389367905b64dc"], &(0x7f0000000200)=0x9e) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xe805, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0x11, 0x4) 14:22:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x1a, 0x400205}, 0x14}}, 0x0) [ 565.465177] binder: undelivered TRANSACTION_ERROR: 29189 14:22:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x2, 0x18000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r4, 0x4, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000040)="2bf045c33d5928e43a2570714a6385445552f73ef0b7cc73bb1f78ef6cc4af23642c14ba2642b8dd26cb91812eb8d2cfa3508b1dd54962f487c69a7d2f4d01665175cb8137faca0811b7319e484a5edeb70c9cfa46ccbee61830959cf452a1795a09b3bd2ce6f6049c61", 0x6a, 0x0, 0x0, 0x3, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f00000001c0)="475d82568662a873a847a5a0714b1ad5aa378dbee43c018142cfe0742c0a4002c7090413665e21852e857094ddc6cc2f952bfdc17daace4f81ac777b770813790eafd4cd58e28bcdb08aa10f876fd891e9bb48ad6d8d5b81b9cd6eaebc6e521533346afc3a71cd1be513375d8f2865bbe8ee1298a8dbcacea4491ccc8ee060d83e90e609dbaa97ca25360e24540b6e289fe5497f1458235e93b70ee5c0af402b4a0c6be677fa136d9b534a5366e3c516f41ae52c5865bb179ec93836d000ef78efc02ab50ec77098134470f846568ff355a6164d5b72ebc8b4c620b5b45f5bcd2e52895110080ec92e239c31426ddd", 0xef, 0x2f, 0x0, 0x2, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000000340)="2da9d239ef69d52b1d4867fcb5db7300428d22068480f8d07989bdb4fcb90456fd91747df034741b79535f7aac1063471c4e329425ff016e1657b767d80fc532412c3190075fd11b8db78cd5b63f5f14d8adb6f5c5f96428da30491e292edd3ff887e019b1de758551b1ac4f4adaa3464fcd0d835a6dbc002a44970e60804cea3dce5f92a07d45763886369e07575031f8a5ac161228993fcfe21c3664f9103a77f5d72501109e2c1e2cc6aaaa998c10e5769f59eb1797f128a67d1ef9c37b18cec013cb0c", 0xc5, 0x9, 0x0, 0x3, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7fffffff, r2, &(0x7f0000000480)="0c374ac6a654ee2eb27126b0bbceb31522665e08dbbc04944d6a891de91307b7ed24c686692cc5f6cbf21c98ce20e1c7188f34bb9cf4a396df8175a8fddb028437b5a3aa015566258fb0b31464788876b6c0c41eefeac829d4aa9f407e04af1549d9e1f950791ae7441821d865e227a1f060ff7dfde5ff8524c78c9ffc87220d1631ca60f90e516c02c8e2e1bae289ebb0d3327dcf4a372315993c1985", 0x9d, 0x401, 0x0, 0x1, r3}]) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000100)="060063efff7f00009d", 0x9}]) [ 565.607372] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 565.630484] binder: send failed reply for transaction 375 to 26754:26763 [ 565.637763] binder: undelivered TRANSACTION_COMPLETE [ 565.647763] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 14:22:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x1a, 0x400205}, 0x14}}, 0x0) [ 565.663732] binder: BINDER_SET_CONTEXT_MGR already set 14:22:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x8000000000000000, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000580)="0f0566b9370b00000f3236260f35f7eb0fc76e0066b867d5dfcd0f23c00f21f8663502000d000f23f866b8250000000f23d80f21f86635800000300f23f82765f466b9360b00000f32", 0x49}], 0x366, 0x2, &(0x7f0000000600)=[@cr4={0x1, 0x40000}], 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e20, 0x8, @empty, 0x4}, {0xa, 0x4e22, 0x4, @mcast2, 0x8001}, 0x6, [0x4, 0xfffffffffffffffc, 0x10001, 0x6a1, 0x7, 0x80000000, 0x1, 0xffff]}, 0x5c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000400)={0x6, 0x5, 0x5}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000340)) r5 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000000280)=[{0x5, 0xfffffffffffffffe, 0xe50, 0xffffffff80000000, @time={0x77359400}, {0x6d25, 0x4}, {0xfff, 0x3}, @addr={0x4, 0x1}}, {0x7, 0x8, 0x2, 0x10001, @tick=0x5, {0x81, 0x7}, {0x7, 0x800}, @addr={0x7, 0xc6b}}, {0x35894ed, 0xa, 0x21, 0xea50, @tick=0xf8, {0x367c, 0x3}, {0x11f0, 0x4}, @raw32={[0x9, 0x0, 0x8]}}, {0x3, 0x40, 0x1, 0x0, @time={r6, r7+10000000}, {0x3, 0x7b8a}, {0x0, 0x99}, @connect={{0x1, 0x4}, {0x2, 0x7}}}], 0xc0) r8 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='ns/user\x00', 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, r8) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000180)="c4e2699711c4c10c566b1a66b814010f00d80fc71f0fc7280f01dfdbc4b9800000c00f3235000800000f30c4e1f914a2b40000000fc76db3", 0x38}], 0x1, 0x0, &(0x7f0000000340), 0x0) 14:22:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="e4dd40a0cc4b9532ec124aeb9a2429c03faf059732dcc544fd4a76729ae537bc67124c9e0c21d0bfa9a278ae394a195ba6c3f85dea3a3eed900e043af466889c8faeaa26f67a041a88758f4aa8b94f2d1d0ce7a681e2bcbb897d6b14a8105b9ff088315b7b4e5f722ad7b90572736a2a38935ec3f1b7a863158f2b63db41df98ff0db0fc9042a4d5fd2eb57c78032d5e29a37274a131a47f7114c83192be610b0b2a42c5bbb7c34aee5a206d0977daf0365e81cf970ccaed5d2bb0bd7e1844a36292b830b452bccaffd0093a9972ceb7a6b519b98bdbb8b7fae954eb7d46cae34c667a0fbafd99f06f6ff4d2f3c458", 0xef) ioctl$UI_DEV_CREATE(r1, 0x400c55cb) [ 565.706251] binder: 26754:26763 ioctl 40046207 0 returned -16 [ 565.758329] binder_alloc: 26754: binder_alloc_buf, no vma [ 565.817454] binder: 26754:26755 transaction failed 29189/-3, size 0-0 line 2973 14:22:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0) close(0xffffffffffffffff) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0x7fff, 0x101}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote}}}, 0x84) 14:22:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 14:22:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2040, 0x80) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x40, 0xe00) sendmmsg$alg(r0, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="efda444c5ee0aaaec736b381ae6e06c77b3d2ca72c7eedb9924ddce5ebc9a8e1a00684e644dfa3ca2347be1ba8eff0ec26b08493212a933b74240d1c9f0923bfdc502c4d22d613dc21868e821f58dfe3859b5fd6b862403fdcedaa72aa8357ffa7467768884a425a9668af8ab8e8008054ad536747fd7c982f99161d7532b144f83c44ecd24ff55a5743d72dd76890b687edfc51634c2c56b39af684afa85671dfd09072e9e2fe27869f7804b5c2", 0xae}, {&(0x7f0000000280)="e7f7e46a63a994a11f358b37581c4ff75e542e215eaab7b3aa58", 