz-exec-27161 0...2 574920410us : 0: u000000006b9b3166 [ 609.936419] syz-exec-27161 0...2 574920468us : 0: u000000006b9b3166 [ 609.943181] syz-exec-27161 0...2 574920491us : 0: u000000006b9b3166 [ 609.949883] syz-exec-27161 0...2 574920530us : 0: u000000006b9b3166 [ 609.956627] syz-exec-27161 0...2 574920570us : 0: u000000006b9b3166 [ 609.963361] syz-exec-27161 0...2 574920609us : 0: u000000006b9b3166 [ 609.970060] syz-exec-27161 0...2 574920648us : 0: u000000006b9b3166 [ 609.976753] syz-exec-27161 0...2 574920670us : 0: u000000006b9b3166 [ 609.983467] syz-exec-27161 0...2 574920709us : 0: u000000006b9b3166 [ 609.990157] syz-exec-27161 0...2 574920749us : 0: u000000006b9b3166 [ 609.996844] syz-exec-27161 0...2 574920788us : 0: u000000006b9b3166 [ 610.003533] syz-exec-27161 0...2 574920828us : 0: u000000006b9b3166 [ 610.010220] syz-exec-27161 0...2 574920868us : 0: u000000006b9b3166 [ 610.016923] syz-exec-27161 0...2 574920890us : 0: u000000006b9b3166 [ 610.023628] syz-exec-27161 0...2 574920930us : 0: u000000006b9b3166 [ 610.030312] syz-exec-27161 0...2 574920969us : 0: u000000006b9b3166 [ 610.037038] syz-exec-27161 0...2 574921008us : 0: u000000006b9b3166 [ 610.043754] syz-exec-27161 0...2 574921031us : 0: u000000006b9b3166 [ 610.050490] syz-exec-27161 0...2 574921098us : 0: u000000006b9b3166 [ 610.057208] syz-exec-27161 0...2 574921137us : 0: u000000006b9b3166 [ 610.063926] syz-exec-27161 0...2 574921160us : 0: u000000006b9b3166 [ 610.070620] syz-exec-27161 0...2 574921199us : 0: u000000006b9b3166 [ 610.077347] syz-exec-27161 0...2 574921239us : 0: u000000006b9b3166 [ 610.084051] syz-exec-27161 0.N.2 574921409us : 0: u000000006b9b3166 [ 610.090771] syz-exec-27161 0...2 574921616us : 0: u000000006b9b3166 [ 610.097497] syz-exec-27161 0...2 574921675us : 0: u000000006b9b3166 [ 610.104201] syz-exec-27161 0...2 574921836us : 0: u000000006b9b3166 [ 610.110920] syz-exec-27161 0...2 574921895us : 0: u000000006b9b3166 [ 610.117617] syz-exec-27161 0...2 574921954us : 0: u000000006b9b3166 [ 610.124311] syz-exec-27161 0...2 574921996us : 0: u000000006b9b3166 [ 610.131054] syz-exec-27161 0...2 574922066us : 0: u000000006b9b3166 [ 610.137771] syz-exec-27161 0...2 574922126us : 0: u000000006b9b3166 [ 610.144468] syz-exec-27161 0...2 574922185us : 0: u000000006b9b3166 [ 610.151164] syz-exec-27161 0...2 574922245us : 0: u000000006b9b3166 [ 610.157865] syz-exec-27161 0...2 574922286us : 0: u000000006b9b3166 [ 610.164561] syz-exec-27161 0...2 574922466us : 0: u000000006b9b3166 [ 610.171255] syz-exec-27161 0.N.2 574922526us : 0: u000000006b9b3166 [ 610.177945] syz-exec-27161 0...2 574922754us : 0: u000000006b9b3166 [ 610.184649] syz-exec-27161 0...2 574922759us : 0: u000000006b9b3166 [ 610.191353] syz-exec-27161 0...2 574922764us : 0: u000000006b9b3166 [ 610.198051] syz-exec-27161 0...2 574922769us : 0: u000000006b9b3166 [ 610.204742] syz-exec-27161 0...2 574922774us : 0: u000000006b9b3166 [ 610.211441] syz-exec-27161 0...2 574922778us : 0: u000000006b9b3166 [ 610.218137] syz-exec-27161 0...2 574922783us : 0: u000000006b9b3166 [ 610.224853] syz-exec-27161 0...2 574922788us : 0: u000000006b9b3166 [ 610.231554] syz-exec-27161 0...2 574922912us : 0: u000000006b9b3166 [ 610.238296] syz-exec-27161 0...2 574922982us : 0: u000000006b9b3166 [ 610.244990] syz-exec-27161 0...2 574923022us : 0: u000000006b9b3166 [ 610.251685] syz-exec-27161 0...2 574923102us : 0: u000000006b9b3166 [ 610.258377] syz-exec-27161 0...2 574923141us : 0: u000000006b9b3166 [ 610.265072] syz-exec-27161 0...2 574923181us : 0: u000000006b9b3166 [ 610.271778] syz-exec-27161 0...2 574923220us : 0: u000000006b9b3166 [ 610.278472] syz-exec-27161 0...2 574923243us : 0: u000000006b9b3166 [ 610.285164] syz-exec-27161 0...2 574923282us : 0: u000000006b9b3166 [ 610.291864] syz-exec-27161 0...2 574923410us : 0: u000000006b9b3166 [ 610.298559] syz-exec-27161 0...2 574923450us : 0: u000000006b9b3166 [ 610.305264] syz-exec-27161 0...2 574923472us : 0: u000000006b9b3166 [ 610.312006] syz-exec-27161 0...2 574923512us : 0: u000000006b9b3166 [ 610.318741] syz-exec-27161 0...2 574923551us : 0: u000000006b9b3166 [ 610.325510] syz-exec-27161 0...2 574923591us : 0: u000000006b9b3166 [ 610.332241] syz-exec-27161 0...2 574923672us : 0: u000000006b9b3166 [ 610.338973] syz-exec-27161 0.N.2 574923764us : 0: u000000006b9b3166 [ 610.345665] syz-exec-27161 0...2 574923891us : 0: u000000006b9b3166 [ 610.352358] syz-exec-27161 0...2 574923931us : 0: u000000006b9b3166 [ 610.359087] syz-exec-27161 0...2 574923971us : 0: u000000006b9b3166 [ 610.365812] syz-exec-27161 0...2 574924012us : 0: u000000006b9b3166 [ 610.372530] syz-exec-27161 0...2 574924080us : 0: u000000006b9b3166 [ 610.379259] syz-exec-27161 0...2 574924102us : 0: u000000006b9b3166 [ 610.385974] syz-exec-27161 0...2 574924107us : 0: u000000006b9b3166 [ 610.392670] syz-exec-27161 0...2 574924131us : 0: u000000006b9b3166 [ 610.399399] syz-exec-27161 0...2 574924202us : 0: u000000006b9b3166 [ 610.406115] syz-exec-27161 0...2 574924241us : 0: u000000006b9b3166 [ 610.412813] syz-exec-27161 0...2 574924391us : 0: u000000006b9b3166 [ 610.419505] syz-exec-27161 0...2 574924448us : 0: u000000006b9b3166 [ 610.426200] syz-exec-27161 0...2 574924472us : 0: u000000006b9b3166 [ 610.432890] syz-exec-27161 0...2 574924560us : 0: u000000006b9b3166 [ 610.439599] syz-exec-27161 0...2 574924599us : 0: u000000006b9b3166 [ 610.446291] syz-exec-27161 0...2 574924641us : 0: u000000006b9b3166 [ 610.452981] syz-exec-27161 0...2 574924680us : 0: u000000006b9b3166 [ 610.459721] syz-exec-27161 0...2 574924750us : 0: u000000006b9b3166 [ 610.466422] syz-exec-27161 0...2 574924789us : 0: u000000006b9b3166 [ 610.473130] syz-exec-27161 0...2 574924812us : 0: u000000006b9b3166 [ 610.479855] syz-exec-27161 0.N.2 574924929us : 0: u000000006b9b3166 [ 610.486544] syz-exec-27161 0...2 574925195us : 0: u000000006b9b3166 [ 610.493264] syz-exec-27161 0...2 574925253us : 0: u000000006b9b3166 [ 610.499967] syz-exec-27161 0...2 574925293us : 0: u000000006b9b3166 [ 610.506656] syz-exec-27161 0...2 574925583us : 0: u000000006b9b3166 [ 610.513355] syz-exec-27161 0...2 574925644us : 0: u000000006b9b3166 [ 610.520047] syz-exec-27161 0...2 574925684us : 0: u000000006b9b3166 [ 610.526802] syz-exec-27161 0...2 574925745us : 0: u000000006b9b3166 [ 610.533543] syz-exec-27161 0...2 574925854us : 0: u000000006b9b3166 [ 610.540243] syz-exec-27161 0...2 574925945us : 0: u000000006b9b3166 [ 610.546932] syz-exec-27161 0...2 574926002us : 0: u000000006b9b3166 [ 610.553621] syz-exec-27161 0.N.2 574926024us : 0: u000000006b9b3166 [ 610.560309] syz-exec-27161 0...2 574926396us : 0: u000000006b9b3166 [ 610.567006] syz-exec-27161 0...2 574926407us : 0: u000000006b9b3166 [ 610.573747] syz-exec-27161 0...2 574926413us : 0: u000000006b9b3166 [ 610.580446] syz-exec-27161 0...2 574926418us : 0: u000000006b9b3166 [ 610.587174] syz-exec-27161 0...2 574926423us : 0: u000000006b9b3166 [ 610.593896] syz-exec-27161 0...2 574926431us : 0: u000000006b9b3166 [ 610.600586] syz-exec-27161 0...2 574926546us : 0: u000000006b9b3166 [ 610.607299] syz-exec-27161 0...2 574926635us : 0: u000000006b9b3166 [ 610.613996] syz-exec-27161 0...2 574926659us : 0: u000000006b9b3166 [ 610.620745] syz-exec-27161 0...2 574926698us : 0: u000000006b9b3166 [ 610.627499] syz-exec-27161 0...2 574926737us : 0: u000000006b9b3166 [ 610.634194] syz-exec-27161 0...2 574926817us : 0: u000000006b9b3166 [ 610.640886] syz-exec-27161 0...2 574926858us : 0: u000000006b9b3166 [ 610.647582] syz-exec-27161 0...2 574926947us : 0: u000000006b9b3166 [ 610.654277] syz-exec-27161 0...2 574926986us : 0: u000000006b9b3166 [ 610.660970] syz-exec-27161 0...2 574927008us : 0: u000000006b9b3166 [ 610.667661] syz-exec-27161 0...2 574927120us : 0: u000000006b9b3166 [ 610.674392] syz-exec-27161 0...2 574927126us : 0: u000000006b9b3166 [ 610.681097] syz-exec-27161 0...2 574927131us : 0: u000000006b9b3166 [ 610.687810] syz-exec-27161 0...2 574927136us : 0: u000000006b9b3166 [ 610.694505] syz-exec-27161 0...2 574927238us : 0: u000000006b9b3166 [ 610.701230] syz-exec-27161 0...2 574927298us : 0: u000000006b9b3166 [ 610.707930] syz-exec-27161 0...2 574927551us : 0: u000000006b9b3166 [ 610.714632] syz-exec-27161 0...2 574927609us : 0: u000000006b9b3166 [ 610.721350] syz-exec-27161 0...2 574927842us : 0: u000000006b9b3166 [ 610.728055] syz-exec-27161 0...2 574927902us : 0: u000000006b9b3166 [ 610.734765] syz-exec-27161 0...2 574928032us : 0: u000000006b9b3166 [ 610.741460] syz-exec-27161 0...2 574928087us : 0: u000000006b9b3166 [ 610.748170] syz-exec-27161 0...2 574928091us : 0: u000000006b9b3166 [ 610.754899] syz-exec-27161 0...2 574928097us : 0: u000000006b9b3166 [ 610.761593] syz-exec-27161 0...2 574928102us : 0: u000000006b9b3166 [ 610.768293] syz-exec-27161 0...2 574928108us : 0: u000000006b9b3166 [ 610.774993] syz-exec-27161 0...2 574928150us : 0: u000000006b9b3166 [ 610.781698] syz-exec-27161 0...2 574928192us : 0: u000000006b9b3166 [ 610.788404] syz-exec-27161 0...2 574928363us : 0: u000000006b9b3166 [ 610.795099] syz-exec-27161 0...2 574928371us : 0: u000000006b9b3166 [ 610.801808] syz-exec-27161 0...2 574928377us : 0: u000000006b9b3166 [ 610.808508] syz-exec-27161 0...2 574928383us : 0: u000000006b9b3166 [ 610.815219] syz-exec-27161 0...2 574928388us : 0: u000000006b9b3166 [ 610.821915] syz-exec-27161 0...2 574928393us : 0: u000000006b9b3166 [ 610.828612] syz-exec-27161 0...2 574928398us : 0: u000000006b9b3166 [ 610.835315] syz-exec-27161 0...2 574928404us : 0: u000000006b9b3166 [ 610.842013] syz-exec-27161 0...2 574928409us : 0: u000000006b9b3166 [ 610.848720] syz-exec-27161 0...2 574928414us : 0: u000000006b9b3166 [ 610.855454] syz-exec-27161 0...2 574928511us : 0: u000000006b9b3166 [ 610.862166] syz-exec-27161 0...2 574928784us : 0: u000000006b9b3166 [ 610.868927] syz-exec-27161 0...2 574928843us : 0: u000000006b9b3166 [ 610.875643] syz-exec-27161 0...2 574928916us : 0: u000000006b9b3166 [ 610.882340] syz-exec-27161 0...2 574929014us : 0: u000000006b9b3166 [ 610.889043] syz-exec-27161 0...2 574929085us : 0: u000000006b9b3166 [ 610.895742] syz-exec-27161 0...2 574929091us : 0: u000000006b9b3166 [ 610.902449] syz-exec-27161 0...2 574929097us : 0: u000000006b9b3166 [ 610.909155] syz-exec-27161 0...2 574929101us : 0: u000000006b9b3166 [ 610.915867] syz-exec-27161 0...2 574929126us : 0: u000000006b9b3166 [ 610.922567] syz-exec-27161 0...2 574929185us : 0: u000000006b9b3166 [ 610.929262] syz-exec-27161 0...2 574929225us : 0: u000000006b9b3166 [ 610.935964] syz-exec-27161 0...2 574929265us : 0: u000000006b9b3166 [ 610.942684] syz-exec-27161 0...2 574929392us : 0: u000000006b9b3166 [ 610.949386] syz-exec-27161 0...2 574929434us : 0: u000000006b9b3166 [ 610.956088] syz-exec-27161 0...2 574929472us : 0: u000000006b9b3166 [ 610.962801] syz-exec-27161 0...2 574929513us : 0: u000000006b9b3166 [ 610.969514] syz-exec-27161 0...2 574929536us : 0: u000000006b9b3166 [ 610.976212] syz-exec-27161 0.N.2 574929735us : 0: u000000006b9b3166 [ 610.982926] syz-exec-27161 0...2 574929909us : 0: u000000006b9b3166 [ 610.989626] syz-exec-27161 0...2 574929987us : 0: u000000006b9b3166 [ 610.996322] syz-exec-27161 0...2 574930010us : 0: u000000006b9b3166 [ 611.003025] syz-exec-27161 0...2 574930095us : 0: u000000006b9b3166 [ 611.009724] syz-exec-27161 0...2 574930160us : 0: u000000006b9b3166 [ 611.016434] syz-exec-27161 0...2 574930199us : 0: u000000006b9b3166 [ 611.023149] syz-exec-27161 0...2 574930238us : 0: u000000006b9b3166 [ 611.030076] syz-exec-27161 0...2 574930355us : 0: u000000006b9b3166 [ 611.036802] syz-exec-27161 0...2 574930362us : 0: u000000006b9b3166 [ 611.043504] syz-exec-27161 0...2 574930367us : 0: u000000006b9b3166 [ 611.050202] syz-exec-27161 0...2 574930373us : 0: u000000006b9b3166 [ 611.056902] syz-exec-27161 0...2 574930378us : 0: u000000006b9b3166 [ 611.063600] syz-exec-27161 0...2 574930384us : 0: u000000006b9b3166 [ 611.070296] syz-exec-27161 0...2 574930389us : 0: u000000006b9b3166 [ 611.077033] syz-exec-27161 0...2 574930427us : 0: u000000006b9b3166 [ 611.083746] syz-exec-27161 0...2 574930518us : 0: u000000006b9b3166 [ 611.090454] syz-exec-27161 