0x1a}, {&(0x7f0000000300)="bcc2b385758726d20b7d50f02e1989c56417dc3e84bb7d7ad1a0e7c00b8ea162f3f43b6ae683dbda76af036b216033d529257c8054374efa42aa7ebe30a05f3e7d1771e8382e869dcd3bbdcb70a7e8370a9576256422223099", 0x59}], 0x3, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0x9f, "3af7c5ed88ac05c8009b2d488e5c662c048fe075580b00e1809cbd132e2a80900a345c533b131e04cb39296b4dea6ac4fff1def13698ef195c383e6e926a2375d7e180a319bb19992dc9b46f5f9a414819f30caa96720e1f0b476af34f061f954f23e8a3790bdbf99c3c5386080055451b0cf249401eb1a320172b27bdd58ff77d5ffd26f88a1c4ea29af811db8af54a80a6f73694f7b1e10453190395f128"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xbb, "5fae904629d11f77896ff3ce66c92e9de68a4e58f6e7cfa6180ed31742baec3c5f2580a2b7d8f4e739dad9f585d4f25e436922c57d3b6699186eea634e35718479c6d376c7e2311afb1a7058c021ae5e73e5c593d51c1b360879645848c1d6050f97229fd1b854c75c143e87c2377aba90dc0edcfad3ea6ec3969f853583e35ce23f7b434fa201b82337978772feaf79005f1ecf99d8cac76c1c1ddec56e0716ca8b4b7755ed1db98186270000f83df8edfb2e7a433139061abc2f"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x912}], 0x1d0, 0x800}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)="da148a1fae24ff928ea816d613e360f319d12f7f124e7c06439d60136790fd3161c16542dd4a01faa489fc3eae5e9d82b219b3665b01d51aed39214d15615313a286bd1d9161d5ff776c4432b2f585508080d3079e3e4085e89f460125b8", 0x5e}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000006c0)="df98816d5a7f1d0afcda14c4c2a6a321999c0cca93181db9094dd86ec59b4779b3315dcb3758203caa2e09cbe4fb815c573bc0bf950165a1286088a4585b49c48292a2cc26057513e6beee89ad6f9db390e71d5e3b4f65efd2a4e571a67bb7d0b05a7b5ed3f04f9f0adeb2c78b4ab14f8bee833758bb888caa15fdf6578df84ca4100a6d6b1eaf71c3e1ef4f8db017c6d921e751cd9de3a1533cf63337f77a893166ad3b3544714ae831aa3120b8545cde96277c1581d952bb9b2f541b1b8edd5f07eab80bb0bfa8ae4a903058292c61a29316d109cd8089", 0xd8}, {&(0x7f00000007c0)="1ab7302d4aac02a7f9bb26e9941d1175cff9500a9473858fc0030b28bcd47aa958e76214618bb5e216c88a57b60a2d3e15c3c519f25d7db131b106afbcd8c0c80316f021cae1cefb3c9e8ef2b5dfc6de4b6b448abcee8a90ad4b3185ccb26b23497174491a0c65835eaefc8777d3d4df61ee29f85a53d1d8156457eb3deb793a411761957fa940b3560cbbc1a5f7c8a57a6b54bc7610676ab4f7eaed206704e5", 0xa0}], 0x4, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf1, "4e670e59e0d428388fa225829b7104cd64b7197af8a711abe80178335573640c50ba25abad186e4c5654fe09cbac8fb836b78ec9bf544845eec45ce469e81b0b35544ff4552f8f2a8c915359f2a8bf937ff854f8f46d4da7be5a9ebb1d22e675715dec3abb7cf0bc945da395fa6a8d38a4a2ca261240b688009127498c742fcd567c04bbcab842909092245fae42a0d8b4fc21fbbdd8989d6c90cc5924c1083497e974131e9e21c5505703a2f4c5c36715c04414d34abc8c1d0cfa3d410206ef33835962ae7fba7e1a65f9a8e6964b77bcc702d7f3d43e32958262e717003dfce8bb832f1cb60a476f2974cbf2cf366a16"}], 0x138, 0x400c000}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)="71cfca9abc4f34118f6490024120868d8919a54d972b90eb82a04f3d04b60b4089fbb13d016ba96115054cfb4df14bd73be40b88078bd6062976413da6f409e77d741a02e7061ab8438ba001775007", 0x4f}, {&(0x7f00000026c0)="73992ea1f4045f9cfb483b02163ae2f84c4397be2d19dcbe1a45a1fbf2f713561e6cebe61da069b7260105a88bc7a49caef1f8ffa8bd3abccc09dae3e3e5bcc84ae9e55a64c3b4714d404f3ad2aa3e73f901e15dc48fd3a9a26aed199ed3c4dbbf65c4342015c698dceb39ec21b36995bdb72055b89a620bbf9745c8ceb7ea5bee5148e4e51890968209721b04d525ac0f3cd5ba6055a405f039443f3ba7e00354ec098664fd18f2a9d562de5491d01ba2afa16fbdfa381b7ed391e5d90372ba403fe3d65c9995ed128c89b8f35b6deb08cf45f27f62c39804a62842a1857acb1213d38114ea156c1108bdf3e9137cb6505f447e9b3d70dd6d2c2ac75b0dcd1cae0edfbdd5beb34367205fa4517c46582edba88781c82d972b9d6dbd9d883eb05d045d11b7d52a87a61cbdd551655c1fa6d8929794350fb50e7b000e7337565cd2667fc2bffc0580ab9066bf4dcb01c8fe9f38d9af9353defdde93a82d7b6ad2f2f155d95132dc7a68fc09a837c1ba3a4c1c52ffef9d06832c3a8fcfe68c41a2395f814768f851eb0b51be8f5542e7b8b26b5603ae9d5a2126152dd2c94676fd600b5ed17738ee427281069e64fcaf159b3e611ca4031fdd4300d904d31955383163f4b64307b6c5398acecf26db0961eec4984585dc5413087786319f8aa6e4a7cfd11ce554a1f62d87090f59a1c277b3ce96029ecaf45cdc3a7d88e5b94ae7cd032eb427096f13e98653c116ccdc98b66a5d13cf64224345a840e631db96eba5c606397203687cd5305379fd2783f0ed5f6f0673ccdb7783f40e09ac8d4a67a8ae64689dbdab50f2b46f09f6f1ac715fba6d9a7b0288a68122e06db8b4ab74612c402cdd0f2f4e2738e1aae31073b6168ab083f22df0f7c009f8fba04a17d8a637026fa059542d8432e31a968b28f093325f2a04a2b51df4e635a274110b31a197c5bac7620ea7617550ff7c07b96fff416822604ae190ac5f9aa57228d76e7b607282326b9bfbc97cecfab73cae12f051b8ac51a512765c7f539c861137f8b336a87d5e1672d71d7a938a07c436b5207d8932718a5a922f72c744b73aa51764bd54fb00b6bd9e313e19d119b6d4ed976f73ebae5f25ede77b6b2cc489871dd79941baad655135d0ce6033419ec69ebbeab8869c369b6d23fe72f5fe78f29603c1e084f08839ed7f40e7f71d29449ac7ec2dffa50e9b197d1d7bca16c40d5a803f7842582e45efc7e1c732eaff0dd94f0ab4c1f50ba75bec95f67e3321c0d0bb739c67581db597137dde4a60fc6abeb139cf97a4af0f62a884415752ede7fb5613f41e260a2260ad5ba5826d75da0ad1da70744d1a410c86f51e7e7ae6daac61551bba543cc5498db608d2662d62238acd5f621f38eec836584cd287f9dfe871719820a5a2901ec71b0fa8df6dc9e963093a571bb83799ec4a4c5cd17dc297c17e4e016a60cccc1336112b40664f4055c5d9f9fe1f94009e0b43eceb6eee05518b26b6f265245e78b54a9208ceeb75e16fdfc79602795aad5600ffbee8836e6e8d079dda3e2cc9f52c0dcc97c1efa6659ac37e4fe5e41528fdc8ccb06711129ef5a054091521859fd0de9297f25cc3c5de5248a77b718b9807c7f80d81eab29f564426c55d887c8b3f0ef3a6b611ae302b7a0f343495388b21868bd7ab64136d15a16c554f000217178d3848fe5f47b5c4ad6f20afb1a3838ec85e3618ea3c3712074e837d686844679f018eee9df03611d80ee84533855386b1a81c7e05095b8d3cffbb746672fa1973e35dafe9731ad19c9cc35ac08505fdbd83baeb9f6b8028c401ba2a60990f3c49c9648bedc1d929a1ae4c4cf0792caedb835417d5caa1c8480c659a1a5d7d8a06fb299a80de560937775c05db81decb52d1a33fc69eab8aed3ddd08d996d440e107c4f49ea4ebf8bf792734d05c3cbc71c5063cd95363b996c3350c83165341cee2838555a88112e04fb32f0308010bfca31b1e10335c069800adf9b14259f83a0997d420a59d57dde05c61cbab7afe350d6b984d156f10af6b986d2115797319a4b41c462bff9a15477bf0697d1f93