0...2 574930688us : 0: u000000006b9b3166 [ 611.097169] syz-exec-27161 0...2 574930820us : 0: u000000006b9b3166 [ 611.103870] syz-exec-27161 0.N.2 574930990us : 0: u000000006b9b3166 [ 611.110696] syz-exec-27161 0...2 574931260us : 0: u000000006b9b3166 [ 611.117409] syz-exec-27161 0...2 574931367us : 0: u000000006b9b3166 [ 611.124159] syz-exec-27161 0...2 574931373us : 0: u000000006b9b3166 [ 611.130945] syz-exec-27161 0...2 574931379us : 0: u000000006b9b3166 [ 611.137643] syz-exec-27161 0...2 574931384us : 0: u000000006b9b3166 [ 611.144346] syz-exec-27161 0...2 574931390us : 0: u000000006b9b3166 [ 611.151053] syz-exec-27161 0...2 574931395us : 0: u000000006b9b3166 [ 611.157783] syz-exec-27161 0...2 574931440us : 0: u000000006b9b3166 [ 611.164659] syz-exec-27161 0...2 574931520us : 0: u000000006b9b3166 [ 611.171357] syz-exec-27161 0...2 574931582us : 0: u000000006b9b3166 [ 611.178063] syz-exec-27161 0...2 574931698us : 0: u000000006b9b3166 [ 611.184773] syz-exec-27161 0...2 574931748us : 0: u000000006b9b3166 [ 611.191481] syz-exec-27161 0...2 574931808us : 0: u000000006b9b3166 [ 611.198180] syz-exec-27161 0...2 574931888us : 0: u000000006b9b3166 [ 611.204893] syz-exec-27161 0...2 574931931us : 0: u000000006b9b3166 [ 611.211594] syz-exec-27161 0.N.2 574932080us : 0: u000000006b9b3166 [ 611.218292] syz-exec-27161 0...2 574932498us : 0: u000000006b9b3166 [ 611.224993] syz-exec-27161 0...2 574932559us : 0: u000000006b9b3166 [ 611.231698] syz-exec-27161 0...2 574932617us : 0: u000000006b9b3166 [ 611.238417] syz-exec-27161 0...2 574932677us : 0: u000000006b9b3166 [ 611.245111] syz-exec-27161 0...2 574932758us : 0: u000000006b9b3166 [ 611.251819] syz-exec-27161 0...2 574932818us : 0: u000000006b9b3166 [ 611.258536] syz-exec-27161 0...2 574932876us : 0: u000000006b9b3166 [ 611.265238] syz-exec-27161 0...2 574932917us : 0: u000000006b9b3166 [ 611.271940] syz-exec-27161 0...2 574932975us : 0: u000000006b9b3166 [ 611.278627] syz-exec-27161 0...2 574933016us : 0: u000000006b9b3166 [ 611.285320] syz-exec-27161 0...2 574933097us : 0: u000000006b9b3166 [ 611.292015] syz-exec-27161 0...2 574933178us : 0: u000000006b9b3166 [ 611.298727] syz-exec-27161 0...2 574933238us : 0: u000000006b9b3166 [ 611.305433] syz-exec-27161 0...2 574933297us : 0: u000000006b9b3166 [ 611.312127] syz-exec-27161 0.N.2 574933511us : 0: u000000006b9b3166 [ 611.318837] syz-exec-27161 0...2 574933748us : 0: u000000006b9b3166 [ 611.325549] syz-exec-27161 0...2 574933896us : 0: u000000006b9b3166 [ 611.332518] syz-exec-27161 0...2 574933938us : 0: u000000006b9b3166 [ 611.339255] syz-exec-27161 0...2 574934016us : 0: u000000006b9b3166 [ 611.345943] syz-exec-27161 0...2 574934103us : 0: u000000006b9b3166 [ 611.352637] syz-exec-27161 0...2 574934109us : 0: u000000006b9b3166 [ 611.359359] syz-exec-27161 0...2 574934115us : 0: u000000006b9b3166 [ 611.366086] syz-exec-27161 0...2 574934120us : 0: u000000006b9b3166 [ 611.372807] syz-exec-27161 0...2 574934125us : 0: u000000006b9b3166 [ 611.379507] syz-exec-27161 0...2 574934131us : 0: u000000006b9b3166 [ 611.386206] syz-exec-27161 0...2 574934135us : 0: u000000006b9b3166 [ 611.392906] syz-exec-27161 0...2 574934177us : 0: u000000006b9b3166 [ 611.399603] syz-exec-27161 0...2 574934237us : 0: u000000006b9b3166 [ 611.406296] syz-exec-27161 0...2 574934296us : 0: u000000006b9b3166 [ 611.413004] syz-exec-27161 0...2 574934457us : 0: u000000006b9b3166 [ 611.419703] syz-exec-27161 0...2 574934516us : 0: u000000006b9b3166 [ 611.426399] syz-exec-27161 0...2 574934557us : 0: u000000006b9b3166 [ 611.433097] syz-exec-27161 0...2 574934617us : 0: u000000006b9b3166 [ 611.439802] syz-exec-27161 0.N.2 574934658us : 0: u000000006b9b3166 [ 611.446512] syz-exec-27161 0...2 574934912us : 0: u000000006b9b3166 [ 611.453207] syz-exec-27161 0...2 574934971us : 0: u000000006b9b3166 [ 611.459905] syz-exec-27161 0...2 574935012us : 0: u000000006b9b3166 [ 611.466601] syz-exec-27161 0...2 574935063us : 0: u000000006b9b3166 [ 611.473295] syz-exec-27161 0...2 574935140us : 0: u000000006b9b3166 [ 611.479990] syz-exec-27161 0...2 574935181us : 0: u000000006b9b3166 [ 611.486708] syz-exec-27161 0...2 574935281us : 0: u000000006b9b3166 [ 611.493405] syz-exec-27161 0...2 574935430us : 0: u000000006b9b3166 [ 611.500098] syz-exec-27161 0...2 574935472us : 0: u000000006b9b3166 [ 611.506799] syz-exec-27161 0...2 574935530us : 0: u000000006b9b3166 [ 611.513515] syz-exec-27161 0...2 574935581us : 0: u000000006b9b3166 [ 611.520203] syz-exec-27161 0...2 574935640us : 0: u000000006b9b3166 [ 611.526893] syz-exec-27161 0...2 574935702us : 0: u000000006b9b3166 [ 611.533598] syz-exec-27161 0.N.2 574935843us : 0: u000000006b9b3166 [ 611.540318] syz-exec-27161 0...2 574936121us : 0: u000000006b9b3166 [ 611.547006] syz-exec-27161 0...2 574936127us : 0: u000000006b9b3166 [ 611.553701] syz-exec-27161 0...2 574936133us : 0: u000000006b9b3166 [ 611.560409] syz-exec-27161 0...2 574936154us : 0: u000000006b9b3166 [ 611.567096] syz-exec-27161 0...2 574936240us : 0: u000000006b9b3166 [ 611.573811] syz-exec-27161 0...2 574936438us : 0: u000000006b9b3166 [ 611.580519] syz-exec-27161 0...2 574936497us : 0: u000000006b9b3166 [ 611.587219] syz-exec-27161 0...2 574936557us : 0: u000000006b9b3166 [ 611.593916] syz-exec-27161 0...2 574936619us : 0: u000000006b9b3166 [ 611.600607] syz-exec-27161 0...2 574936659us : 0: u000000006b9b3166 [ 611.607303] syz-exec-27161 0...2 574936699us : 0: u000000006b9b3166 [ 611.614037] syz-exec-27161 0...2 574936738us : 0: u000000006b9b3166 [ 611.620729] syz-exec-27161 0...2 574936779us : 0: u000000006b9b3166 [ 611.627426] syz-exec-27161 0...2 574936837us : 0: u000000006b9b3166 [ 611.634145] syz-exec-27161 0...2 574936877us : 0: u000000006b9b3166 [ 611.640857] syz-exec-27161 0.N.2 574937070us : 0: u000000006b9b3166 [ 611.647552] syz-exec-27161 0...2 574937310us : 0: u000000006b9b3166 [ 611.654244] syz-exec-27161 0...2 574937506us : 0: u000000006b9b3166 [ 611.660943] syz-exec-27161 0...2 574937584us : 0: u000000006b9b3166 [ 611.667630] syz-exec-27161 0...2 574937644us : 0: u000000006b9b3166 [ 611.674322] syz-exec-27161 0...2 574937686us : 0: u000000006b9b3166 [ 611.681059] syz-exec-27161 0...2 574937786us : 0: u000000006b9b3166 [ 611.687768] syz-exec-27161 0...2 574937864us : 0: u000000006b9b3166 [ 611.694507] syz-exec-27161 0...2 574937964us : 0: u000000006b9b3166 [ 611.701261] syz-exec-27161 0...2 574938004us : 0: u000000006b9b3166 [ 611.707973] syz-exec-27161 0...2 574938077us : 0: u000000006b9b3166 [ 611.714681] syz-exec-27161 0...2 574938083us : 0: u000000006b9b3166 [ 611.721384] syz-exec-27161 0...2 574938194us : 0: u000000006b9b3166 [ 611.728074] syz-exec-27161 0.N.2 574938295us : 0: u000000006b9b3166 [ 611.734779] syz-exec-27161 0...2 574938570us : 0: u000000006b9b3166 [ 611.741501] syz-exec-27161 0...2 574938612us : 0: u000000006b9b3166 [ 611.748196] syz-exec-27161 0...2 574938721us : 0: u000000006b9b3166 [ 611.754926] syz-exec-27161 0...2 574938822us : 0: u000000006b9b3166 [ 611.761624] syz-exec-27161 0...2 574938881us : 0: u000000006b9b3166 [ 611.768337] syz-exec-27161 0...2 574938939us : 0: u000000006b9b3166 [ 611.775041] syz-exec-27161 0...2 574938981us : 0: u000000006b9b3166 [ 611.781776] syz-exec-27161 0...2 574939022us : 0: u000000006b9b3166 [ 611.788493] syz-exec-27161 0...2 574939191us : 0: u000000006b9b3166 [ 611.795204] syz-exec-27161 0...2 574939382us : 0: u000000006b9b3166 [ 611.801902] syz-exec-27161 0...2 574939390us : 0: u000000006b9b3166 [ 611.808599] syz-exec-27161 0...2 574939396us : 0: u000000006b9b3166 [ 611.815332] syz-exec-27161 0...2 574939402us : 0: u000000006b9b3166 [ 611.822052] syz-exec-27161 0...2 574939407us : 0: u000000006b9b3166 [ 611.828820] syz-exec-27161 0...2 574939413us : 0: u000000006b9b3166 [ 611.835519] syz-exec-27161 0...2 574939419us : 0: u000000006b9b3166 [ 611.842221] syz-exec-27161 0.N.2 574939550us : 0: u000000006b9b3166 [ 611.848921] syz-exec-27161 0...2 574939761us : 0: u000000006b9b3166 [ 611.855619] syz-exec-27161 0...2 574939851us : 0: u000000006b9b3166 [ 611.862313] syz-exec-27161 0...2 574939911us : 0: u000000006b9b3166 [ 611.869009] syz-exec-27161 0...2 574939990us : 0: u000000006b9b3166 [ 611.875782] syz-exec-27161 0...2 574940031us : 0: u000000006b9b3166 [ 611.882479] syz-exec-27161 0...2 574940085us : 0: u000000006b9b3166 [ 611.889198] syz-exec-27161 0...2 574940091us : 0: u000000006b9b3166 [ 611.895897] syz-exec-27161 0...2 574940097us : 0: u000000006b9b3166 [ 611.902590] syz-exec-27161 0...2 574940102us : 0: u000000006b9b3166 [ 611.909301] syz-exec-27161 0...2 574940108us : 0: u000000006b9b3166 [ 611.916007] syz-exec-27161 0...2 574940133us : 0: u000000006b9b3166 [ 611.922705] syz-exec-27161 0...2 574940191us : 0: u000000006b9b3166 [ 611.929400] syz-exec-27161 0...2 574940293us : 0: u000000006b9b3166 [ 611.936093] syz-exec-27161 0...2 574940492us : 0: u000000006b9b3166 [ 611.942791] syz-exec-27161 0...2 574940552us : 0: u000000006b9b3166 [ 611.949509] syz-exec-27161 0...2 574940643us : 0: u000000006b9b3166 [ 611.956214] syz-exec-27161 0...2 574940702us : 0: u000000006b9b3166 [ 611.962924] syz-exec-27161 0...2 574940914us : 0: u000000006b9b3166 [ 611.969670] syz-exec-27161 0...2 574941004us : 0: u000000006b9b3166 [ 611.976377] syz-exec-27161 0...2 574941026us : 0: u000000006b9b3166 [ 611.983074] syz-exec-27161 0...2 574941081us : 0: u000000006b9b3166 [ 611.989782] syz-exec-27161 0...2 574941087us : 0: u000000006b9b3166 [ 611.996492] syz-exec-27161 0...2 574941092us : 0: u000000006b9b3166 [ 612.003186] syz-exec-27161 0...2 574941097us : 0: u000000006b9b3166 [ 612.009883] syz-exec-27161 0...2 574941102us : 0: u000000006b9b3166 [ 612.016599] syz-exec-27161 0...2 574941143us : 0: u000000006b9b3166 [ 612.023297] syz-exec-27161 0...2 574941186us : 0: u000000006b9b3166 [ 612.030003] syz-exec-27161 0...2 574941225us : 0: u000000006b9b3166 [ 612.036746] syz-exec-27161 0...2 574941266us : 0: u000000006b9b3166 [ 612.043465] syz-exec-27161 0.N.2 574941394us : 0: u000000006b9b3166 [ 612.050152] syz-exec-27161 0...2 574941560us : 0: u000000006b9b3166 [ 612.056891] syz-exec-27161 0...2 574941568us : 0: u000000006b9b3166 [ 612.063591] syz-exec-27161 0...2 574941574us : 0: u000000006b9b3166 [ 612.070304] syz-exec-27161 0...2 574941580us : 0: u000000006b9b3166 [ 612.076993] syz-exec-27161 0...2 574941585us : 0: u000000006b9b3166 [ 612.083690] syz-exec-27161 0...2 574941591us : 0: u000000006b9b3166 [ 612.090379] syz-exec-27161 0...2 574941657us : 0: u000000006b9b3166 [ 612.097067] syz-exec-27161 0...2 574941757us : 0: u000000006b9b3166 [ 612.103795] syz-exec-27161 0...2 574941816us : 0: u000000006b9b3166 [ 612.110501] syz-exec-27161 0...2 574941857us : 0: u000000006b9b3166 [ 612.117197] syz-exec-27161 0.N.2 574941955us : 0: u000000006b9b3166 [ 612.123886] syz-exec-27161 0...2 574942138us : 0: u000000006b9b3166 [ 612.130588] syz-exec-27161 0...2 574942197us : 0: u000000006b9b3166 [ 612.137315] syz-exec-27161 0...2 574942295us : 0: u000000006b9b3166 [ 612.144033] syz-exec-27161 0...2 574942499us : 0: u000000006b9b3166 [ 612.150745] syz-exec-27161 0...2 574942558us : 0: u000000006b9b3166 [ 612.157517] syz-exec-27161 0...2 574942617us : 0: u000000006b9b3166 [ 612.164238] syz-exec-27161 0...2 574942658us : 0: u000000006b9b3166 [ 612.170975] syz-exec-27161 0...2 574942717us : 0: u000000006b9b3166 [ 612.177666] syz-exec-27161 0...2 574942777us : 0: u000000006b9b3166 [ 612.184361] syz-exec-27161 0...2 574942835us : 0: u000000006b9b3166 [ 612.191055] syz-exec-27161 0...2 574942875us : 0: u000000006b9b3166 [ 612.197746] syz-exec-27161 0...2 574942915us : 0: u000000006b9b3166 [ 612.204484] syz-exec-27161 0...2 574942957us : 0: u000000006b9b3166 [ 612.211170] syz-exec-27161 0...2 574943393us : 0: u000000006b9b3166 [ 612.217861] syz-exec-27161 0.N.2 574943491us : 0: u000000006b9b3166 [ 612.224576] syz-exec-27161 0...2 574943655us : 0: u000000006b9b3166 [ 612.231269] syz-exec-27161 0...2 574943714us : 0: u000000006b9b3166 [ 612.237959] syz-exec-27161 0...2 574943773us : 0: u000000006b9b3166 [ 612.244648] syz-exec-27161 0...2 574943832us : 0: u000000006b9b3166 [ 612.251366] syz-exec-27161 0...2 574943874us : 0: u000000006b9b3166 [ 612.258064] syz-exec-27161 0...2 574943934us : 0: u000000006b9b3166 [ 612.264772] syz-exec-27161 0...2 574943993us : 0: u000000006b9b3166 [ 612.271461] syz-exec-27161 0...2 574944035us : 0: u000000006b9b3166 [ 612.278152] syz-exec-27161 0...2 574944102us : 0: u000000006b9b3166 [ 612.284862] syz-exec-27161 0...2 574944165us : 0: u000000006b9b3166 [ 612.291557] syz-exec-27161 0...2 574944242us : 0: u000000006b9b3166 [ 612.298258] syz-exec-27161 0.N.2 574944455us : 0: u000000006b9b3166 [ 612.304956] syz-exec-27161 0...2 574944632us : 0: u000000006b9b3166 [ 612.311654] syz-exec-27161 0...2 574944691us : 0: u000000006b9b3166 [ 612.318367] syz-exec-27161 0...2 574944751us : 0: u000000006b9b3166 [ 612.325069] syz-exec-27161 0...2 574944792us : 0: u000000006b9b3166 [ 612.331778] syz-exec-27161 0...2 574944851us : 0: u000000006b9b3166 [ 612.338474] syz-exec-27161 0...2 574944910us : 0: u000000006b9b3166 [ 612.345187] syz-exec-27161 0...2 574944952us : 0: u000000006b9b3166 [ 612.351888] syz-exec-27161 0...2 574945010us : 0: u000000006b9b3166 [ 612.358580] syz-exec-27161 0...2 574945084us : 0: u000000006b9b3166 [ 612.365307] syz-exec-27161 0...2 574945091us : 0: u000000006b9b3166 [ 612.372004] syz-exec-27161 0...2 574945097us : 0: u000000006b9b3166 [ 612.378707] syz-exec-27161 0...2 574945102us : 0: u000000006b9b3166 [ 612.385427] syz-exec-27161 0...2 574945108us : 0: u000000006b9b3166 [ 612.392123] syz-exec-27161 0...2 574945113us : 0: u000000006b9b3166 [ 612.398819] syz-exec-27161 0...2 574945172us : 0: u000000006b9b3166 [ 612.405528] syz-exec-27161 0...2 574945232us : 0: u000000006b9b3166 [ 612.412224] syz-exec-27161 0...2 574945273us : 0: u000000006b9b3166 [ 612.418959] syz-exec-27161 0...2 574945366us : 0: u000000006b9b3166 [ 612.425703] syz-exec-27161 0...2 574945373us : 0: u000000006b9b3166 [ 612.432416] syz-exec-27161 0...2 574945379us : 0: u000000006b9b3166 [ 612.439114] syz-exec-27161 0...2 574945384us : 0: u000000006b9b3166 [ 612.445822] syz-exec-27161 0...2 574945390us : 0: u000000006b9b3166 [ 612.452552] syz-exec-27161 0...2 574945395us : 0: u000000006b9b3166 [ 612.459266] syz-exec-27161 0...2 574945401us : 0: u000000006b9b3166 [ 612.465974] syz-exec-27161 0...2 574945406us : 0: u000000006b9b3166 [ 612.472667] syz-exec-27161 0...2 574945451us : 0: u000000006b9b3166 [ 612.479391] syz-exec-27161 0...2 574945457us : 0: u000000006b9b3166 [ 612.486094] syz-exec-27161 0...2 574945463us : 0: u000000006b9b3166 [ 612.492832] syz-exec-27161 0...2 574945468us : 0: u000000006b9b3166 [ 612.499558] syz-exec-27161 0...2 574945512us : 0: u000000006b9b3166 [ 612.506271] syz-exec-27161 0...2 574945519us : 0: u000000006b9b3166 [ 612.512972] syz-exec-27161 0...2 574945525us : 0: u000000006b9b3166 [ 612.519672] syz-exec-27161 0...2 574945530us : 0: u000000006b9b3166 [ 612.526377] syz-exec-27161 0.N.2 574945652us : 0: u000000006b9b3166 [ 612.533075] syz-exec-27161 0...2 574945825us : 0: u000000006b9b3166 [ 612.539778] syz-exec-27161 0...2 574945886us : 0: u000000006b9b3166 [ 612.546502] syz-exec-27161 0...2 574945944us : 0: u000000006b9b3166 [ 612.553204] syz-exec-27161 0...2 574945987us : 0: u000000006b9b3166 [ 612.559896] syz-exec-27161 0...2 574946095us : 0: u000000006b9b3166 [ 612.566583] syz-exec-27161 0...2 574946137us : 0: u000000006b9b3166 [ 612.573269] syz-exec-27161 0...2 574946196us : 0: u000000006b9b3166 [ 612.579952] syz-exec-27161 0...2 574946254us : 0: u000000006b9b3166 [ 612.586655] syz-exec-27161 0...2 574946295us : 0: u000000006b9b3166 [ 612.593361] syz-exec-27161 0.N.2 574946437us : 0: u000000006b9b3166 [ 612.600066] syz-exec-27161 0...2 574946594us : 0: u000000006b9b3166 [ 612.606780] syz-exec-27161 0...2 574946652us : 0: u000000006b9b3166 [ 612.613469] syz-exec-27161 0...2 574946714us : 0: u000000006b9b3166 [ 612.620175] syz-exec-27161 0.N.2 574946934us : 0: u000000006b9b3166 [ 612.626868] syz-exec-27161 0...2 574947158us : 0: u000000006b9b3166 [ 612.633595] syz-exec-27161 0...2 574947300us : 0: u000000006b9b3166 [ 612.640311] syz-exec-27161 0...2 574947590us : 0: u000000006b9b3166 [ 612.647007] syz-exec-27161 0...2 574947649us : 0: u000000006b9b3166 [ 612.653727] syz-exec-27161 0...2 574947709us : 0: u000000006b9b3166 [ 612.660432] syz-exec-27161 0...2 574947750us : 0: u000000006b9b3166 [ 612.667139] syz-exec-27161 0...2 574947808us : 0: u000000006b9b3166 [ 612.673843] syz-exec-27161 0...2 574947958us : 0: u000000006b9b3166 [ 612.680552] syz-exec-27161 0...2 574948000us : 0: u000000006b9b3166 [ 612.687249] syz-exec-27161 0.N.2 574948136us : 0: u000000006b9b3166 [ 612.693944] syz-exec-27161 0...2 574948246us : 0: u000000006b9b3166 [ 612.700657] syz-exec-27161 0...2 574948252us : 0: u000000006b9b3166 [ 612.707355] syz-exec-27161 0...2 574948257us : 0: u000000006b9b3166 [ 612.714058] syz-exec-27161 0...2 574948263us : 0: u000000006b9b3166 [ 612.720773] syz-exec-27161 0...2 574948365us : 0: u000000006b9b3166 [ 612.727471] syz-exec-27161 0...2 574948371us : 0: u000000006b9b3166 [ 612.734167] syz-exec-27161 0...2 574948377us : 0: u000000006b9b3166 [ 612.740866] syz-exec-27161 0...2 574948382us : 0: u000000006b9b3166 [ 612.747562] syz-exec-27161 0...2 574948388us : 0: u000000006b9b3166 [ 612.754262] syz-exec-27161 0...2 574948392us : 0: u000000006b9b3166 [ 612.761006] syz-exec-27161 0...2 574948489us : 0: u000000006b9b3166 [ 612.767735] syz-exec-27161 0...2 574948529us : 0: u000000006b9b3166 [ 612.774442] syz-exec-27161 0...2 574948570us : 0: u000000006b9b3166 [ 612.781140] syz-exec-27161 0...2 574948629us : 0: u000000006b9b3166 [ 612.787856] syz-exec-27161 0...2 574948669us : 0: u000000006b9b3166 [ 612.794556] syz-exec-27161 0...2 574948711us : 0: u000000006b9b3166 [ 612.801268] syz-exec-27161 0...2 574948769us : 0: u000000006b9b3166 [ 612.807965] syz-exec-27161 0...2 574948810us : 0: u000000006b9b3166 [ 612.814661] syz-exec-27161 0...2 574948869us : 0: u000000006b9b3166 [ 612.821360] syz-exec-27161 0...2 574948910us : 0: u000000006b9b3166 [ 612.828061] syz-exec-27161 0...2 574949029us : 0: u000000006b9b3166 [ 612.834770] syz-exec-27161 0...2 574949081us : 0: u000000006b9b3166 [ 612.841467] syz-exec-27161 0...2 574949141us : 0: u000000006b9b3166 [ 612.848193] syz-exec-27161 0...2 574949201us : 0: u000000006b9b3166 [ 612.854895] syz-exec-27161 0.N.2 574949411us : 0: u000000006b9b3166 [ 612.861591] syz-exec-27161 0...2 574949606us : 0: u000000006b9b3166 [ 612.868291] syz-exec-27161 0...2 574949666us : 0: u000000006b9b3166 [ 612.874991] syz-exec-27161 0...2 574949725us : 0: u000000006b9b3166 [ 612.881812] syz-exec-27161 0...2 574949767us : 0: u000000006b9b3166 [ 612.888510] syz-exec-27161 0...2 574949855us : 0: u000000006b9b3166 [ 612.895211] syz-exec-27161 0...2 574949896us : 0: u000000006b9b3166 [ 612.901920] syz-exec-27161 0...2 574950036us : 0: u000000006b9b3166 [ 612.908616] syz-exec-27161 0...2 574950088us : 0: u000000006b9b3166 [ 612.915313] syz-exec-27161 0...2 574950093us : 0: u000000006b9b3166 [ 612.922014] syz-exec-27161 0...2 574950100us : 0: u000000006b9b3166 [ 612.928748] syz-exec-27161 0...2 574950104us : 0: u000000006b9b3166 [ 612.935469] syz-exec-27161 0...2 574950164us : 0: u000000006b9b3166 [ 612.942166] syz-exec-27161 0...2 574950204us : 0: u000000006b9b3166 [ 612.948863] syz-exec-27161 0...2 574950244us : 0: u000000006b9b3166 [ 612.955559] syz-exec-27161 0...2 574950285us : 0: u000000006b9b3166 [ 612.962275] syz-exec-27161 0.N.2 574950464us : 0: u000000006b9b3166 [ 612.969002] syz-exec-27161 0...2 574950677us : 0: u000000006b9b3166 [ 612.975704] syz-exec-27161 0...2 574950838us : 0: u000000006b9b3166 [ 612.982406] syz-exec-27161 0...2 574950879us : 0: u000000006b9b3166 [ 612.989120] syz-exec-27161 0...2 574950936us : 0: u000000006b9b3166 [ 612.995892] syz-exec-27161 0...2 574951009us : 0: u000000006b9b3166 [ 613.002588] syz-exec-27161 0...2 574951079us : 0: u000000006b9b3166 [ 613.009286] syz-exec-27161 0...2 574951138us : 0: u000000006b9b3166 [ 613.015977] syz-exec-27161 0...2 574951198us : 0: u000000006b9b3166 [ 613.022665] syz-exec-27161 0...2 574951239us : 0: u000000006b9b3166 [ 613.029539] syz-exec-27161 0...2 574951297us : 0: u000000006b9b3166 [ 613.036230] syz-exec-27161 0...2 574951448us : 0: u000000006b9b3166 [ 613.042921] syz-exec-27161 0...2 574951508us : 0: u000000006b9b3166 [ 613.049655] syz-exec-27161 0...2 574951549us : 0: u000000006b9b3166 [ 613.056449] syz-exec-27161 0.N.2 574951659us : 0: u000000006b9b3166 [ 613.063145] syz-exec-27161 0...2 574951853us : 0: u000000006b9b3166 [ 613.069853] syz-exec-27161 0...2 574951912us : 0: u000000006b9b3166 [ 613.076557] syz-exec-27161 0...2 574951954us : 0: u000000006b9b3166 [ 613.083251] syz-exec-27161 0...2 574952013us : 0: u000000006b9b3166 [ 613.089946] syz-exec-27161 0...2 574952162us : 0: u000000006b9b3166 [ 613.096652] syz-exec-27161 0...2 574952222us : 0: u000000006b9b3166 [ 613.103346] syz-exec-27161 0...2 574952394us : 0: u000000006b9b3166 [ 613.110058] syz-exec-27161 0...2 574952401us : 0: u000000006b9b3166 [ 613.116780] syz-exec-27161 0...2 574952408us : 0: u000000006b9b3166 [ 613.123490] syz-exec-27161 0...2 574952413us : 0: u000000006b9b3166 [ 613.130183] syz-exec-27161 0...2 574952418us : 0: u000000006b9b3166 [ 613.136876] syz-exec-27161 0...2 574952423us : 0: u000000006b9b3166 [ 613.143580] syz-exec-27161 0...2 574952428us : 0: u000000006b9b3166 [ 613.150269] syz-exec-27161 0...2 574952434us : 0: u000000006b9b3166 [ 613.156957] syz-exec-27161 0...2 574952439us : 0: u000000006b9b3166 [ 613.163839] syz-exec-27161 0...2 574952444us : 0: u000000006b9b3166 [ 613.170546] syz-exec-27161 0...2 574952449us : 0: u000000006b9b3166 [ 613.177258] syz-exec-27161 0...2 574952474us : 0: u000000006b9b3166 [ 613.183951] syz-exec-27161 0...2 574952531us : 0: u000000006b9b3166 [ 613.190643] syz-exec-27161 0...2 574952571us : 0: u000000006b9b3166 [ 613.197337] syz-exec-27161 0...2 574952594us : 0: u000000006b9b3166 [ 613.204033] syz-exec-27161 0...2 574952651us : 0: u000000006b9b3166 [ 613.210722] syz-exec-27161 0...2 574952674us : 0: u000000006b9b3166 [ 613.217439] syz-exec-27161 0...2 574952714us : 0: u000000006b9b3166 [ 613.224161] syz-exec-27161 0...2 574952753us : 0: u000000006b9b3166 [ 613.230850] syz-exec-27161 0...2 574952793us : 0: u000000006b9b3166 [ 613.237538] syz-exec-27161 0...2 574953024us : 0: u000000006b9b3166 [ 613.244240] syz-exec-27161 0...2 574953164us : 0: u000000006b9b3166 [ 613.250942] syz-exec-27161 0...2 574953205us : 0: u000000006b9b3166 [ 613.257644] syz-exec-27161 0...2 574953245us : 0: u000000006b9b3166 [ 613.264328] syz-exec-27161 0...2 574953344us : 0: u000000006b9b3166 [ 613.271023] syz-exec-27161 0...2 574953352us : 0: u000000006b9b3166 [ 613.277715] syz-exec-27161 0...2 574953358us : 0: u000000006b9b3166 [ 613.284419] syz-exec-27161 0...2 574953363us : 0: u000000006b9b3166 [ 613.291114] syz-exec-27161 0...2 574953369us : 0: u000000006b9b3166 [ 613.297832] syz-exec-27161 0...2 574953390us : 0: u000000006b9b3166 [ 613.304538] syz-exec-27161 0...2 574953399us : 0: u000000006b9b3166 [ 613.311225] syz-exec-27161 0...2 574953405us : 0: u000000006b9b3166 [ 613.317916] syz-exec-27161 0...2 574953411us : 0: u000000006b9b3166 [ 613.324604] syz-exec-27161 0...2 574953496us : 0: u000000006b9b3166 [ 613.331297] syz-exec-27161 0...2 574953606us : 0: u000000006b9b3166 [ 613.338005] syz-exec-27161 0...2 574953733us : 0: u000000006b9b3166 [ 613.344730] syz-exec-27161 0...2 574953795us : 0: u000000006b9b3166 [ 613.351429] syz-exec-27161 0...2 574953836us : 0: u000000006b9b3166 [ 613.358138] syz-exec-27161 0...2 574953926us : 0: u000000006b9b3166 [ 613.364859] syz-exec-27161 0...2 574953963us : 0: u000000006b9b3166 [ 613.371553] syz-exec-27161 0.N.2 574954026us : 0: u000000006b9b3166 [ 613.378248] syz-exec-27161 0...2 574954168us : 0: u000000006b9b3166 [ 613.384943] syz-exec-27161 0...2 574954227us : 0: u000000006b9b3166 [ 613.391644] syz-exec-27161 0...2 574954268us : 0: u000000006b9b3166 [ 613.398340] syz-exec-27161 0.N.2 574954438us : 0: u000000006b9b3166 [ 613.405041] syz-exec-27161 0...2 574954620us : 0: u000000006b9b3166 [ 613.411752] syz-exec-27161 0...2 574954677us : 0: u000000006b9b3166 [ 613.418458] syz-exec-27161 0...2 574954699us : 0: u000000006b9b3166 [ 613.425154] syz-exec-27161 0...2 574954739us : 0: u000000006b9b3166 [ 613.431851] syz-exec-27161 0...2 574954778us : 0: u000000006b9b3166 [ 613.438545] syz-exec-27161 0...2 574954801us : 0: u000000006b9b3166 [ 613.445257] syz-exec-27161 0...2 574954841us : 0: u000000006b9b3166 [ 613.451954] syz-exec-27161 0...2 574954880us : 0: u000000006b9b3166 [ 613.458651] syz-exec-27161 0...2 574954919us : 0: u000000006b9b3166 [ 613.465363] syz-exec-27161 0...2 574954979us : 0: u000000006b9b3166 [ 613.472074] syz-exec-27161 0...2 574955020us : 0: u000000006b9b3166 [ 613.478781] syz-exec-27161 0.N.2 574955191us : 0: u000000006b9b3166 [ 613.485478] syz-exec-27161 0...2 574955433us : 0: u000000006b9b3166 [ 613.492179] syz-exec-27161 0...2 574955473us : 0: u000000006b9b3166 [ 613.498864] syz-exec-27161 0...2 574955513us : 0: u000000006b9b3166 [ 613.505565] syz-exec-27161 0...2 574955554us : 0: u000000006b9b3166 [ 613.512282] syz-exec-27161 0...2 574955612us : 0: u000000006b9b3166 [ 613.518983] syz-exec-27161 0...2 574955654us : 0: u000000006b9b3166 [ 613.525668] syz-exec-27161 0...2 574955771us : 0: u000000006b9b3166 [ 613.532386] syz-exec-27161 0...2 574955794us : 0: u000000006b9b3166 [ 613.539101] syz-exec-27161 0...2 574955851us : 0: u000000006b9b3166 [ 613.545807] syz-exec-27161 0...2 574955874us : 0: u000000006b9b3166 [ 613.552499] syz-exec-27161 0...2 574955972us : 0: u000000006b9b3166 [ 613.559184] syz-exec-27161 0...2 574956013us : 0: u000000006b9b3166 [ 613.565881] syz-exec-27161 0...2 574956094us : 0: u000000006b9b3166 [ 613.572568] syz-exec-27161 0...2 574956184us : 0: u000000006b9b3166 [ 613.579255] syz-exec-27161 0...2 574956243us : 0: u000000006b9b3166 [ 613.585954] syz-exec-27161 0...2 574956747us : 0: u000000006b9b3166 [ 613.592641] syz-exec-27161 0...2 574956789us : 0: u000000006b9b3166 [ 613.599327] syz-exec-27161 0...2 574956928us : 0: u000000006b9b3166 [ 613.606017] syz-exec-27161 0...2 574956968us : 0: u000000006b9b3166 [ 613.612711] syz-exec-27161 0...2 574957007us : 0: u000000006b9b3166 [ 613.619404] syz-exec-27161 0...2 574957155us : 0: u000000006b9b3166 [ 613.626096] syz-exec-27161 0...2 574957178us : 0: u000000006b9b3166 [ 613.632811] syz-exec-27161 0...2 574957216us : 0: u000000006b9b3166 [ 613.639508] syz-exec-27161 0...2 574957238us : 0: u000000006b9b3166 [ 613.646202] syz-exec-27161 0...2 574957276us : 0: u000000006b9b3166 [ 613.652891] syz-exec-27161 0...2 574957299us : 0: u000000006b9b3166 [ 613.659668] syz-exec-27161 0...2 574957547us : 0: u000000006b9b3166 [ 613.666375] syz-exec-27161 0...2 574957617us : 0: u000000006b9b3166 [ 613.673071] syz-exec-27161 0...2 574957658us : 0: u000000006b9b3166 [ 613.679772] syz-exec-27161 0...2 574957698us : 0: u000000006b9b3166 [ 613.686486] syz-exec-27161 0...2 574957900us : 0: u000000006b9b3166 [ 613.693178] syz-exec-27161 0...2 574957985us : 0: u000000006b9b3166 [ 613.699894] syz-exec-27161 0...2 574957990us : 0: u000000006b9b3166 [ 613.706602] syz-exec-27161 0...2 574958005us : 0: u000000006b9b3166 [ 613.713287] syz-exec-27161 0...2 574958009us : 0: u000000006b9b3166 [ 613.720006] syz-exec-27161 0...2 574958015us : 0: u000000006b9b3166 [ 613.726745] syz-exec-27161 0...2 574958019us : 0: u000000006b9b3166 [ 613.733446] syz-exec-27161 0...2 574958025us : 0: u000000006b9b3166 [ 613.740137] syz-exec-27161 0...2 574958029us : 0: u000000006b9b3166 [ 613.746824] syz-exec-27161 0...2 574958035us : 0: u000000006b9b3166 [ 613.753529] syz-exec-27161 0...2 574958077us : 0: u000000006b9b3166 [ 613.760224] syz-exec-27161 0...2 574958181us : 0: u000000006b9b3166 [ 613.766931] syz-exec-27161 0...2 574958271us : 0: u000000006b9b3166 [ 613.773618] syz-exec-27161 0...2 574958563us : 0: u000000006b9b3166 [ 613.780329] syz-exec-27161 0...2 574958742us : 0: u000000006b9b3166 [ 613.787025] syz-exec-27161 0...2 574958785us : 0: u000000006b9b3166 [ 613.793716] syz-exec-27161 0...2 574958842us : 0: u000000006b9b3166 [ 613.800404] syz-exec-27161 0.N.2 574958906us : 0: u000000006b9b3166 [ 613.807093] syz-exec-27161 0...2 574959113us : 0: u000000006b9b3166 [ 613.813790] syz-exec-27161 0...2 574959202us : 0: u000000006b9b3166 [ 613.820480] syz-exec-27161 0...2 574959291us : 0: u000000006b9b3166 [ 613.827169] syz-exec-27161 0...2 574959721us : 0: u000000006b9b3166 [ 613.833899] syz-exec-27161 0...2 574959729us : 0: u000000006b9b3166 [ 613.840690] syz-exec-27161 0...2 574959734us : 0: u000000006b9b3166 [ 613.847391] syz-exec-27161 0...2 574959740us : 0: u000000006b9b3166 [ 613.854110] syz-exec-27161 0...2 574959764us : 0: u000000006b9b3166 [ 613.860811] syz-exec-27161 0...2 574959842us : 0: u000000006b9b3166 [ 613.867506] syz-exec-27161 0...2 574959901us : 0: u000000006b9b3166 [ 613.874195] syz-exec-27161 0...2 574959942us : 0: u000000006b9b3166 [ 613.880887] syz-exec-27161 0...2 574960011us : 0: u000000006b9b3166 [ 613.887607] syz-exec-27161 0.N.2 574960173us : 0: u000000006b9b3166 [ 613.894321] syz-exec-27161 0...2 574960614us : 0: u000000006b9b3166 [ 613.901034] syz-exec-27161 0...2 574960716us : 0: u000000006b9b3166 [ 613.907741] syz-exec-27161 0...2 574960775us : 0: u000000006b9b3166 [ 613.914448] syz-exec-27161 0...2 574960846us : 0: u000000006b9b3166 [ 613.921141] syz-exec-27161 0...2 574960852us : 0: u000000006b9b3166 [ 613.927838] syz-exec-27161 0...2 574960857us : 0: u000000006b9b3166 [ 613.934534] syz-exec-27161 0...2 574960863us : 0: u000000006b9b3166 [ 613.941232] syz-exec-27161 0...2 574960904us : 0: u000000006b9b3166 [ 613.948031] syz-exec-27161 0...2 574960963us : 0: u000000006b9b3166 [ 613.954742] syz-exec-27161 0...2 574961004us : 0: u000000006b9b3166 [ 613.961453] syz-exec-27161 0...2 574961165us : 0: u000000006b9b3166 [ 613.968167] syz-exec-27161 0...2 574961244us : 0: u000000006b9b3166 [ 613.974895] syz-exec-27161 0.N.2 574961310us : 0: u000000006b9b3166 [ 613.981590] syz-exec-27161 0...2 574961626us : 0: u000000006b9b3166 [ 613.988286] syz-exec-27161 0...2 574961635us : 0: u000000006b9b3166 [ 613.994982] syz-exec-27161 0...2 574961641us : 0: u000000006b9b3166 [ 614.001680] syz-exec-27161 0...2 574961647us : 0: u000000006b9b3166 [ 614.008388] syz-exec-27161 0...2 574961744us : 0: u000000006b9b3166 [ 614.015091] syz-exec-27161 0...2 574961804us : 0: u000000006b9b3166 [ 614.021787] syz-exec-27161 0...2 574961865us : 0: u000000006b9b3166 [ 614.028659] syz-exec-27161 0...2 574961926us : 0: u000000006b9b3166 [ 614.035346] syz-exec-27161 0...2 574962066us : 0: u000000006b9b3166 [ 614.042105] syz-exec-27161 0...2 574962144us : 0: u000000006b9b3166 [ 614.048833] syz-exec-27161 0...2 574962205us : 0: u000000006b9b3166 [ 614.055521] syz-exec-27161 0...2 574962264us : 0: u000000006b9b3166 [ 614.062209] syz-exec-27161 0...2 574962435us : 0: u000000006b9b3166 [ 614.068948] syz-exec-27161 0.N.2 574962536us : 0: u000000006b9b3166 [ 614.075637] syz-exec-27161 0...2 574962696us : 0: u000000006b9b3166 [ 614.082326] syz-exec-27161 0...2 574962776us : 0: u000000006b9b3166 [ 614.089030] syz-exec-27161 0...2 574962855us : 0: u000000006b9b3166 [ 614.095728] syz-exec-27161 0...2 574962915us : 0: u000000006b9b3166 [ 614.102450] syz-exec-27161 0...2 574962977us : 0: u000000006b9b3166 [ 614.109142] syz-exec-27161 0...2 574963084us : 0: u000000006b9b3166 [ 614.115834] syz-exec-27161 0...2 574963092us : 0: u000000006b9b3166 [ 614.122522] syz-exec-27161 0...2 574963097us : 0: u000000006b9b3166 [ 614.129244] syz-exec-27161 0...2 574963103us : 0: u000000006b9b3166 [ 614.135946] syz-exec-27161 0...2 574963108us : 0: u000000006b9b3166 [ 614.142634] syz-exec-27161 0...2 574963205us : 0: u000000006b9b3166 [ 614.149322] syz-exec-27161 0...2 574963266us : 0: u000000006b9b3166 [ 614.156009] syz-exec-27161 0...2 574963359us : 0: u000000006b9b3166 [ 614.162707] syz-exec-27161 0...2 574963367us : 0: u000000006b9b3166 [ 614.169418] syz-exec-27161 0...2 574963372us : 0: u000000006b9b3166 [ 614.176137] syz-exec-27161 0...2 574963378us : 0: u000000006b9b3166 [ 614.182847] syz-exec-27161 0...2 574963384us : 0: u000000006b9b3166 [ 614.189540] syz-exec-27161 0...2 574963389us : 0: u000000006b9b3166 [ 614.196232] syz-exec-27161 0...2 574963394us : 0: u000000006b9b3166 [ 614.202954] syz-exec-27161 0...2 574963400us : 0: u000000006b9b3166 [ 614.209644] syz-exec-27161 0...2 574963427us : 0: u000000006b9b3166 [ 614.216350] syz-exec-27161 0...2 574963505us : 0: u000000006b9b3166 [ 614.223053] syz-exec-27161 0...2 574963566us : 0: u000000006b9b3166 [ 614.229793] syz-exec-27161 0...2 574963626us : 0: u000000006b9b3166 [ 614.236518] syz-exec-27161 0...2 574963901us : 0: u000000006b9b3166 [ 614.243224] syz-exec-27161 0...2 574963916us : 0: u000000006b9b3166 [ 614.249914] syz-exec-27161 0...2 574963942us : 0: u000000006b9b3166 [ 614.256618] syz-exec-27161 0...2 574964002us : 0: u000000006b9b3166 [ 614.263311] syz-exec-27161 0...2 574964120us : 0: u000000006b9b3166 [ 614.270045] syz-exec-27161 0...2 574964191us : 0: u000000006b9b3166 [ 614.276744] syz-exec-27161 0...2 574964197us : 0: u000000006b9b3166 [ 614.283442] syz-exec-27161 0...2 574964203us : 0: u000000006b9b3166 [ 614.290146] syz-exec-27161 0...2 574964208us : 0: u000000006b9b3166 [ 614.296883] syz-exec-27161 0.N.2 574964470us : 0: u000000006b9b3166 [ 614.303572] syz-exec-27161 0.N.2 574964754us : 0: u000000006b9b3166 [ 614.310350] syz-exec-27161 0...2 574965628us : 0: u000000006b9b3166 [ 614.317122] syz-exec-27161 0...2 574965689us : 0: u000000006b9b3166 [ 614.323867] syz-exec-27161 0...2 574965748us : 0: u000000006b9b3166 [ 614.330578] syz-exec-27161 0...2 574965848us : 0: u000000006b9b3166 [ 614.337278] syz-exec-27161 0...2 574965907us : 0: u000000006b9b3166 [ 614.343971] syz-exec-27161 0...2 574965949us : 0: u000000006b9b3166 [ 614.350666] syz-exec-27161 0...2 574966007us : 0: u000000006b9b3166 [ 614.357359] syz-exec-27161 0...2 574966059us : 0: u000000006b9b3166 [ 614.364055] syz-exec-27161 0...2 574966198us : 0: u000000006b9b3166 [ 614.370752] syz-exec-27161 0...2 574966257us : 0: u000000006b9b3166 [ 614.377453] syz-exec-27161 0...2 574966298us : 0: u000000006b9b3166 [ 614.384149] syz-exec-27161 0...2 574966673us : 0: u000000006b9b3166 [ 614.390848] syz-exec-27161 0...2 574966732us : 0: u000000006b9b3166 [ 614.397549] syz-exec-27161 0...2 574966771us : 0: u000000006b9b3166 [ 614.404256] syz-exec-27161 0...2 574966812us : 0: u000000006b9b3166 [ 614.410950] syz-exec-27161 0...2 574966871us : 0: u000000006b9b3166 [ 614.417645] syz-exec-27161 0...2 574966911us : 0: u000000006b9b3166 [ 614.424337] syz-exec-27161 0...2 574966951us : 0: u000000006b9b3166 [ 614.431053] syz-exec-27161 0...2 574966991us : 0: u000000006b9b3166 [ 614.437782] syz-exec-27161 0...2 574967032us : 0: u000000006b9b3166 [ 614.444475] syz-exec-27161 0...2 574967143us : 0: u000000006b9b3166 [ 614.451170] syz-exec-27161 0...2 574967203us : 0: u000000006b9b3166 [ 614.457881] syz-exec-27161 0...2 574967291us : 0: u000000006b9b3166 [ 614.464576] syz-exec-27161 0.N.2 574967422us : 0: u000000006b9b3166 [ 614.471269] syz-exec-27161 0...2 574967580us : 0: u000000006b9b3166 [ 614.477962] syz-exec-27161 0.N.2 574967680us : 0: u000000006b9b3166 [ 614.484653] syz-exec-27161 0...2 574967834us : 0: u000000006b9b3166 [ 614.491348] syz-exec-27161 0...2 574967875us : 0: u000000006b9b3166 [ 614.498047] syz-exec-27161 0...2 574967933us : 0: u000000006b9b3166 [ 614.504745] syz-exec-27161 0...2 574967994us : 0: u000000006b9b3166 [ 614.511448] syz-exec-27161 0...2 574968034us : 0: u000000006b9b3166 [ 614.518136] syz-exec-27161 0...2 574968103us : 0: u000000006b9b3166 [ 614.524838] syz-exec-27161 0...2 574968143us : 0: u000000006b9b3166 [ 614.531532] syz-exec-27161 0...2 574968183us : 0: u000000006b9b3166 [ 614.538225] syz-exec-27161 0...2 574968223us : 0: u000000006b9b3166 [ 614.544919] syz-exec-27161 0...2 574968263us : 0: u000000006b9b3166 [ 614.551611] syz-exec-27161 0...2 574968432us : 0: u000000006b9b3166 [ 614.558320] syz-exec-27161 0...2 574968474us : 0: u000000006b9b3166 [ 614.565060] syz-exec-27161 0...2 574968563us : 0: u000000006b9b3166 [ 614.571773] syz-exec-27161 0...2 574968604us : 0: u000000006b9b3166 [ 614.578463] syz-exec-27161 0...2 574968693us : 0: u000000006b9b3166 [ 614.585155] syz-exec-27161 0...2 574968734us : 0: u000000006b9b3166 [ 614.591846] syz-exec-27161 0...2 574968773us : 0: u000000006b9b3166 [ 614.598546] syz-exec-27161 0.N.2 574968855us : 0: u000000006b9b3166 [ 614.605301] syz-exec-27161 0...2 574969027us : 0: u000000006b9b3166 [ 614.612017] syz-exec-27161 0...2 574969081us : 0: u000000006b9b3166 [ 614.618711] syz-exec-27161 0...2 574969087us : 0: u000000006b9b3166 [ 614.625445] syz-exec-27161 0...2 574969092us : 0: u000000006b9b3166 [ 614.632135] syz-exec-27161 0...2 574969097us : 0: u000000006b9b3166 [ 614.638842] syz-exec-27161 0...2 574969102us : 0: u000000006b9b3166 [ 614.645531] syz-exec-27161 0...2 574969176us : 0: u000000006b9b3166 [ 614.652255] syz-exec-27161 0...2 574969235us : 0: u000000006b9b3166 [ 614.658982] syz-exec-27161 0.N.2 574969297us : 0: u000000006b9b3166 [ 614.665684] syz-exec-27161 0...2 574971127us : 0: u000000006b9b3166 [ 614.672382] syz-exec-27161 0...2 574971135us : 0: u000000006b9b3166 [ 614.679076] syz-exec-27161 0...2 574971141us : 0: u000000006b9b3166 [ 614.685779] syz-exec-27161 0...2 574971146us : 0: u000000006b9b3166 [ 614.692474] syz-exec-27161 0...2 574971194us : 0: u000000006b9b3166 [ 614.699165] syz-exec-27161 0...2 574971200us : 0: u000000006b9b3166 [ 614.705863] syz-exec-27161 0...2 574971205us : 0: u000000006b9b3166 [ 614.712559] syz-exec-27161 0...2 574971210us : 0: u000000006b9b3166 [ 614.719267] syz-exec-27161 0.N.2 574971274us : 0: u000000006b9b3166 [ 614.725966] syz-exec-27161 0...2 574971650us : 0: u000000006b9b3166 [ 614.732666] syz-exec-27161 0...2 574971710us : 0: u000000006b9b3166 [ 614.739363] syz-exec-27161 0...2 574971768us : 0: u000000006b9b3166 [ 614.746077] syz-exec-27161 0...2 574971829us : 0: u000000006b9b3166 [ 614.752802] syz-exec-27161 0...2 574971889us : 0: u000000006b9b3166 [ 614.759501] syz-exec-27161 0...2 574971930us : 0: u000000006b9b3166 [ 614.766203] syz-exec-27161 0...2 574972139us : 0: u000000006b9b3166 [ 614.772900] syz-exec-27161 0...2 574972219us : 0: u000000006b9b3166 [ 614.779595] syz-exec-27161 0...2 574972279us : 0: u000000006b9b3166 [ 614.786290] syz-exec-27161 0.N.2 574972749us : 0: u000000006b9b3166 [ 614.792980] syz-exec-27161 0...2 574973035us : 0: u000000006b9b3166 [ 614.799683] syz-exec-27161 0...2 574973156us : 0: u000000006b9b3166 [ 614.806411] syz-exec-27161 0...2 574973358us : 0: u000000006b9b3166 [ 614.813101] syz-exec-27161 0...2 574973365us : 0: u000000006b9b3166 [ 614.819812] syz-exec-27161 0...2 574973371us : 0: u000000006b9b3166 [ 614.826520] syz-exec-27161 0...2 574973376us : 0: u000000006b9b3166 [ 614.833210] syz-exec-27161 0...2 574973382us : 0: u000000006b9b3166 [ 614.839899] syz-exec-27161 0...2 574973386us : 0: u000000006b9b3166 [ 614.846609] syz-exec-27161 0...2 574973392us : 0: u000000006b9b3166 [ 614.853307] syz-exec-27161 0...2 574973397us : 0: u000000006b9b3166 [ 614.860015] syz-exec-27161 0...2 574973476us : 0: u000000006b9b3166 [ 614.866731] syz-exec-27161 0...2 574973536us : 0: u000000006b9b3166 [ 614.873468] syz-exec-27161 0...2 574973578us : 0: u000000006b9b3166 [ 614.880165] syz-exec-27161 0...2 574973637us : 0: u000000006b9b3166 [ 614.886856] syz-exec-27161 0...2 574973677us : 0: u000000006b9b3166 [ 614.893582] syz-exec-27161 0...2 574973736us : 0: u000000006b9b3166 [ 614.900282] syz-exec-27161 0...2 574973777us : 0: u000000006b9b3166 [ 614.906989] syz-exec-27161 0.N.2 574973926us : 0: u000000006b9b3166 [ 614.913699] syz-exec-27161 0...2 574974134us : 0: u000000006b9b3166 [ 614.920389] syz-exec-27161 0...2 574974195us : 0: u000000006b9b3166 [ 614.927081] syz-exec-27161 0...2 574974295us : 0: u000000006b9b3166 [ 614.933780] syz-exec-27161 0...2 574974436us : 0: u000000006b9b3166 [ 614.940477] syz-exec-27161 0...2 574974495us : 0: u000000006b9b3166 [ 614.947164] syz-exec-27161 0...2 574974555us : 0: u000000006b9b3166 [ 614.953868] syz-exec-27161 0...2 574974665us : 0: u000000006b9b3166 [ 614.960560] syz-exec-27161 0...2 574974815us : 0: u000000006b9b3166 [ 614.967252] syz-exec-27161 0...2 574974875us : 0: u000000006b9b3166 [ 614.974145] syz-exec-27161 0...2 574974934us : 0: u000000006b9b3166 [ 614.980839] syz-exec-27161 0...2 574974974us : 0: u000000006b9b3166 [ 614.987530] syz-exec-27161 0...2 574975015us : 0: u000000006b9b3166 [ 614.994216] syz-exec-27161 0.N.2 574975439us : 0: u000000006b9b3166 [ 615.000904] syz-exec-27161 0...2 574975628us : 0: u000000006b9b3166 [ 615.007590] syz-exec-27161 0...2 574975688us : 0: u000000006b9b3166 [ 615.014311] syz-exec-27161 0...2 574975729us : 0: u000000006b9b3166 [ 615.021035] syz-exec-27161 0...2 574975787us : 0: u000000006b9b3166 [ 615.027981] syz-exec-27161 0...2 574975848us : 0: u000000006b9b3166 [ 615.034670] syz-exec-27161 0...2 574975908us : 0: u000000006b9b3166 [ 615.041376] syz-exec-27161 0...2 574975967us : 0: u000000006b9b3166 [ 615.048068] syz-exec-27161 0...2 574976008us : 0: u000000006b9b3166 [ 615.054798] syz-exec-27161 0...2 574976078us : 0: u000000006b9b3166 [ 615.061525] syz-exec-27161 0...2 574976141us : 0: u000000006b9b3166 [ 615.068211] syz-exec-27161 0...2 574976147us : 0: u000000006b9b3166 [ 615.074895] syz-exec-27161 0...2 574976153us : 0: u000000006b9b3166 [ 615.081580] syz-exec-27161 0...2 574976158us : 0: u000000006b9b3166 [ 615.088265] syz-exec-27161 0.N.2 574976252us : 0: u000000006b9b3166 [ 615.094956] syz-exec-27161 0...2 574976659us : 0: u000000006b9b3166 [ 615.101655] syz-exec-27161 0...2 574976847us : 0: u000000006b9b3166 [ 615.108356] syz-exec-27161 0...2 574976888us : 0: u000000006b9b3166 [ 615.115050] syz-exec-27161 0...2 574976929us : 0: u000000006b9b3166 [ 615.121741] syz-exec-27161 0...2 574976969us : 0: u000000006b9b3166 [ 615.128467] syz-exec-27161 0...2 574977079us : 0: u000000006b9b3166 [ 615.135185] syz-exec-27161 0...2 574977138us : 0: u000000006b9b3166 [ 615.141874] syz-exec-27161 0...2 574977198us : 0: u000000006b9b3166 [ 615.148564] syz-exec-27161 0...2 574977239us : 0: u000000006b9b3166 [ 615.155252] syz-exec-27161 0...2 574977298us : 0: u000000006b9b3166 [ 615.162097] syz-exec-27161 0.N.2 574977528us : 0: u000000006b9b3166 [ 615.168796] syz-exec-27161 0...2 574977676us : 0: u000000006b9b3166 [ 615.175486] syz-exec-27161 0...2 574977734us : 0: u000000006b9b3166 [ 615.182224] syz-exec-27161 0...2 574977774us : 0: u000000006b9b3166 [ 615.188933] syz-exec-27161 0...2 574977796us : 0: u000000006b9b3166 [ 615.195627] syz-exec-27161 0...2 574977854us : 0: u000000006b9b3166 [ 615.202332] syz-exec-27161 0...2 574977876us : 0: u000000006b9b3166 [ 615.209045] syz-exec-27161 0...2 574977916us : 0: u000000006b9b3166 [ 615.215743] syz-exec-27161 0...2 574978006us : 0: u000000006b9b3166 [ 615.222459] syz-exec-27161 0...2 574978085us : 0: u000000006b9b3166 [ 615.229176] syz-exec-27161 0...2 574978145us : 0: u000000006b9b3166 [ 615.235872] syz-exec-27161 0...2 574978226us : 0: u000000006b9b3166 [ 615.242570] syz-exec-27161 0...2 574978266us : 0: u000000006b9b3166 [ 615.249272] syz-exec-27161 0.N.2 574978434us : 0: u000000006b9b3166 [ 615.255971] syz-exec-27161 0.N.2 574978794us : 0: u000000006b9b3166 [ 615.262673] syz-exec-27161 0...2 574978941us : 0: u000000006b9b3166 [ 615.269370] syz-exec-27161 0...2 574979083us : 0: u000000006b9b3166 [ 615.276069] syz-exec-27161 0...2 574979143us : 0: u000000006b9b3166 [ 615.282780] syz-exec-27161 0...2 574979202us : 0: u000000006b9b3166 [ 615.289493] syz-exec-27161 0...2 574979243us : 0: u000000006b9b3166 [ 615.296193] syz-exec-27161 0...2 574979284us : 0: u000000006b9b3166 [ 615.302892] syz-exec-27161 0...2 574979493us : 0: u000000006b9b3166 [ 615.309592] syz-exec-27161 0...2 574979498us : 0: u000000006b9b3166 [ 615.316293] syz-exec-27161 0...2 574979504us : 0: u000000006b9b3166 [ 615.322991] syz-exec-27161 0...2 574979562us : 0: u000000006b9b3166 [ 615.329693] syz-exec-27161 0...2 574979604us : 0: u000000006b9b3166 [ 615.336390] syz-exec-27161 0...2 574979867us : 0: u000000006b9b3166 [ 615.343085] syz-exec-27161 0.N.2 574979968us : 0: u000000006b9b3166 [ 615.349792] syz-exec-27161 0...2 574980156us : 0: u000000006b9b3166 [ 615.356508] syz-exec-27161 0...2 574980216us : 0: u000000006b9b3166 [ 615.363224] syz-exec-27161 0...2 574980256us : 0: u000000006b9b3166 [ 615.369920] syz-exec-27161 0.n.2 574980362us : 0: u000000006b9b3166 [ 615.376635] syz-exec-27161 0...2 574980508us : 0: u000000006b9b3166 [ 615.383336] syz-exec-27161 0...2 574980567us : 0: u000000006b9b3166 [ 615.390044] syz-exec-27161 0...2 574980608us : 0: u000000006b9b3166 [ 615.396752] syz-exec-27161 0...2 574980648us : 0: u000000006b9b3166 [ 615.403465] syz-exec-27161 0...2 574980706us : 0: u000000006b9b3166 [ 615.410163] syz-exec-27161 0...2 574980747us : 0: u000000006b9b3166 [ 615.416867] syz-exec-27161 0...2 574980788us : 0: u000000006b9b3166 [ 615.423566] syz-exec-27161 0.N.2 574980869us : 0: u000000006b9b3166 [ 615.430265] syz-exec-27161 0...2 574981065us : 0: u000000006b9b3166 [ 615.436963] syz-exec-27161 0.N.2 574981167us : 0: u000000006b9b3166 [ 615.443664] syz-exec-27161 0...2 574981453us : 0: u000000006b9b3166 [ 615.450366] syz-exec-27161 0...2 574981573us : 0: u000000006b9b3166 [ 615.457067] syz-exec-27161 0...2 574981684us : 0: u000000006b9b3166 [ 615.463776] syz-exec-27161 0...2 574981803us : 0: u000000006b9b3166 [ 615.470474] syz-exec-27161 0...2 574981884us : 0: u000000006b9b3166 [ 615.477173] syz-exec-27161 0.N.2 574982203us : 0: u000000006b9b3166 [ 615.483870] syz-exec-27161 0...2 574982559us : 0: u000000006b9b3166 [ 615.490571] syz-exec-27161 0...2 574982639us : 0: u000000006b9b3166 [ 615.497273] syz-exec-27161 0...2 574982727us : 0: u000000006b9b3166 [ 615.503973] syz-exec-27161 0...2 574982750us : 0: u000000006b9b3166 [ 615.510670] syz-exec-27161 0...2 574982800us : 0: u000000006b9b3166 [ 615.517367] syz-exec-27161 0...2 574982858us : 0: u000000006b9b3166 [ 615.524069] syz-exec-27161 0...2 574982899us : 0: u000000006b9b3166 [ 615.530779] syz-exec-27161 0...2 574982939us : 0: u000000006b9b3166 [ 615.537479] syz-exec-27161 0...2 574982978us : 0: u000000006b9b3166 [ 615.544176] syz-exec-27161 0...2 574983018us : 0: u000000006b9b3166 [ 615.550874] syz-exec-27161 0...2 574983080us : 0: u000000006b9b3166 [ 615.557570] syz-exec-27161 0...2 574983223us : 0: u000000006b9b3166 [ 615.564271] syz-exec-27161 0...2 574983260us : 0: u000000006b9b3166 [ 615.570973] syz-exec-27161 0...2 574983365us : 0: u000000006b9b3166 [ 615.577672] syz-exec-27161 0...2 574983372us : 0: u000000006b9b3166 [ 615.584369] syz-exec-27161 0...2 574983377us : 0: u000000006b9b3166 [ 615.591072] syz-exec-27161 0...2 574983383us : 0: u000000006b9b3166 [ 615.597783] syz-exec-27161 0...2 574983388us : 0: u000000006b9b3166 [ 615.604482] syz-exec-27161 0...2 574983394us : 0: u000000006b9b3166 [ 615.611184] syz-exec-27161 0.N.2 574983468us : 0: u000000006b9b3166 [ 615.617883] syz-exec-27161 0...2 574983709us : 0: u000000006b9b3166 [ 615.624584] syz-exec-27161 0...2 574983769us : 0: u000000006b9b3166 [ 615.631284] syz-exec-27161 0...2 574983809us : 0: u000000006b9b3166 [ 615.637986] syz-exec-27161 0...2 574983874us : 0: u000000006b9b3166 [ 615.644693] syz-exec-27161 0...2 574983978us : 0: u000000006b9b3166 [ 615.651392] syz-exec-27161 0...2 574983985us : 0: u000000006b9b3166 [ 615.658089] syz-exec-27161 0...2 574983990us : 0: u000000006b9b3166 [ 615.664804] syz-exec-27161 0...2 574983996us : 0: u000000006b9b3166 [ 615.671504] syz-exec-27161 0...2 574984001us : 0: u000000006b9b3166 [ 615.678206] syz-exec-27161 0...2 574984151us : 0: u000000006b9b3166 [ 615.684905] syz-exec-27161 0...2 574984158us : 0: u000000006b9b3166 [ 615.691606] syz-exec-27161 0...2 574984163us : 0: u000000006b9b3166 [ 615.698304] syz-exec-27161 0...2 574984169us : 0: u000000006b9b3166 [ 615.705002] syz-exec-27161 0...2 574984210us : 0: u000000006b9b3166 [ 615.711707] syz-exec-27161 0...2 574984270us : 0: u000000006b9b3166 [ 615.718407] syz-exec-27161 0...2 574984367us : 0: u000000006b9b3166 [ 615.725106] syz-exec-27161 0...2 574984374us : 0: u000000006b9b3166 [ 615.731814] syz-exec-27161 0...2 574984378us : 0: u000000006b9b3166 [ 615.738540] syz-exec-27161 