e1a3fc5559df862d06069d669f78844ac0b35d43f23a46ebd4fc5a2bd855fd3be6d2234ebf5964d279312b9ddc470332d012a5873cb7422b24e0afcad70ef73c70c6d045aa40870fefc2a7e5bb6de0ab7f2bf994f67145f19d111bfb36e78e2dbac4b03e374e16f4e4f6eb11967e2f358041b0b73b6098002a6844536251b6c95d8df40982f250ef2adc1aed24a39ded74323f6c2829a8e5e108f615a2c5e0219db384878b5f233af929d9f401e4924de8b12c567d2e193cb394e2c90c2222962eb950718aa633a8c8d3b4d88e7cbe4b9e04720693f1a33ccd2e0226535e9959f8f8f11b428e33a5f5b71e892ac0d888cacccf5b3eb2b0338ffe507d8249124240c90bc52ee420a0ee1f5c9c76094dfe25789659181ebdd975ae820ff1377f4c43ce3448f691908a12995ae2a763940c2e8c8934fcef84dee2ad65c0d668698abda8bd0a9aaacce4977930afccee258474b8c5308d6004357f0f7258893efca909b644e4d02d834c3f218f84647b4e2d2f48b34e2f6e60ef02cc3c1f97e904e0de9dbfb6c097edd400e6dcabc65d6a2aacba3dde7d9dc3ec8cee37da7229a05a712e1dded8a9526ce69c3356aeb1022aea013e72486588c5e94575ca6d2e926ed13cc901211ef66248182efd2689ac28915854d150e1b06b1f25d98f5a6c47101c414339a53e7c9079ab37dcbc289f7a61bded90bf2e87f21e1decefe5677d494dd108a8afa16c46f6c50ad494d68be024c34e616db0f601efa24e60a577144aa14197a68d752556da23a733514b2fba56dba355ee94e96e6a6efa258e2162c9199a24d64a6c0033497b1a87d54fdb822e71c403359a44e22b136a9a2dec820728710e1e0f148d0b3b1d7611d00e89bd5c66fa361e17185749994c67d962b63500529772a79340d9212e6a18669a1bd4f28324fc6d03c212b5b0b1b3b9bd99dbf07d00e71e04acb3af33d3f24853d420866bc314501d9aef7e0297693d3ddebdee9b4075c15f596dbbd4570b489c6313af82f30461b91f21ca8d6b914edd530ab58661d6c4a0d1db483912fd33f75abc425bae6c634d245d996fc1d9a19d493c2de64479efe268801bf811eed478b465fb792886d7c8de1fdad98e17f6b66cb99a7434d908a158bfd5a37bdcdc63c2b24e14482a9830b1f384dd49fa92eaa528b348f7e6e32139de2589f825e667aa2c96e9f56389fa9f90329af89cd1e8911b4b3a37f3e8563a330188afe0a37aeaa880becb263dcded03b9be2c6748505bcd8c91aff0c7afa12bf0a37cf3cb6e6ee5c1898794622c72238687ef4081cf24d97cb08ebfa73ae75a8ce65f7ea2df420e94b5ad8d4723392bc2218b5d3044fcded6ca4f9441d369da100d86fce48c6a0e06a1e970e3214f5c39f8f4eef54c7c41b06f39b49c4f8e1f07a63832eeb907ffc5f364de73878d5dc97f148527d452cbeb603a8615b5ba0afaccc6708ba4c7343e6b588cde78a751c690c27e1c66e686a1c47b49a4cd2a273709d6b5a1a3defe11ee4685bbb80c78e4ae33d5482473dff4924dee6914c12b9ebcb90622326506e5a0d8b6156a1358fc1279dd8c63b1f8fe9e91a505f54095553d6f8c725cc8b6df9a9ba5a3de582ad64fe85557b8c58ce91765589c6223c82661f27eb2780ab1a92fe69d85b11d0c99ebc90a152d38887fe660d100625fbc9ea00ec5905c51534b41b4c359eb1c136df7808d6a24e66a80a2d4bca1d52e754838325c6bba015944d0016eab5a2bb3745d745f5e9bc16b609d14900424fb708ba3105b8810216fc5d56ca7b75e6143cfb85af2ef8795f87cc5db82e21f3a3c909d715cd8fbf4d836ae748aa3b0a5380c913603ad6961b5cf7fe119ec38e563261d9c0b1b7f79960995c8dc03c3eff5b5a29a2592f5ae948573c50a268d9455b2f7ac67cca2e0b63ba2feb03b8d725b9b60965ba36c6f93ec291ac7987deb2e510e004d5541c8ac712625686ee3151b6fe3546643df16632b1474a447fb9e2dce512bc5b81a6b13a03242fe894e55a8a5705b856957a0befaa016cabebf8f43969110af71bf5ace717549eacb9ff39257963ddfad22789d8d82349c1a941f1e9b1dd7230854cc66294bc911898fd9e83375a07aacc7888eebf4c1c91e4c851c56f0503fcecc8082f4e73276bc764781f87ae4922aade99e20539413e19fb9ee292f36fcd1319629ae2a5323a51c4bfd5e1cfba2a0d5d9cba38642b55e0d8bb645938e1a9018786757b8efc43b3b941e5b1b0c915897c12a064249652b91e3f69bedd488df9af47388e9523892b3ea5ed4c67cd33b1e6ecb1676291466f5986c2861d021ff6aa0adfe45b6f83f40cfb1bf138c1db43bc76a70ec6fc936990b4c244699f60a22de28527199305c547482db022774e92cf95fa5ed20ab124b7af4645e767eb7ce5e865ed2572b35d1188c560f6f9c1322b8586d031b4fe00c3548cfc623b03c76d957382928d77b72bff56d84722fdbcde0b67e8ea46574ac57ff4925f453f2b77932bed191467a3b591f071ffb666d0655006954b832d91c33e522064075ee7c0034dfd417eefffeb226e5a9bca021b79b16cb82e6f5f8d49194369078675da22e1e9ca5f4ed1089c0ff13baf2ecb65183d8056c49f3e937ac20c26c7694a2790787ff72e901c38dd5b3aff5e0c41074927139636c3458cdf07bfc452254cf30f7a57a8b00ccc50b2da4fe5e657e8b61206f2ce05fa33025a3f6cf5c1ea89d2ed1d0ff39c9738d258ec0efbe6b2bebb8b6639b177bbfbdf1a9267a8769f417cae33402a49e5c3985a71554fbb919eb26624aaf789af0a92000699a565dc4dddccf297e926c8932f527a42c242d669052da046cadcd6fd3199f8d4799492b4946e080e8c08d2eb3c955fd6fa4ab5dab937573d2d49c4f060a7fefb118cf6d26c7d4c676b33f84d1cdae8b7c60e6ee98671a8eb7147031831f1c4e44bdcdc4f5ee1ec56294947084d1bcc509d60b252ee53119125d6e123a95a517f063fac1b936d478c037e3066a30b8a49aa7fea1428c1827da9386cba17c7cfee3e6f2b1f6a79d409b8c861251a4cb4e97f7e8c329a9fb9b2bbc415fda50c173378c79f59703c978281ca59adfc543ff11dbed76405e58d712499ef404711c2aaec4474ac6e02b3e4ded500e72a84f7decf65ba5138595f9aa2bb90451d1f1cf77251db8848bd461906671da3079d2c07c27741200a5463f16ee5ba2223e414beac51a37886f7a2c7505dd2ac3479b7b906e0e335842a5866e096ca07a2ebeba5be623622c0919d4452900d1211e96d5ff20b4e38fde1f41ca91021f9006157e51a011226471bf52b7e0eceba342158ad3b7eca892d5a49d5406fa081ddcd105eafd29fedda717efeba4a4e84e94b5ad37ebca67c70e363ecd796abd239e16dbabdb1ded1d42c1f8fcf18186c954a362a8a087136991bd69c382817ee6e23801de105e456558c7974020aa51e89b50d42d2a792f471bdccee472108ed18ce5066b877090f047e5574afc4a6282da25cc1f8e8858be585264a2b922a9db62234cc30e4b2ad50a2a0f84abf87f107f75f02ddca4a81aa5fb0141ef0aa1ffd46fa21c9bcf1140d2754679e061e9c8b0fe310a56f106ef3fd31644f1c49b1b6d6e1602f96325fd3b77a82b0d65a525214312b515000f898e54c94ddf19a9f22287312c5de592bf5f089dd3361a3514b7aa42a27f06a2753f752b00844fbf0443", 0x1000}, {&(0x7f0000000a80)="1ce235ef72568d5ee135aed272d941aa955bd491521aeac387f3aaf3ce8366c50758f0", 0x23}, {&(0x7f0000000ac0)="acf10cfd3b8ad229933c92c9b55438d1790c6c2305a5e6a2e71f75657c0287561ffe57f30650a2a742d8ea368d2a9772daf5af33e5e78eb2403827eb32651c939d06c8787bbf8a3080ad6a28b21c096fc0ebd1c7ebdffed809b3123f7eff5c99eef128cb734da6b1ba43abd275d3d1a656ccc50bd2cfd1f3ad7da6d23bace31d241de68ae96743d3817d0a120f7099aa888f17d4665be5daacf552a1b8e71b7e2004950037436bea5a0d5d9e76ab933522d3e412b77617f0ba38d2ce849b5defe42fbeba4a22c4e20358a06fe638069e1f8c2fd93c", 0xd5}, {&(0x7f0000000bc0)="9508bd", 0x3}, {&(0x7f0000000c00)="ef6ceb30ddaf1307a0be60cb31503b7895", 0x11}, {&(0x7f0000000c40)="ca81afdc902c3527cef888deab276014c45915c88aa383877aeae8cf4edd9f3df32b8d42a0507b334db42e26148b8859f858c647bb70759f0b1ef752a625aa26f86010e322a8924002e9133542865e7f9a9782799c3cea2c028eb3419c5a601671859c19d566dc5bca5746f5de016bb26d579140826081a93b26a810bcc55c7173a7b25686a88fcba2f038ce9b69e6767717f46e20a6", 0x96}], 0x7, &(0x7f0000000d80)=[@iv={0x70, 0x117, 0x2, 0x56, "89b202962e755c754c493f09ee9a025756f1f585da7a574080b2fa3a7eaa6010398020d9263edb9a66b8ae6958887480d5a2b9cecb632236ec081d97dc7be829975e31d33960b91e9266fe9f28b1afb9ad4c18ffed19"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xe0, 0x117, 0x2, 0xcb, "8076b6c05a2f574d76ef3d24d3fc70a7d020a3e24a27dd8116327474402d6d4b374fbbcfe06d0da947d7ebb1d658294045ede2f2fa39ef2a6d9c3f8b0da8b85d091718949282410d6aa934838c5ba63283bd6352289bd77a664f2c4ae573448b50fd0301f185f3bd4e17494b6d13ac0f6e4369a36e2580ac7ec6570ed8d572fd77e26a80f70eb8283067dcc3b3647af755fdc8807a01301bcf40765f95aa5dfe822161de48c4293b37e926b9ca0fa934e6a6ccf7aa32a0b70bc616dcc64cc659551989650c7afda9bcaa28"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x198}], 0x3, 0x4008001) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/104) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000002c0), 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000380)={@empty, @dev, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000001600)=@can={0x1d, r2}, 0xfffffffffffffe7f, &(0x7f0000001680)=[{&(0x7f0000000140)="f4001100002b2c25e994efd18498d6623abaa68754a3ffffff8002000000000000000000000000003a00000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5bb59d", 0x53}], 0x1}, 0x0) 14:22:33 executing program 1: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) socketpair(0x11, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x80) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) getpeername(r1, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) prctl$setptracer(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = semget(0x2, 0x0, 0x2) semctl$GETVAL(r4, 0x4, 0xc, &(0x7f00000001c0)=""/194) r5 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r2, r5, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) 14:22:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c00000000000000) 14:22:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000005c0)={0x1, 0x2}) socketpair(0xa, 0x176914e0d705eeb9, 0x1e, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e21, 0xfffffffffffffffc, @dev={0xfe, 0x80, [], 0x19}, 0x400}, {0xa, 0x4e21, 0x9, @loopback}, 0xbcfe, [0x2, 0x80000001, 0x8348, 0x4, 0x1, 0xf3, 0x4, 0x8]}, 0x5c) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) shmat(0x0, &(0x7f0000492000/0x4000)=nil, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) write$vnet(r6, &(0x7f00000003c0)={0x1, {&(0x7f0000000280)=""/215, 0xd7, &(0x7f0000000380)=""/39, 0x1, 0x4}}, 0x68) r8 = getegid() fchownat(r6, &(0x7f0000000100)='./file0\x00', r7, r8, 0x1900) ioctl$RTC_WIE_OFF(0xffffffffffffff9c, 0x7010) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000540)=0x6, 0x4) ioctl$void(0xffffffffffffffff, 0xc0045872) openat$cgroup_ro(r6, &(0x7f0000000480)='pids.events\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f02df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) [ 565.956752] audit: type=1800 audit(1538749353.140:213): pid=26795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16598 res=0 [ 565.994120] binder_thread_release: 7 callbacks suppressed [ 565.994132] binder: release 26796:26798 transaction 378 in, still active 14:22:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 14:22:33 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = eventfd2(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f0000000400), 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf7, 0x483467e4a2f3cbf3) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x10001, 0x10001, 0x9, 0x28af}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) [ 566.007170] binder: release 26796:26802 transaction 378 out, still active [ 566.022964] audit: type=1800 audit(1538749353.160:214): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16602 res=0 [ 566.048998] binder: undelivered TRANSACTION_COMPLETE 14:22:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) [ 566.132425] binder: send failed reply for transaction 378, target dead [ 566.155165] audit: type=1804 audit(1538749353.170:215): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir508627549/syzkaller.KPJdfc/330/file0" dev="sda1" ino=16602 res=1 [ 566.207455] binder: BINDER_SET_CONTEXT_MGR already set 14:22:33 executing program 0: socket$pppoe(0x18, 0x1, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f00000002c0)="6e65742f7463703600ab3d3e4f7d92560e9d6b9621ea93f23d48041dbffe7acf33c1d3d8a1645609ad843ec6b721d213d963ab17dadb44815793e5344b652ec7473b4261b3396a2743595f59734e558d1f14a180acefd34e062cd5270002d8bb06fcd29099a5338f847873a9c431c6b9e54d73e120358c9b", 0x78, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xffffffffffffff6c, 0x30, 0x5, 0x1ff}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="3200000082adc6b6ea56382ea79b18705ab28092de4bfec0a5902313c91655be99dac85063313eb6204ea26a9efe5e8a108c2de963e0"], &(0x7f0000000340)=0x3a) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x100}, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x2ee1c) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) accept4$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={@mcast1, @ipv4={[], [], @remote}, @remote, 0x8, 0xbde5, 0xffff, 0x500, 0x1, 0x40000000, r4}) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x2000000000000000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x40000000, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632273656c6602070000002f0a597963726561746500", 0x2, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000540)="b3a157b3241dee8e5010ad1b6923cabd8b8faeceebbaeefbed9ca6502071548ced2800c6", 0x24}], 0x1) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x3f}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4) [ 