0...2 574984383us : 0: u000000006b9b3166 [ 615.745247] syz-exec-27161 0...2 574984387us : 0: u000000006b9b3166 [ 615.751944] syz-exec-27161 0...2 574984393us : 0: u000000006b9b3166 [ 615.758641] syz-exec-27161 0...2 574984398us : 0: u000000006b9b3166 [ 615.765340] syz-exec-27161 0...2 574984404us : 0: u000000006b9b3166 [ 615.772045] syz-exec-27161 0...2 574984409us : 0: u000000006b9b3166 [ 615.778750] syz-exec-27161 0...2 574984490us : 0: u000000006b9b3166 [ 615.785460] syz-exec-27161 0.N.2 574984650us : 0: u000000006b9b3166 [ 615.792157] syz-exec-27161 0...2 574984937us : 0: u000000006b9b3166 [ 615.798859] syz-exec-27161 0...2 574984943us : 0: u000000006b9b3166 [ 615.805555] syz-exec-27161 0...2 574984948us : 0: u000000006b9b3166 [ 615.812255] syz-exec-27161 0...2 574984953us : 0: u000000006b9b3166 [ 615.818955] syz-exec-27161 0...2 574984959us : 0: u000000006b9b3166 [ 615.825653] syz-exec-27161 0...2 574985018us : 0: u000000006b9b3166 [ 615.832350] syz-exec-27161 0...2 574985089us : 0: u000000006b9b3166 [ 615.839052] syz-exec-27161 0...2 574985095us : 0: u000000006b9b3166 [ 615.845753] syz-exec-27161 0...2 574985100us : 0: u000000006b9b3166 [ 615.852463] syz-exec-27161 0...2 574985105us : 0: u000000006b9b3166 [ 615.859162] syz-exec-27161 0...2 574985110us : 0: u000000006b9b3166 [ 615.865860] syz-exec-27161 0...2 574985188us : 0: u000000006b9b3166 [ 615.872560] syz-exec-27161 0...2 574985249us : 0: u000000006b9b3166 [ 615.879257] syz-exec-27161 0...2 574985527us : 0: u000000006b9b3166 [ 615.886009] syz-exec-27161 0...2 574985533us : 0: u000000006b9b3166 [ 615.892716] syz-exec-27161 0...2 574985538us : 0: u000000006b9b3166 [ 615.899414] syz-exec-27161 0...2 574985543us : 0: u000000006b9b3166 [ 615.906116] syz-exec-27161 0...2 574985548us : 0: u000000006b9b3166 [ 615.912826] syz-exec-27161 0...2 574985608us : 0: u000000006b9b3166 [ 615.919524] syz-exec-27161 0...2 574985668us : 0: u000000006b9b3166 [ 615.926226] syz-exec-27161 0...2 574985728us : 0: u000000006b9b3166 [ 615.932928] syz-exec-27161 0...2 574985787us : 0: u000000006b9b3166 [ 615.939622] syz-exec-27161 0.N.2 574985897us : 0: u000000006b9b3166 [ 615.946363] syz-exec-27161 0...2 574986141us : 0: u000000006b9b3166 [ 615.953066] syz-exec-27161 0...2 574986182us : 0: u000000006b9b3166 [ 615.959777] syz-exec-27161 0...2 574986223us : 0: u000000006b9b3166 [ 615.966475] syz-exec-27161 0...2 574986472us : 0: u000000006b9b3166 [ 615.973217] syz-exec-27161 0...2 574986601us : 0: u000000006b9b3166 [ 615.979915] syz-exec-27161 0...2 574986751us : 0: u000000006b9b3166 [ 615.986625] syz-exec-27161 0...2 574986833us : 0: u000000006b9b3166 [ 615.993426] syz-exec-27161 0...2 574986891us : 0: u000000006b9b3166 [ 616.000127] syz-exec-27161 0...2 574986930us : 0: u000000006b9b3166 [ 616.006825] syz-exec-27161 0...2 574986971us : 0: u000000006b9b3166 [ 616.013527] syz-exec-27161 0.N.2 574987102us : 0: u000000006b9b3166 [ 616.020225] syz-exec-27161 0...2 574987430us : 0: u000000006b9b3166 [ 616.026921] syz-exec-27161 0...2 574987490us : 0: u000000006b9b3166 [ 616.033620] syz-exec-27161 0...2 574987551us : 0: u000000006b9b3166 [ 616.040320] syz-exec-27161 0...2 574987649us : 0: u000000006b9b3166 [ 616.047018] syz-exec-27161 0...2 574987710us : 0: u000000006b9b3166 [ 616.053736] syz-exec-27161 0...2 574987751us : 0: u000000006b9b3166 [ 616.060492] syz-exec-27161 0...2 574987810us : 0: u000000006b9b3166 [ 616.067205] syz-exec-27161 0...2 574987870us : 0: u000000006b9b3166 [ 616.073899] syz-exec-27161 0...2 574987929us : 0: u000000006b9b3166 [ 616.080599] syz-exec-27161 0...2 574987971us : 0: u000000006b9b3166 [ 616.087299] syz-exec-27161 0...2 574988130us : 0: u000000006b9b3166 [ 616.094009] syz-exec-27161 0...2 574988220us : 0: u000000006b9b3166 [ 616.100713] syz-exec-27161 0.N.2 574988333us : 0: u000000006b9b3166 [ 616.107412] syz-exec-27161 0...2 574988624us : 0: u000000006b9b3166 [ 616.114107] syz-exec-27161 0...2 574988723us : 0: u000000006b9b3166 [ 616.120857] syz-exec-27161 0...2 574988763us : 0: u000000006b9b3166 [ 616.127571] syz-exec-27161 0...2 574988803us : 0: u000000006b9b3166 [ 616.134269] syz-exec-27161 0...2 574988862us : 0: u000000006b9b3166 [ 616.140970] syz-exec-27161 0...2 574988902us : 0: u000000006b9b3166 [ 616.147673] syz-exec-27161 0...2 574988942us : 0: u000000006b9b3166 [ 616.154371] syz-exec-27161 0...2 574988982us : 0: u000000006b9b3166 [ 616.161076] syz-exec-27161 0...2 574989123us : 0: u000000006b9b3166 [ 616.167783] syz-exec-27161 0...2 574989182us : 0: u000000006b9b3166 [ 616.174478] syz-exec-27161 0...2 574989242us : 0: u000000006b9b3166 [ 616.181174] syz-exec-27161 0...2 574989283us : 0: u000000006b9b3166 [ 616.187871] syz-exec-27161 0.N.2 574989486us : 0: u000000006b9b3166 [ 616.194584] syz-exec-27161 0...2 574989669us : 0: u000000006b9b3166 [ 616.201279] syz-exec-27161 0...2 574989729us : 0: u000000006b9b3166 [ 616.207990] syz-exec-27161 0...2 574989788us : 0: u000000006b9b3166 [ 616.214699] syz-exec-27161 0...2 574989849us : 0: u000000006b9b3166 [ 616.221395] syz-exec-27161 0...2 574989909us : 0: u000000006b9b3166 [ 616.228104] syz-exec-27161 0...2 574989968us : 0: u000000006b9b3166 [ 616.234823] syz-exec-27161 0...2 574990116us : 0: u000000006b9b3166 [ 616.241517] syz-exec-27161 0...2 574990158us : 0: u000000006b9b3166 [ 616.248219] syz-exec-27161 0...2 574990199us : 0: u000000006b9b3166 [ 616.254921] syz-exec-27161 0...2 574990239us : 0: u000000006b9b3166 [ 616.261616] syz-exec-27161 0...2 574990279us : 0: u000000006b9b3166 [ 616.268306] syz-exec-27161 0...2 574990429us : 0: u000000006b9b3166 [ 616.275000] syz-exec-27161 0...2 574990488us : 0: u000000006b9b3166 [ 616.281700] syz-exec-27161 0...2 574990529us : 0: u000000006b9b3166 [ 616.288409] syz-exec-27161 0.N.2 574990569us : 0: u000000006b9b3166 [ 616.295101] syz-exec-27161 0...2 574990882us : 0: u000000006b9b3166 [ 616.301831] syz-exec-27161 0...2 574990942us : 0: u000000006b9b3166 [ 616.308529] syz-exec-27161 0...2 574991060us : 0: u000000006b9b3166 [ 616.315223] syz-exec-27161 0...2 574991120us : 0: u000000006b9b3166 [ 616.321913] syz-exec-27161 0...2 574991161us : 0: u000000006b9b3166 [ 616.328609] syz-exec-27161 0...2 574991251us : 0: u000000006b9b3166 [ 616.335315] syz-exec-27161 0...2 574991393us : 0: u000000006b9b3166 [ 616.342012] syz-exec-27161 0...2 574991452us : 0: u000000006b9b3166 [ 616.348714] syz-exec-27161 0...2 574991510us : 0: u000000006b9b3166 [ 616.355410] syz-exec-27161 0...2 574991551us : 0: u000000006b9b3166 [ 616.362121] syz-exec-27161 0...2 574991591us : 0: u000000006b9b3166 [ 616.368823] syz-exec-27161 0...2 574991652us : 0: u000000006b9b3166 [ 616.375545] syz-exec-27161 0...2 574991740us : 0: u000000006b9b3166 [ 616.382242] syz-exec-27161 0...2 574991763us : 0: u000000006b9b3166 [ 616.388937] syz-exec-27161 0...2 574991802us : 0: u000000006b9b3166 [ 616.395634] syz-exec-27161 0...2 574992133us : 0: u000000006b9b3166 [ 616.402327] syz-exec-27161 0...2 574992274us : 0: u000000006b9b3166 [ 616.409019] syz-exec-27161 0...2 574992431us : 0: u000000006b9b3166 [ 616.415715] syz-exec-27161 0...2 574992474us : 0: u000000006b9b3166 [ 616.422404] syz-exec-27161 0...2 574992533us : 0: u000000006b9b3166 [ 616.429096] syz-exec-27161 0...2 574992572us : 0: u000000006b9b3166 [ 616.435797] syz-exec-27161 0...2 574992593us : 0: u000000006b9b3166 [ 616.442491] syz-exec-27161 0...2 574992614us : 0: u000000006b9b3166 [ 616.449184] syz-exec-27161 0...2 574992651us : 0: u000000006b9b3166 [ 616.455891] syz-exec-27161 0...2 574992675us : 0: u000000006b9b3166 [ 616.462603] syz-exec-27161 0...2 574992743us : 0: u000000006b9b3166 [ 616.469304] syz-exec-27161 0...2 574992815us : 0: u000000006b9b3166 [ 616.476030] syz-exec-27161 0...2 574992873us : 0: u000000006b9b3166 [ 616.482739] syz-exec-27161 0...2 574992913us : 0: u000000006b9b3166 [ 616.489442] syz-exec-27161 0...2 574992955us : 0: u000000006b9b3166 [ 616.496148] syz-exec-27161 0.N.2 574993076us : 0: u000000006b9b3166 [ 616.502843] syz-exec-27161 0...2 574993270us : 0: u000000006b9b3166 [ 616.509537] syz-exec-27161 0.N.2 574993471us : 0: u000000006b9b3166 [ 616.516227] syz-exec-27161 0...2 574993653us : 0: u000000006b9b3166 [ 616.522913] syz-exec-27161 0...2 574993676us : 0: u000000006b9b3166 [ 616.529598] syz-exec-27161 0...2 574993735us : 0: u000000006b9b3166 [ 616.536284] syz-exec-27161 0.p.2 574993757us : 0: u000000006b9b3166 [ 616.542976] syz-exec-27161 0...2 575020106us : 0: u000000006b9b3166 [ 616.549672] syz-exec-27161 0...2 575020207us : 0: u000000006b9b3166 [ 616.556363] syz-exec-27161 0...2 575020287us : 0: u000000006b9b3166 [ 616.563057] syz-exec-27161 0...2 575020368us : 0: u000000006b9b3166 [ 616.569777] syz-exec-27161 0...2 575020374us : 0: u000000006b9b3166 [ 616.576468] syz-exec-27161 0...2 575020379us : 0: u000000006b9b3166 [ 616.583154] syz-exec-27161 0...2 575020383us : 0: u000000006b9b3166 [ 616.589841] syz-exec-27161 0...2 575020389us : 0: u000000006b9b3166 [ 616.596543] syz-exec-27161 0...2 575020393us : 0: u000000006b9b3166 [ 616.603228] syz-exec-27161 0...2 575020398us : 0: u000000006b9b3166 [ 616.609943] syz-exec-27161 0...2 575020404us : 0: u000000006b9b3166 [ 616.616631] syz-exec-27161 0...2 575020485us : 0: u000000006b9b3166 [ 616.623318] syz-exec-27161 0...2 575020545us : 0: u000000006b9b3166 [ 616.630005] syz-exec-27161 0...2 575020607us : 0: u000000006b9b3166 [ 616.636696] syz-exec-27161 0...2 575020686us : 0: u000000006b9b3166 [ 616.643383] syz-exec-27161 0...2 575020757us : 0: u000000006b9b3166 [ 616.650069] syz-exec-27161 0...2 575021068us : 0: u000000006b9b3166 [ 616.656755] syz-exec-27161 0...2 575021186us : 0: u000000006b9b3166 [ 616.663444] syz-exec-27161 0...2 575021287us : 0: u000000006b9b3166 [ 616.670161] syz-exec-27161 0...2 575021458us : 0: u000000006b9b3166 [ 616.676858] syz-exec-27161 0...2 575021516us : 0: u000000006b9b3166 [ 616.683548] syz-exec-27161 0...2 575021556us : 0: u000000006b9b3166 [ 616.690281] syz-exec-27161 0...2 575021597us : 0: u000000006b9b3166 [ 616.696999] syz-exec-27161 0...2 575021637us : 0: u000000006b9b3166 [ 616.703740] syz-exec-27161 0...2 575021678us : 0: u000000006b9b3166 [ 616.710468] syz-exec-27161 0...2 575021718us : 0: u000000006b9b3166 [ 616.717156] syz-exec-27161 0...2 575021758us : 0: u000000006b9b3166 [ 616.723861] syz-exec-27161 0...2 575021858us : 0: u000000006b9b3166 [ 616.730549] syz-exec-27161 0...2 575021916us : 0: u000000006b9b3166 [ 616.737337] syz-exec-27161 0.N.2 575022007us : 0: u000000006b9b3166 [ 616.744066] syz-exec-27161 0...2 575022203us : 0: u000000006b9b3166 [ 616.750758] syz-exec-27161 0...2 575022243us : 0: u000000006b9b3166 [ 616.757460] syz-exec-27161 0...2 575022283us : 0: u000000006b9b3166 [ 616.764152] syz-exec-27161 0...2 575036567us : 0: u000000006b9b3166 [ 616.770844] syz-exec-27161 0...2 575036668us : 0: u000000006b9b3166 [ 616.777535] syz-exec-27161 0...2 575036747us : 0: u000000006b9b3166 [ 616.784226] syz-exec-27161 0...2 575036808us : 0: u000000006b9b3166 [ 616.790958] syz-exec-27161 0...2 575036947us : 0: u000000006b9b3166 [ 616.797647] syz-exec-27161 0...2 575037187us : 0: u000000006b9b3166 [ 616.804349] syz-exec-27161 0...2 575037248us : 0: u000000006b9b3166 [ 616.811044] syz-exec-27161 0...2 575037437us : 0: u000000006b9b3166 [ 616.817755] syz-exec-27161 0...2 575037831us : 0: u000000006b9b3166 [ 616.824451] syz-exec-27161 0...2 575037890us : 0: u000000006b9b3166 [ 616.831157] syz-exec-27161 0...2 575037931us : 0: u000000006b9b3166 [ 616.837847] syz-exec-27161 0...2 575037971us : 0: u000000006b9b3166 [ 616.844535] syz-exec-27161 0...2 575038011us : 0: u000000006b9b3166 [ 616.851224] syz-exec-27161 0...2 575038122us : 0: u000000006b9b3166 [ 616.857915] syz-exec-27161 0...2 575038202us : 0: u000000006b9b3166 [ 616.864605] syz-exec-27161 0...2 575038280us : 0: u000000006b9b3166 [ 616.871303] syz-exec-27161 0.N.2 575038471us : 0: u000000006b9b3166 [ 616.877994] syz-exec-27161 0...2 575040835us : 0: u000000006b9b3166 [ 616.884708] syz-exec-27161 0...2 575040841us : 0: u000000006b9b3166 [ 616.891395] syz-exec-27161 0...2 575040846us : 0: u000000006b9b3166 [ 616.898131] syz-exec-27161 0...2 