566.239358] binder: 26796:26802 ioctl 40046207 0 returned -16 [ 566.278695] binder_alloc: 26796: binder_alloc_buf, no vma 14:22:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4, 0x0, [@generic]}]}, 0x18}}, 0x0) [ 566.306998] audit: type=1800 audit(1538749353.170:216): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16602 res=0 [ 566.335454] binder: 26796:26814 transaction failed 29189/-3, size 0-0 line 2973 [ 566.440784] audit: type=1804 audit(1538749353.260:217): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir772829265/syzkaller.cPyDEO/686/bus" dev="sda1" ino=16598 res=1 14:22:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x74000000) [ 566.645187] binder: release 26829:26830 transaction 381 in, still active [ 566.652236] binder: release 26829:26831 transaction 381 out, still active [ 566.659387] binder: send failed reply for transaction 381, target dead [ 566.683875] binder: BINDER_SET_CONTEXT_MGR already set [ 566.690500] binder: 26829:26831 ioctl 40046207 0 returned -16 [ 566.707066] binder_alloc: 26829: binder_alloc_buf, no vma [ 566.723101] binder: 26829:26830 transaction failed 29189/-3, size 0-0 line 2973 [ 566.738298] audit: type=1804 audit(1538749353.920:218): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir772829265/syzkaller.cPyDEO/686/bus" dev="sda1" ino=16598 res=1 [ 566.776530] audit: type=1804 audit(1538749353.920:219): pid=26812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir772829265/syzkaller.cPyDEO/686/bus" dev="sda1" ino=16598 res=1 [ 566.816811] audit: type=1804 audit(1538749353.950:220): pid=26795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir772829265/syzkaller.cPyDEO/686/bus" dev="sda1" ino=16598 res=1 [ 566.842301] audit: type=1804 audit(1538749353.960:221): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir772829265/syzkaller.cPyDEO/686/bus" dev="sda1" ino=16598 res=1 14:22:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x2080}, {r1, 0x140}, {r0, 0x4}, {r1, 0x200}, {r0, 0x88}, {r1, 0x44}, {r1, 0x42}, {r0, 0x4}], 0x8, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={0x40}, 0x8) syncfs(r1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80080, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000280)={0x0, 0x20, 0x0, 0x40, &(0x7f0000ffe000/0x1000)=nil, 0x5}) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) 14:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4, 0x0, [@generic]}]}, 0x18}}, 0x0) 14:22:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000) 14:22:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet6_buf(r0, 0x29, 0xdd, &(0x7f0000000000)=""/23, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x22, &(0x7f00000031c0)={0x0, 0x8, "f81b7aeb1854909e"}, &(0x7f0000000180)=0x10) 14:22:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x81}, 0xc) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x131, @loopback, 0x6}, {0xa, 0x4e21, 0x8, @empty, 0x6}, 0x4, [0x9, 0x61f2fa2, 0x4ed878f8, 0x1, 0x3, 0x46f, 0x400, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x8, 0x4, 0x9}, 0xc) 14:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x4, 0x0, [@generic]}]}, 0x18}}, 0x0) 14:22:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 14:22:34 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x3) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES64]], 0x389) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 14:22:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000001000000019c1b00"], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) [ 567.058004] binder: release 26844:26845 transaction 384 in, still active [ 567.065167] binder: release 26844:26859 transaction 384 out, still active [ 567.074987] binder_release_work: 1 callbacks suppressed [ 567.074993] binder: undelivered TRANSACTION_COMPLETE [ 567.096846] binder: send failed reply for transaction 384, target dead 14:22:34 executing program 3: syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=ANY=[]) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xeb, 0xc7, &(0x7f00000001c0)="afb1c90119d9877069bcbcc0fec778e4c6e3bdbaa2636eca4e0d0a83c2aff38a212024b5268eb0400e3f880d15f3818b7bdb6ec20b2cb6873f99a1efafbebe9cf02354a7c00a4fb007309cbab8e7580a8c15060acf551203bc14755d1afd9008836315655e559ef5f92d2cd79bbf0b8de1d7776ad8914a3c2a4fabc30a4d8228c2027896950d31c94a1edd06dcb69b33a033230e66820699e4f057f0122bdbec9e4a739cf6af0da3e797cd0c549a4a727b9a856eb17d4952ab8db9991345321cd2a3b38f783a59bbb5a92b94f439c159fc0aedc3e4426dde3084b8c822ef193a1ca66d25d88365e0db6d08", &(0x7f00000002c0)=""/199, 0x1f}, 0x28) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000400)={0x4, {{0x2, 0x4e22, @local}}}, 0x88) mkdir(&(0x7f0000001700)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r1) 14:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic='k']}]}, 0x1c}}, 0x0) [ 567.116399] binder: BINDER_SET_CONTEXT_MGR already set 14:22:34 executing program 0: setrlimit(0x4000000000000000, &(0x7f0000000000)={0x4, 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 567.162160] binder: 26844:26859 ioctl 40046207 0 returned -16 [ 567.197108] binder_alloc: 26844: binder_alloc_buf, no vma 14:22:34 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_destroy(r2) r3 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x80400) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000280)={0x1f, 0x2, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x6012, r4, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0x100000001}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x5}, &(0x7f0000000380)=0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x40, 0x4) pipe2(&(0x7f0000000100), 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000180)=0x10) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000180)) 14:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic='k']}]}, 0x1c}}, 0x0) [ 567.210187] erofs: read_super, device -> /dev/loop3 [ 567.218620] binder: 26844:26867 transaction failed 29189/-3, size 0-0 line 2973 [ 567.231600] erofs: options -> [ 567.241373] erofs: cannot find valid erofs superblock 14:22:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c00) 14:22:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x2, 0x5) dup3(r2, r0, 0x0) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000040)=0x1c) 14:22:34 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x42, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000340)=""/82, &(0x7f00000002c0)=0x2a9) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x1, 0x1, 0x6e, 0x2fbb1242, 0x0, 0x6f9, 0x0, 0x0, 0x4, 0x5, 0x5, 0xa60, 0x1f, 0x0, 0x4, 0xd06, 0x7, 0x6, 0x0, 0x3, 0x7, 0x80, 0x2000000000000000, 0xc63, 0x7fffffff, 0x76, 0xfffffffffffffff5, 0x80000001, 0x200, 0x1, 0x3, 0x3b, 0x80000001, 0x0, 0x9d3, 0x9, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x58, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4}, r0, 0x10, r0, 0x4) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffff4d2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1c00, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0x3}, 0x8) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000300)) 14:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic='k']}]}, 0x1c}}, 0x0) [ 567.370193] x86/PAT: syz-executor5:26905 map pfn RAM range req write-combining for [mem 0x1c34e0000-0x1c34e3fff], got write-back [ 567.392239] erofs: read_super, device -> /dev/loop3 [ 567.397287] erofs: options -> [ 567.432715] erofs: cannot find valid erofs superblock [ 567.452624] x86/PAT: syz-executor5:26893 map pfn RAM range req write-combining for [mem 0x12a45b000-0x12a45bfff], got write-back [ 567.466859] binder: release 26903:26910 transaction 387 in, still active [ 567.473800] binder: release 26903:26914 transaction 387 out, still active 14:22:34 executing program 2 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 567.480767] binder: undelivered TRANSACTION_COMPLETE [ 567.521096] binder: send failed reply for transaction 387, target dead [ 567.536557] binder: BINDER_SET_CONTEXT_MGR already set [ 567.555184] x86/PAT: syz-executor5:26905 map pfn RAM range req write-combining for [mem 0x1c34e0000-0x1c34e3fff], got write-back 14:22:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r0, r2) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000000)="88d2131d3033a9df8842c6beb5dba366923eb2fea23be89a02f06e7b8bc05dd1c362f88985b59af7dd8ddf68d9e7dd92b1b9d6e04dc14300955c58c08da6d2d07ceb8ccd2370b403d99e5e6346f81b7d50b8a45ade7cb58b9f84683db87cd59fc0fc13d494c68121ddb850d75e190673f0f04d42aef75dec1b099ebd1b55e846369242585b53764346bafe5ee8aceedbac56eece6642dd6d0ea34d4496502db5799236a4d5bc58d836136154c1a03fe03ddc4e735b") dup3(r2, r1, 0x0) [ 567.567077] binder: 26903:26919 ioctl 40046207 0 returned -16 [ 567.578983] binder_alloc: 26903: binder_alloc_buf, no vma [ 567.589764] binder: 26903:26910 transaction failed 29189/-3, size 0-0 line 2973 [ 567.613642] FAULT_INJECTION: forcing a failure. [ 567.613642] name failslab, interval 1, probability 0, space 0, times 0 [ 567.641137] CPU: 1 PID: 26924 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 [ 567.649681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.659052] Call Trace: [ 567.661666] dump_stack+0x1d3/0x2c4 [ 567.665321] ? dump_stack_print_info.cold.2+0x52/0x52 [ 567.670534] ? mark_held_locks+0x130/0x130 [ 567.674797] should_fail.cold.4+0xa/0x17 [ 567.678870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.684003] ? lock_downgrade+0x900/0x900 [ 567.688174] ? trace_hardirqs_on+0xbd/0x310 [ 567.692514] ? _raw_spin_unlock_bh+0x30/0x40 [ 567.696945] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 567.701902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.707463] ? check_preemption_disabled+0x48/0x200 [ 567.712496] ? __netlink_insert+0xd2c/0x13b0 [ 567.716914] ? __netlink_insert+0xd2c/0x13b0 [ 567.721333] ? __local_bh_enable_ip+0x160/0x260 [ 567.726024] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 567.731626] ? __netlink_insert+0xddc/0x13b0 [ 567.736055] ? __netlink_lookup+0x5b6/0xa90 [ 567.740396] ? fs_reclaim_acquire+0x20/0x20 [ 567.744732] ? lock_downgrade+0x900/0x900 [ 567.748888] ? __netlink_dump_start+0x6f0/0x6f0 [ 567.753573] ? check_same_owner+0x330/0x330 [ 567.757919] __should_failslab+0x124/0x180 [ 567.762166] should_failslab+0x9/0x14 [ 567.765980] kmem_cache_alloc_node+0x26e/0x730 [ 567.770600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.776163] ? check_preemption_disabled+0x48/0x200 [ 567.781214] __alloc_skb+0x114/0x770 [ 567.784965] ? skb_scrub_packet+0x490/0x490 [ 567.789294] ? __release_sock+0x3a0/0x3a0 [ 567.793459] ? __local_bh_enable_ip+0x160/0x260 [ 567.798145] ? netlink_insert+0xfe/0x240 [ 567.802222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.807783] ? netlink_autobind.isra.34+0x232/0x310 [ 567.812824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.818398] netlink_sendmsg+0xb29/0xfc0 [ 567.822500] ? netlink_unicast+0x760/0x760 [ 567.826772] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 567.831721] ? apparmor_socket_sendmsg+0x29/0x30 [ 567.836497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.842057] ? security_socket_sendmsg+0x94/0xc0 [ 567.846823] ? netlink_unicast+0x760/0x760 [ 567.851070] sock_sendmsg+0xd5/0x120 [ 567.854791] ___sys_sendmsg+0x7fd/0x930 [ 567.858779] ? copy_msghdr_from_user+0x580/0x580 [ 567.863558] ? lock_downgrade+0x900/0x900 [ 567.867833] ? proc_fail_nth_write+0x9e/0x210 [ 567.872366] ? __fget_light+0x2e9/0x430 [ 567.876369] ? fget_raw+0x20/0x20 [ 567.879852] ? kasan_check_write+0x14/0x20 [ 567.884110] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 567.889079] ? wait_for_completion+0x8a0/0x8a0 [ 567.893703] ? lock_release+0x970/0x970 [ 567.897704] ? check_preemption_disabled+0x48/0x200 [ 567.902738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 567.908284] ? sockfd_lookup_light+0xc5/0x160 [ 567.912787] __sys_sendmsg+0x11d/0x280 [ 567.916701] ? __ia32_sys_shutdown+0x80/0x80 [ 567.921133] ? __sb_end_write+0xd9/0x110 [ 567.925225] ? fput+0x130/0x1a0 [ 567.928527] ? ksys_write+0x1ae/0x260 [ 567.932377] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 567.937862] __x64_sys_sendmsg+0x78/0xb0 [ 567.941936] do_syscall_64+0x1b9/0x820 [ 567.945841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 567.951220] ? syscall_return_slowpath+0x5e0/0x5e0 [ 567.956163] ? trace_hardirqs_on_caller+0x310/0x310 [ 567.961188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 567.966211] ? recalc_sigpending_tsk+0x180/0x180 [ 567.970981] ? kasan_check_write+0x14/0x20 [ 567.975240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.980125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 567.985338] RIP: 0033:0x457579 [ 567.988545] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.007478] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.015233] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 14:22:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500) [ 568.022534] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 568.029809] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 568.037079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 568.044353] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 14:22:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) pause() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x103, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = dup(r0) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2000, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x5) 14:22:35 executing program 2 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:35 executing program 3: inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair(0x15, 0x4, 0x2, &(0x7f0000000340)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0100000000006fbe3c7305702f607e606b9fe2669bcb70fe1914808c6d4ab442ce4987c5d423cd27ac69e609a80e0771d9c810040a65ccaec4f04bce70562a3cd88197a0f238a98193f1c60ed8c50fe113a1e96f01ac9d223a3b"], 0x1c}}, 0x4801) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) recvfrom(r1, &(0x7f0000000380)=""/118, 0x76, 0x2100, 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x218100, 0x0) 14:22:35 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1e7, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x4, 0xfffffffffffffff9, 0x8204, 0xffff, 0x1, 0x8, 0x6, 0x75, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e24, @rand_addr=0xd5e}}, [0xfff, 0xffffffffffffffff, 0x100000000, 0x9, 0x7, 0x2, 0x0, 0x9, 0x9, 0x9000000000, 0x0, 0x3, 0x0, 0x3, 0x1]}, &(0x7f0000000200)=0x100) socketpair$unix(0x1, 0x20002000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrandom(&(0x7f0000000400)=""/33, 0x21, 0x2) [ 568.174009] binder: release 26928:26935 transaction 390 out, still active [ 568.181162] binder: release 26928:26930 transaction 390 in, still active [ 568.184544] binder: undelivered TRANSACTION_COMPLETE [ 568.199880] FAULT_INJECTION: forcing a failure. [ 568.199880] name failslab, interval 1, probability 0, space 0, times 0 14:22:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2b, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="cd0b72b6d615d6aa8f5718003ea7b2cf9494070e1ed34ae99a5237616f752fd9cb759b9393941d8fde4d129d0f496f2da9403c3040cb09cbaf17353b706f257d0db5ae4e1a9b0dd02b5a6ec529ad2cf7d4fbfe3fbf860560a9bfdc60db1edd630eb9", 0x62, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) [ 568.229964] binder: send failed reply for transaction 390, target dead [ 568.241534] CPU: 0 PID: 26938 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 [ 568.250048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.259439] Call Trace: [ 568.262060] dump_stack+0x1d3/0x2c4 [ 568.265726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 568.270943] should_fail.cold.4+0xa/0x17 [ 568.275035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 568.280166] ? save_stack+0xa9/0xd0 [ 568.283802] ? kasan_kmalloc+0xc7/0xe0 [ 568.287694] ? kasan_slab_alloc+0x12/0x20 [ 568.291847] ? kmem_cache_alloc_node+0x144/0x730 [ 568.296617] ? __alloc_skb+0x114/0x770 [ 568.300516] ? netlink_sendmsg+0xb29/0xfc0 [ 568.304757] ? sock_sendmsg+0xd5/0x120 [ 568.308650] ? ___sys_sendmsg+0x7fd/0x930 [ 568.312811] ? __x64_sys_sendmsg+0x78/0xb0 [ 568.317060] ? do_syscall_64+0x1b9/0x820 [ 568.321136] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.326521] ? fs_reclaim_acquire+0x20/0x20 [ 568.330866] ? lock_downgrade+0x900/0x900 [ 568.335032] ? check_same_owner+0x330/0x330 [ 568.339376] ? lock_downgrade+0x900/0x900 [ 568.343550] __should_failslab+0x124/0x180 [ 568.347799] should_failslab+0x9/0x14 [ 568.351606] kmem_cache_alloc_node_trace+0x270/0x740 [ 568.356714] ? kasan_unpoison_shadow+0x35/0x50 [ 568.361304] ? kasan_kmalloc+0xc7/0xe0 [ 568.365207] __kmalloc_node_track_caller+0x3c/0x70 [ 568.370166] __kmalloc_reserve.isra.39+0x41/0xe0 [ 568.374938] __alloc_skb+0x150/0x770 [ 568.378665] ? skb_scrub_packet+0x490/0x490 [ 568.382996] ? __release_sock+0x3a0/0x3a0 [ 568.387152] ? __local_bh_enable_ip+0x160/0x260 [ 568.391841] ? netlink_insert+0xfe/0x240 [ 568.395919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.401499] ? netlink_autobind.isra.34+0x232/0x310 [ 568.406539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.412110] netlink_sendmsg+0xb29/0xfc0 [ 568.416229] ? netlink_unicast+0x760/0x760 [ 568.420494] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 568.425464] ? apparmor_socket_sendmsg+0x29/0x30 [ 568.430238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.436294] ? security_socket_sendmsg+0x94/0xc0 [ 568.441065] ? netlink_unicast+0x760/0x760 [ 568.445315] sock_sendmsg+0xd5/0x120 [ 568.449038] ___sys_sendmsg+0x7fd/0x930 [ 568.453032] ? copy_msghdr_from_user+0x580/0x580 [ 568.457807] ? lock_downgrade+0x900/0x900 [ 568.461973] ? proc_fail_nth_write+0x9e/0x210 [ 568.466492] ? __fget_light+0x2e9/0x430 [ 568.470481] ? fget_raw+0x20/0x20 [ 