575040851us : 0: u000000006b9b3166 [ 616.904859] syz-exec-27161 0...2 575040855us : 0: u000000006b9b3166 [ 616.911571] syz-exec-27161 0...2 575040997us : 0: u000000006b9b3166 [ 616.918278] syz-exec-27161 0...2 575041108us : 0: u000000006b9b3166 [ 616.924999] syz-exec-27161 0...2 575041115us : 0: u000000006b9b3166 [ 616.931699] syz-exec-27161 0...2 575041120us : 0: u000000006b9b3166 [ 616.938388] syz-exec-27161 0...2 575041125us : 0: u000000006b9b3166 [ 616.945132] syz-exec-27161 0...2 575041129us : 0: u000000006b9b3166 [ 616.951850] syz-exec-27161 0...2 575041361us : 0: u000000006b9b3166 [ 616.958544] syz-exec-27161 0...2 575041369us : 0: u000000006b9b3166 [ 616.965245] syz-exec-27161 0...2 575041374us : 0: u000000006b9b3166 [ 616.971943] syz-exec-27161 0...2 575041378us : 0: u000000006b9b3166 [ 616.978640] syz-exec-27161 0...2 575041383us : 0: u000000006b9b3166 [ 616.985338] syz-exec-27161 0...2 575041387us : 0: u000000006b9b3166 [ 616.992053] syz-exec-27161 0...2 575041391us : 0: u000000006b9b3166 [ 616.998772] syz-exec-27161 0...2 575041396us : 0: u000000006b9b3166 [ 617.005470] syz-exec-27161 0...2 575041400us : 0: u000000006b9b3166 [ 617.012167] syz-exec-27161 0...2 575041405us : 0: u000000006b9b3166 [ 617.018863] syz-exec-27161 0...2 575041498us : 0: u000000006b9b3166 [ 617.025589] syz-exec-27161 0...2 575041505us : 0: u000000006b9b3166 [ 617.032502] syz-exec-27161 0...2 575041509us : 0: u000000006b9b3166 [ 617.039201] syz-exec-27161 0...2 575041513us : 0: u000000006b9b3166 [ 617.045902] syz-exec-27161 0...2 575041517us : 0: u000000006b9b3166 [ 617.052600] syz-exec-27161 0...2 575041521us : 0: u000000006b9b3166 [ 617.059292] syz-exec-27161 0...2 575041526us : 0: u000000006b9b3166 [ 617.065990] syz-exec-27161 0...2 575041530us : 0: u000000006b9b3166 [ 617.072692] syz-exec-27161 0...2 575041534us : 0: u000000006b9b3166 [ 617.079387] syz-exec-27161 0...2 575041539us : 0: u000000006b9b3166 [ 617.086087] syz-exec-27161 0...2 575041543us : 0: u000000006b9b3166 [ 617.092792] syz-exec-27161 0...2 575041547us : 0: u000000006b9b3166 [ 617.099504] syz-exec-27161 0...2 575041688us : 0: u000000006b9b3166 [ 617.106230] syz-exec-27161 0.N.2 575041888us : 0: u000000006b9b3166 [ 617.112927] syz-exec-27161 0...2 575042186us : 0: u000000006b9b3166 [ 617.119627] syz-exec-27161 0...2 575042268us : 0: u000000006b9b3166 [ 617.126351] syz-exec-27161 0...2 575047763us : 0: u000000006b9b3166 [ 617.133098] syz-exec-27161 0...2 575047769us : 0: u000000006b9b3166 [ 617.139807] syz-exec-27161 0...2 575047774us : 0: u000000006b9b3166 [ 617.146521] syz-exec-27161 0...2 575047778us : 0: u000000006b9b3166 [ 617.153221] syz-exec-27161 0...2 575047783us : 0: u000000006b9b3166 [ 617.160094] syz-exec-27161 0...2 575047830us : 0: u000000006b9b3166 [ 617.166802] syz-exec-27161 0...2 575047835us : 0: u000000006b9b3166 [ 617.173506] syz-exec-27161 0...2 575047839us : 0: u000000006b9b3166 [ 617.180207] syz-exec-27161 0...2 575047844us : 0: u000000006b9b3166 [ 617.186919] syz-exec-27161 0...2 575047847us : 0: u000000006b9b3166 [ 617.193644] syz-exec-27161 0...2 575048016us : 0: u000000006b9b3166 [ 617.200343] syz-exec-27161 0...2 575048107us : 0: u000000006b9b3166 [ 617.207047] syz-exec-27161 0...2 575048226us : 0: u000000006b9b3166 [ 617.213769] syz-exec-27161 0...2 575048232us : 0: u000000006b9b3166 [ 617.220486] syz-exec-27161 0...2 575048238us : 0: u000000006b9b3166 [ 617.227177] syz-exec-27161 0...2 575048243us : 0: u000000006b9b3166 [ 617.233876] syz-exec-27161 0...2 575048248us : 0: u000000006b9b3166 [ 617.240589] syz-exec-27161 0...2 575048253us : 0: u000000006b9b3166 [ 617.247278] syz-exec-27161 0...2 575048259us : 0: u000000006b9b3166 [ 617.254000] syz-exec-27161 0...2 575048264us : 0: u000000006b9b3166 [ 617.260699] syz-exec-27161 0...2 575048365us : 0: u000000006b9b3166 [ 617.267393] syz-exec-27161 0...2 575048372us : 0: u000000006b9b3166 [ 617.274091] syz-exec-27161 0...2 575048377us : 0: u000000006b9b3166 [ 617.280809] syz-exec-27161 0...2 575048382us : 0: u000000006b9b3166 [ 617.287501] syz-exec-27161 0...2 575048387us : 0: u000000006b9b3166 [ 617.294224] syz-exec-27161 0...2 575048392us : 0: u000000006b9b3166 [ 617.300915] syz-exec-27161 0...2 575048397us : 0: u000000006b9b3166 [ 617.307606] syz-exec-27161 0...2 575048402us : 0: u000000006b9b3166 [ 617.314296] syz-exec-27161 0...2 575048487us : 0: u000000006b9b3166 [ 617.321047] syz-exec-27161 0...2 575048549us : 0: u000000006b9b3166 [ 617.327757] syz-exec-27161 0...2 575048554us : 0: u000000006b9b3166 [ 617.334484] syz-exec-27161 0...2 575048559us : 0: u000000006b9b3166 [ 617.341191] syz-exec-27161 0...2 575048564us : 0: u000000006b9b3166 [ 617.347886] syz-exec-27161 0...2 575048569us : 0: u000000006b9b3166 [ 617.354580] syz-exec-27161 0...2 575048574us : 0: u000000006b9b3166 [ 617.361321] syz-exec-27161 0...2 575048579us : 0: u000000006b9b3166 [ 617.368018] syz-exec-27161 0...2 575048584us : 0: u000000006b9b3166 [ 617.374717] syz-exec-27161 0...2 575048630us : 0: u000000006b9b3166 [ 617.381412] syz-exec-27161 0...2 575048635us : 0: u000000006b9b3166 [ 617.388107] syz-exec-27161 0...2 575048640us : 0: u000000006b9b3166 [ 617.394823] syz-exec-27161 0...2 575048644us : 0: u000000006b9b3166 [ 617.401523] syz-exec-27161 0...2 575048649us : 0: u000000006b9b3166 [ 617.408219] syz-exec-27161 0...2 575049124us : 0: u000000006b9b3166 [ 617.414981] syz-exec-27161 0...2 575049243us : 0: u000000006b9b3166 [ 617.421692] syz-exec-27161 0...2 575049311us : 0: u000000006b9b3166 [ 617.428385] syz-exec-27161 0...2 575049317us : 0: u000000006b9b3166 [ 617.435085] syz-exec-27161 0...2 575049321us : 0: u000000006b9b3166 [ 617.441789] syz-exec-27161 0...2 575049326us : 0: u000000006b9b3166 [ 617.448483] syz-exec-27161 0...2 575049330us : 0: u000000006b9b3166 [ 617.455181] syz-exec-27161 0...2 575049335us : 0: u000000006b9b3166 [ 617.461915] syz-exec-27161 0...2 575049340us : 0: u000000006b9b3166 [ 617.468613] syz-exec-27161 0...2 575049494us : 0: u000000006b9b3166 [ 617.475308] syz-exec-27161 0...2 575049605us : 0: u000000006b9b3166 [ 617.482004] syz-exec-27161 0...2 575049611us : 0: u000000006b9b3166 [ 617.488714] syz-exec-27161 0...2 575049615us : 0: u000000006b9b3166 [ 617.495452] syz-exec-27161 0...2 575049620us : 0: u000000006b9b3166 [ 617.502146] syz-exec-27161 0...2 575049625us : 0: u000000006b9b3166 [ 617.508841] syz-exec-27161 0...2 575049630us : 0: u000000006b9b3166 [ 617.515539] syz-exec-27161 0...2 575049635us : 0: u000000006b9b3166 [ 617.522234] syz-exec-27161 0...2 575049640us : 0: u000000006b9b3166 [ 617.528932] syz-exec-27161 0...2 575049734us : 0: u000000006b9b3166 [ 617.535622] syz-exec-27161 0...2 575049814us : 0: u000000006b9b3166 [ 617.542322] syz-exec-27161 0.N.2 575049915us : 0: u000000006b9b3166 [ 617.549009] syz-exec-27161 0...2 575056725us : 0: u000000006b9b3166 [ 617.555702] syz-exec-27161 0...2 575056732us : 0: u000000006b9b3166 [ 617.562394] syz-exec-27161 0...2 575056737us : 0: u000000006b9b3166 [ 617.569082] syz-exec-27161 0...2 575056742us : 0: u000000006b9b3166 [ 617.575782] syz-exec-27161 0...2 575056747us : 0: u000000006b9b3166 [ 617.582477] syz-exec-27161 0...2 575056790us : 0: u000000006b9b3166 [ 617.589167] syz-exec-27161 0...2 575056878us : 0: u000000006b9b3166 [ 617.595894] syz-exec-27161 0...2 575056910us : 0: u000000006b9b3166 [ 617.602618] syz-exec-27161 0...2 575056980us : 0: u000000006b9b3166 [ 617.609318] syz-exec-27161 0...2 575057108us : 0: u000000006b9b3166 [ 617.616017] syz-exec-27161 0...2 575057150us : 0: u000000006b9b3166 [ 617.622717] syz-exec-27161 0...2 575057230us : 0: u000000006b9b3166 [ 617.629407] syz-exec-27161 0...2 575057290us : 0: u000000006b9b3166 [ 617.636103] syz-exec-27161 0...2 575061649us : 0: u000000006b9b3166 [ 617.642823] syz-exec-27161 0...2 575061900us : 0: u000000006b9b3166 [ 617.649562] syz-exec-27161 0...2 575061978us : 0: u000000006b9b3166 [ 617.656271] syz-exec-27161 0...2 575062140us : 0: u000000006b9b3166 [ 617.662962] syz-exec-27161 0...2 575062258us : 0: u000000006b9b3166 [ 617.669652] syz-exec-27161 0...2 575069244us : 0: u000000006b9b3166 [ 617.676337] syz-exec-27161 0...2 575069408us : 0: u000000006b9b3166 [ 617.683030] syz-exec-27161 0...2 575069415us : 0: u000000006b9b3166 [ 617.689734] syz-exec-27161 0...2 575069420us : 0: u000000006b9b3166 [ 617.696428] syz-exec-27161 0...2 575069425us : 0: u000000006b9b3166 [ 617.703123] syz-exec-27161 0...2 575069429us : 0: u000000006b9b3166 [ 617.709820] syz-exec-27161 0...2 575069434us : 0: u000000006b9b3166 [ 617.716522] syz-exec-27161 0...2 575069439us : 0: u000000006b9b3166 [ 617.723233] syz-exec-27161 0...2 575069444us : 0: u000000006b9b3166 [ 617.729958] syz-exec-27161 0...2 575069449us : 0: u000000006b9b3166 [ 617.736652] syz-exec-27161 0...2 575069454us : 0: u000000006b9b3166 [ 617.743410] syz-exec-27161 0...2 575069458us : 0: u000000006b9b3166 [ 617.750150] syz-exec-27161 0...2 575069463us : 0: u000000006b9b3166 [ 617.756840] syz-exec-27161 0...2 575069563us : 0: u000000006b9b3166 [ 617.763530] syz-exec-27161 0...2 575069624us : 0: u000000006b9b3166 [ 617.770220] syz-exec-27161 0...2 575069684us : 0: u000000006b9b3166 [ 617.776914] syz-exec-27161 0...2 575069762us : 0: u000000006b9b3166 [ 617.783607] syz-exec-27161 0...2 575069804us : 0: u000000006b9b3166 [ 617.790303] syz-exec-27161 0...2 575069903us : 0: u000000006b9b3166 [ 617.796999] syz-exec-27161 0...2 575069964us : 0: u000000006b9b3166 [ 617.803701] syz-exec-27161 0.N.2 575070183us : 0: u000000006b9b3166 [ 617.810409] syz-exec-27161 0.N.2 575073695us : 0: u000000006b9b3166 [ 617.817103] syz-exec-27161 0...2 575073956us : 0: u000000006b9b3166 [ 617.823802] syz-exec-27161 0...2 575074082us : 0: u000000006b9b3166 [ 617.830513] syz-exec-27161 0...2 575074088us : 0: u000000006b9b3166 [ 617.837239] syz-exec-27161 0...2 575074093us : 0: u000000006b9b3166 [ 617.843952] syz-exec-27161 0...2 575074098us : 0: u000000006b9b3166 [ 617.850704] syz-exec-27161 0...2 575074103us : 0: u000000006b9b3166 [ 617.857395] syz-exec-27161 0...2 575074108us : 0: u000000006b9b3166 [ 617.864115] syz-exec-27161 0...2 575074113us : 0: u000000006b9b3166 [ 617.870843] syz-exec-27161 0...2 575074118us : 0: u000000006b9b3166 [ 617.877538] syz-exec-27161 0...2 575074122us : 0: u000000006b9b3166 [ 617.884266] syz-exec-27161 0...2 575074127us : 0: u000000006b9b3166 [ 617.890992] syz-exec-27161 0...2 575074132us : 0: u000000006b9b3166 [ 617.897708] syz-exec-27161 0...2 575074137us : 0: u000000006b9b3166 [ 617.904425] syz-exec-27161 0...2 575074142us : 0: u000000006b9b3166 [ 617.911137] syz-exec-27161 0...2 575074167us : 0: u000000006b9b3166 [ 617.917833] syz-exec-27161 0...2 575074226us : 0: u000000006b9b3166 [ 617.924557] syz-exec-27161 0...2 575074286us : 0: u000000006b9b3166 [ 617.931254] syz-exec-27161 0...2 575074805us : 0: u000000006b9b3166 [ 617.937959] syz-exec-27161 0.N.2 575074895us : 0: u000000006b9b3166 [ 617.944652] syz-exec-27161 0...2 575078700us : 0: u000000006b9b3166 [ 617.951356] syz-exec-27161 0...2 575078707us : 0: u000000006b9b3166 [ 617.958052] syz-exec-27161 0...2 575078712us : 0: u000000006b9b3166 [ 617.964750] syz-exec-27161 0...2 575078717us : 0: u000000006b9b3166 [ 617.971467] syz-exec-27161 0...2 575078765us : 0: u000000006b9b3166 [ 617.978169] syz-exec-27161 0...2 575078771us : 0: u000000006b9b3166 [ 617.984874] syz-exec-27161 0...2 575078776us : 0: u000000006b9b3166 [ 617.991566] syz-exec-27161 0...2 575078781us : 0: u000000006b9b3166 [ 617.998260] syz-exec-27161 0...2 575078786us : 0: u000000006b9b3166 [ 618.004956] syz-exec-27161 0...2 575078833us : 0: u000000006b9b3166 [ 618.011659] syz-exec-27161 0...2 575078839us : 0: u000000006b9b3166 [ 618.018350] syz-exec-27161 0...2 575078844us : 0: u000000006b9b3166 [ 618.025089] syz-exec-27161 0...2 575078849us : 0: u000000006b9b3166 [ 618.031808] syz-exec-27161 0...2 575078854us : 0: u000000006b9b3166 [ 618.038539] syz-exec-27161 0...2 575078859us : 0: u000000006b9b3166 [ 618.045240] syz-exec-27161 0...2 575078993us : 0: u000000006b9b3166 [ 618.051936] syz-exec-27161 0...2 575079084us : 0: u000000006b9b3166 [ 618.058631] syz-exec-27161 0...2 575079144us : 0: u000000006b9b3166 [ 618.065328] syz-exec-27161 0...2 575079204us : 0: u000000006b9b3166 [ 618.072028] syz-exec-27161 0...2 575079264us : 0: u000000006b9b3166 [ 618.078746] syz-exec-27161 0...2 575079513us : 0: u000000006b9b3166 [ 618.085484] syz-exec-27161 0.N.2 575079793us : 0: u000000006b9b3166 [ 618.092182] syz-exec-27161 0.N.2 575084907us : 0: u000000006b9b3166 [ 618.098888] syz-exec-27161 0...2 575090263us : 0: u000000006b9b3166 [ 618.105583] syz-exec-27161 0...2 575090374us : 0: u000000006b9b3166 [ 618.112280] syz-exec-27161 0...2 575090379us : 0: u000000006b9b3166 [ 618.118986] syz-exec-27161 0...2 575090384us : 0: u000000006b9b3166 [ 618.125705] syz-exec-27161 0...2 575090389us : 0: u000000006b9b3166 [ 618.132399] syz-exec-27161 0...2 575090394us : 0: u000000006b9b3166 [ 618.139109] syz-exec-27161 0...2 575090399us : 0: u000000006b9b3166 [ 618.145833] syz-exec-27161 0...2 575090404us : 0: u000000006b9b3166 [ 618.152548] syz-exec-27161 0...2 575090504us : 0: u000000006b9b3166 [ 618.159249] syz-exec-27161 0...2 575090565us : 0: u000000006b9b3166 [ 618.165944] syz-exec-27161 0...2 575090644us : 0: u000000006b9b3166 [ 618.172636] syz-exec-27161 0.N.2 575090737us : 0: u000000006b9b3166 [ 618.179325] syz-exec-27161 0...2 575092541us : 0: u000000006b9b3166 [ 618.186017] syz-exec-27161 0...2 575092548us : 0: u000000006b9b3166 [ 618.192717] syz-exec-27161 0...2 575092553us : 0: u000000006b9b3166 [ 618.199411] syz-exec-27161 0...2 575092558us : 0: u000000006b9b3166 [ 618.206109] syz-exec-27161 0...2 575092563us : 0: u000000006b9b3166 [ 618.212836] syz-exec-27161 0...2 575092719us : 0: u000000006b9b3166 [ 618.219530] syz-exec-27161 0...2 575092779us : 0: u000000006b9b3166 [ 618.226247] syz-exec-27161 0...2 575092877us : 0: u000000006b9b3166 [ 618.232948] syz-exec-27161 0...2 575092917us : 0: u000000006b9b3166 [ 618.239642] syz-exec-27161 0.N.2 575093138us : 0: u000000006b9b3166 [ 618.246333] syz-exec-27161 0...2 575097094us : 0: u000000006b9b3166 [ 618.253052] syz-exec-27161 0...2 575097102us : 0: u000000006b9b3166 [ 618.259772] syz-exec-27161 0...2 575097107us : 0: u000000006b9b3166 [ 618.266464] syz-exec-27161 0...2 575097112us : 0: u000000006b9b3166 [ 618.273153] syz-exec-27161 0...2 575097117us : 0: u000000006b9b3166 [ 618.279845] syz-exec-27161 0...2 575097122us : 0: u000000006b9b3166 [ 618.286539] syz-exec-27161 0...2 575097185us : 0: u000000006b9b3166 [ 618.293238] syz-exec-27161 0...2 575097265us : 0: u000000006b9b3166 [ 618.299952] syz-exec-27161 0...2 575097382us : 0: u000000006b9b3166 [ 618.306647] syz-exec-27161 0...2 575097403us : 0: u000000006b9b3166 [ 618.313346] syz-exec-27161 0...2 575097408us : 0: u000000006b9b3166 [ 618.320073] syz-exec-27161 0...2 575097413us : 0: u000000006b9b3166 [ 618.326782] syz-exec-27161 0...2 575097418us : 0: u000000006b9b3166 [ 618.333479] syz-exec-27161 0...2 575097422us : 0: u000000006b9b3166 [ 618.340173] syz-exec-27161 0...2 575097427us : 0: u000000006b9b3166 [ 618.346867] syz-exec-27161 0...2 575097432us : 0: u000000006b9b3166 [ 618.353562] syz-exec-27161 0...2 575097437us : 0: u000000006b9b3166 [ 618.360262] syz-exec-27161 0...2 575097441us : 0: u000000006b9b3166 [ 618.366962] syz-exec-27161 0...2 575097446us : 0: u000000006b9b3166 [ 618.373658] syz-exec-27161 0...2 575097504us : 0: u000000006b9b3166 [ 618.380354] syz-exec-27161 0...2 575097545us : 0: u000000006b9b3166 [ 618.387058] syz-exec-27161 0...2 575097565us : 0: u000000006b9b3166 [ 618.393771] syz-exec-27161 0...2 575097916us : 0: u000000006b9b3166 [ 618.400469] syz-exec-27161 0.N.2 575098025us : 0: u000000006b9b3166 [ 618.407164] syz-exec-27161 0...2 575100982us : 0: u000000006b9b3166 [ 618.413859] syz-exec-27161 0...2 575100989us : 0: u000000006b9b3166 [ 618.420555] syz-exec-27161 0...2 575100994us : 0: u000000006b9b3166 [ 618.427298] syz-exec-27161 0...2 575100999us : 0: u000000006b9b3166 [ 618.433993] syz-exec-27161 0...2 575101004us : 0: u000000006b9b3166 [ 618.440709] syz-exec-27161 0...2 575101009us : 0: u000000006b9b3166 [ 618.447421] syz-exec-27161 0...2 575101014us : 0: u000000006b9b3166 [ 618.454142] syz-exec-27161 0...2 575101019us : 0: u000000006b9b3166 [ 618.460888] syz-exec-27161 0...2 575101081us : 0: u000000006b9b3166 [ 618.467579] syz-exec-27161 0...2 575101086us : 0: u000000006b9b3166 [ 618.474287] syz-exec-27161 0...2 575101091us : 0: u000000006b9b3166 [ 618.480985] syz-exec-27161 0...2 575101095us : 0: u000000006b9b3166 [ 618.487707] syz-exec-27161 0...2 575101100us : 0: u000000006b9b3166 [ 618.494424] syz-exec-27161 0...2 575101104us : 0: u000000006b9b3166 [ 618.501123] syz-exec-27161 0...2 575101109us : 0: u000000006b9b3166 [ 618.507827] syz-exec-27161 0...2 575101147us : 0: u000000006b9b3166 [ 618.514526] syz-exec-27161 0...2 575101207us : 0: u000000006b9b3166 [ 618.521222] syz-exec-27161 0...2 575101267us : 0: u000000006b9b3166 [ 618.527917] syz-exec-27161 0.N.2 575101437us : 0: u000000006b9b3166 [ 618.534614] syz-exec-27161 0...2 575102385us : 0: u000000006b9b3166 [ 618.541311] syz-exec-27161 0...2 575102392us : 0: u000000006b9b3166 [ 618.548007] syz-exec-27161 0...2 575102397us : 0: u000000006b9b3166 [ 618.554713] syz-exec-27161 0...2 575102448us : 0: u000000006b9b3166 [ 618.561440] syz-exec-27161 0...2 575102454us : 0: u000000006b9b3166 [ 618.568136] syz-exec-27161 0...2 575102459us : 0: u000000006b9b3166 [ 618.574879] syz-exec-27161 0...2 575102464us : 0: u000000006b9b3166 [ 618.581591] syz-exec-27161 0...2 575102503us : 0: u000000006b9b3166 [ 618.588301] syz-exec-27161 0...2 575102545us : 0: u000000006b9b3166 [ 618.595000] syz-exec-27161 0...2 575102685us : 0: u000000006b9b3166 [ 618.601718] syz-exec-27161 0...2 575102691us : 0: u000000006b9b3166 [ 618.608415] syz-exec-27161 0...2 575102695us : 0: u000000006b9b3166 [ 618.615112] syz-exec-27161 0...2 575102700us : 0: u000000006b9b3166 [ 618.621826] syz-exec-27161 0...2 575102705us : 0: u000000006b9b3166 [ 618.628537] syz-exec-27161 0...2 575102710us : 0: u000000006b9b3166 [ 618.635247] syz-exec-27161 0...2 575102715us : 0: u000000006b9b3166 [ 618.641935] syz-exec-27161 0...2 575102720us : 0: u000000006b9b3166 [ 618.648633] syz-exec-27161 0...2 575102795us : 0: u000000006b9b3166 [ 618.655326] syz-exec-27161 0...2 575102885us : 0: u000000006b9b3166 [ 618.662018] syz-exec-27161 0...2 575102965us : 0: u000000006b9b3166 [ 618.668718] syz-exec-27161 0.p.2 575103066us : 0: u000000006b9b3166 [ 618.675409] syz-exec-27161 0...2 575107798us : 0: u000000006b9b3166 [ 618.682134] syz-exec-27161 0...2 575107804us : 0: u000000006b9b3166 [ 618.688834] syz-exec-27161 0...2 575107810us : 0: u000000006b9b3166 [ 618.695526] syz-exec-27161 0...2 575107815us : 0: u000000006b9b3166 [ 618.702221] syz-exec-27161 0...2 575107860us : 0: u000000006b9b3166 [ 618.708911] syz-exec-27161 0.N.2 575109459us : 0: u000000006b9b3166 [ 618.715614] syz-exec-27161 0...2 575109695us : 0: u000000006b9b3166 [ 618.722306] syz-exec-27161 0...2 575109701us : 0: u000000006b9b3166 [ 618.728999] syz-exec-27161 0...2 575109706us : 0: u000000006b9b3166 [ 618.735710] syz-exec-27161 0...2 575109710us : 0: u000000006b9b3166 [ 618.742430] syz-exec-27161 0...2 575109715us : 0: u000000006b9b3166 [ 618.749155] syz-exec-27161 0...2 575109869us : 0: u000000006b9b3166 [ 618.755853] syz-exec-27161 0...2 575109940us : 0: u000000006b9b3166 [ 618.762552] syz-exec-27161 0...2 575110019us : 0: u000000006b9b3166 [ 618.769252] syz-exec-27161 0...2 575110091us : 0: u000000006b9b3166 [ 618.775950] syz-exec-27161 0...2 575110099us : 0: u000000006b9b3166 [ 618.782649] syz-exec-27161 0...2 575110105us : 0: u000000006b9b3166 [ 618.789346] syz-exec-27161 0...2 575110109us : 0: u000000006b9b3166 [ 618.796058] syz-exec-27161 0...2 575110150us : 0: u000000006b9b3166 [ 618.802783] syz-exec-27161 0...2 575110208us : 0: u000000006b9b3166 [ 618.809493] syz-exec-27161 0.N.2 575110336us : 0: u000000006b9b3166 [ 618.816204] syz-exec-27161 0...2 575113691us : 0: u000000006b9b3166 [ 618.822900] syz-exec-27161 0...2 575113769us : 0: u000000006b9b3166 [ 618.829600] syz-exec-27161 0...2 575113850us : 0: u000000006b9b3166 [ 618.836295] syz-exec-27161 0...2 575113930us : 0: u000000006b9b3166 [ 618.842996] syz-exec-27161 0...2 575114009us : 0: u000000006b9b3166 [ 618.849752] syz-exec-27161 0...2 575114081us : 0: u000000006b9b3166 [ 618.856472] syz-exec-27161 0...2 575114141us : 0: u000000006b9b3166 [ 618.863169] syz-exec-27161 0.N.2 575114252us : 0: u000000006b9b3166 [ 618.869867] syz-exec-27161 0...2 575123804us : 0: u000000006b9b3166 [ 618.876565] syz-exec-27161 0...2 575123923us : 0: u000000006b9b3166 [ 618.883265] syz-exec-27161 0...2 575124023us : 0: u000000006b9b3166 [ 618.889994] syz-exec-27161 0...2 575124134us : 0: u000000006b9b3166 [ 618.896697] syz-exec-27161 0...2 575124293us : 0: u000000006b9b3166 [ 618.903394] syz-exec-27161 0...2 575125144us : 0: u000000006b9b3166 [ 618.910095] syz-exec-27161 0...2 575125225us : 0: u000000006b9b3166 [ 618.916804] syz-exec-27161 0...2 575125424us : 0: u000000006b9b3166 [ 618.923532] syz-exec-27161 0...2 575125504us : 0: u000000006b9b3166 [ 618.930230] syz-exec-27161 0...2 575125565us : 0: u000000006b9b3166 [ 618.936945] syz-exec-27161 0...2 575125644us : 0: u000000006b9b3166 [ 618.943644] syz-exec-27161 0...2 575125704us : 0: u000000006b9b3166 [ 618.950353] syz-exec-27161 0...2 575125764us : 0: u000000006b9b3166 [ 618.957052] syz-exec-27161 0...2 575125862us : 0: u000000006b9b3166 [ 618.963789] syz-exec-27161 0...2 575125924us : 0: u000000006b9b3166 [ 618.970490] syz-exec-27161 0.N.2 575126034us : 0: u000000006b9b3166 [ 618.977183] syz-exec-27161 0...2 575126237us : 0: u000000006b9b3166 [ 618.983939] syz-exec-27161 0...2 575126243us : 0: u000000006b9b3166 [ 618.990638] syz-exec-27161 0...2 575126248us : 0: u000000006b9b3166 [ 618.997331] syz-exec-27161 0...2 575126253us : 0: u000000006b9b3166 [ 619.004032] syz-exec-27161 0...2 575126257us : 0: u000000006b9b3166 [ 619.010732] syz-exec-27161 0...2 575134147us : 0: u000000006b9b3166 [ 619.017438] syz-exec-27161 0...2 575134155us : 0: u000000006b9b3166 [ 619.024135] syz-exec-27161 0...2 575134160us : 0: u000000006b9b3166 [ 619.031057] syz-exec-27161 0...2 575134166us : 0: u000000006b9b3166 [ 619.037781] syz-exec-27161 0...2 575134171us : 0: u000000006b9b3166 [ 619.044478] syz-exec-27161 0...2 575134176us : 0: u000000006b9b3166 [ 619.051185] syz-exec-27161 0...2 575134290us : 0: u000000006b9b3166 [ 619.057899] syz-exec-27161 0...2 575134630us : 0: u000000006b9b3166 [ 619.064599] syz-exec-27161 0...2 575134672us : 0: u000000006b9b3166 [ 619.071301] syz-exec-27161 0...2 575134731us : 0: u000000006b9b3166 [ 619.078001] syz-exec-27161 0...2 575134772us : 0: u000000006b9b3166 [ 619.084704] syz-exec-27161 0...2 575134812us : 0: u000000006b9b3166 [ 619.091415] syz-exec-27161 0...2 575134869us : 0: u000000006b9b3166 [ 619.098139] syz-exec-27161 0.N.2 575134933us : 0: u000000006b9b3166 [ 619.104868] syz-exec-27161 0...2 575137944us : 0: u000000006b9b3166 [ 619.111564] syz-exec-27161 0...2 575138024us : 0: u000000006b9b3166 [ 619.118278] syz-exec-27161 0...2 575138125us : 0: u000000006b9b3166 [ 619.124976] syz-exec-27161 0...2 575138204us : 0: u000000006b9b3166 [ 619.131671] syz-exec-27161 0...2 575138264us : 0: u000000006b9b3166 [ 619.138367] syz-exec-27161 0...2 575138413us : 0: u000000006b9b3166 [ 619.145066] syz-exec-27161 0...2 575138419us : 0: u000000006b9b3166 [ 619.151772] syz-exec-27161 0...2 575138423us : 0: u000000006b9b3166 [ 619.158636] syz-exec-27161 0...2 575138428us : 0: u000000006b9b3166 [ 619.165335] syz-exec-27161 0...2 575138433us : 0: u000000006b9b3166 [ 619.172054] syz-exec-27161 0...2 575138437us : 0: u000000006b9b3166 [ 619.178754] syz-exec-27161 0...2 575138442us : 0: u000000006b9b3166 [ 619.185474] syz-exec-27161 0...2 575138446us : 0: u000000006b9b3166 [ 619.192173] syz-exec-27161 0...2 575138451us : 0: u000000006b9b3166 [ 619.198871] syz-exec-27161 0...2 575138455us : 0: u000000006b9b3166 [ 619.205571] syz-exec-27161 0...2 575138460us : 0: u000000006b9b3166 [ 619.212283] syz-exec-27161 0...2 575138464us : 0: u000000006b9b3166 [ 619.218980] syz-exec-27161 0...2 575138468us : 0: u000000006b9b3166