568.473948] ? kasan_check_write+0x14/0x20 [ 568.478192] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 568.483137] ? wait_for_completion+0x8a0/0x8a0 [ 568.487723] ? lock_release+0x970/0x970 [ 568.491707] ? check_preemption_disabled+0x48/0x200 [ 568.496753] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 568.502307] ? sockfd_lookup_light+0xc5/0x160 [ 568.506816] __sys_sendmsg+0x11d/0x280 [ 568.511147] ? __ia32_sys_shutdown+0x80/0x80 [ 568.515566] ? __sb_end_write+0xd9/0x110 [ 568.519643] ? fput+0x130/0x1a0 [ 568.522933] ? ksys_write+0x1ae/0x260 [ 568.526753] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 568.532219] __x64_sys_sendmsg+0x78/0xb0 [ 568.536294] do_syscall_64+0x1b9/0x820 [ 568.540491] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 568.545870] ? syscall_return_slowpath+0x5e0/0x5e0 [ 568.550815] ? trace_hardirqs_on_caller+0x310/0x310 [ 568.555842] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 568.560871] ? recalc_sigpending_tsk+0x180/0x180 [ 568.565645] ? kasan_check_write+0x14/0x20 [ 568.569895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.574754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.579949] RIP: 0033:0x457579 [ 568.583152] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.602064] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.609796] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 [ 568.617077] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 568.624379] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 14:22:35 executing program 5: r0 = fanotify_init(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x4000) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x3f, 0xfffffffffffffffa, 0x1, 0xffffffffffffffff]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') [ 568.631652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 568.638945] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 [ 568.705167] binder: BINDER_SET_CONTEXT_MGR already set [ 568.710519] binder: 26928:26935 ioctl 40046207 0 returned -16 [ 568.716949] binder_alloc: 26928: binder_alloc_buf, no vma [ 568.730286] binder: 26928:26930 transaction failed 29189/-3, size 0-0 line 2973 [ 568.756059] binder_release_work: 6 callbacks suppressed [ 568.756066] binder: undelivered TRANSACTION_ERROR: 29189 14:22:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x0, 0x1, 0x10}]}, &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4040, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}], [{@hash='hash'}, {@uid_lt={'uid<', r3}}, {@obj_type={'obj_type', 0x3d, '(nodevvmnet0,)#+lo\\#'}}, {@smackfstransmute={'smackfstransmute'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) 14:22:36 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={"736974300000000000000200", @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 14:22:36 executing program 5: r0 = fanotify_init(0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x4000) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x3f, 0xfffffffffffffffa, 0x1, 0xffffffffffffffff]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 14:22:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfffffdfd) 14:22:36 executing program 2 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x48}, 0x48) 14:22:36 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={&(0x7f0000000340)=""/237, 0xed, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0xf0ff7f, &(0x7f0000004480)={0x0, r3+30000000}) 14:22:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000007c0)={r1, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={0x0, 0x23, "54dc95a2c1f9e30c68dc80935a8c88429482c2cf3302b5fd6481bffc36bdf00702a5f8"}, &(0x7f0000000880)=0x2b) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB="001005000325b395724eec54b686ecbb1d019400a3070000ff00"], 0x1) listen(r0, 0xfffffffffffffe14) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6(0xa, 0x7, 0x1ff) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10281) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000003c0)) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000880), 0x336) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(0xffffffffffffffff, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000500)={r8, 0x4}, &(0x7f0000000540)=0x8) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a31e301b21fdf14195b87fc2f3cdf2cd311d63a3170abb1089c2917fae0de93dc298e5229000000"], 0x2a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote, 0x7}}, 0xfffffffffffffffc, 0x100}, &(0x7f0000000680)=0x90) 14:22:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x77, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x0, @empty, 0x4e20, 0x3, 'wrr\x00', 0x4, 0x4, 0x40}, {@multicast1, 0x4e23, 0x3, 0x74, 0x5, 0x3}}, 0x44) [ 568.963243] FAULT_INJECTION: forcing a failure. [ 568.963243] name failslab, interval 1, probability 0, space 0, times 0 [ 568.975253] binder: send failed reply for transaction 393 to 26960:26979 [ 568.982634] binder: undelivered TRANSACTION_COMPLETE [ 568.987778] binder: undelivered TRANSACTION_ERROR: 29189 [ 569.007187] binder: BINDER_SET_CONTEXT_MGR already set [ 569.048673] binder: 26960:26979 ioctl 40046207 0 returned -16 [ 569.056093] CPU: 0 PID: 26973 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 [ 569.064613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.073982] Call Trace: [ 569.076557] binder_alloc: 26960: binder_alloc_buf, no vma [ 569.076598] dump_stack+0x1d3/0x2c4 [ 569.085765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 569.090981] should_fail.cold.4+0xa/0x17 [ 569.095057] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 569.100172] ? lock_release+0x970/0x970 [ 569.104148] ? check_same_owner+0x330/0x330 [ 569.108512] ? __mutex_lock+0x85e/0x1700 [ 569.112591] ? netlink_dump+0x9f/0xd50 [ 569.116502] ? fs_reclaim_acquire+0x20/0x20 [ 569.120832] ? lock_downgrade+0x900/0x900 [ 569.124993] ? check_same_owner+0x330/0x330 [ 569.129321] ? __netlink_lookup+0x5b6/0xa90 [ 569.133649] ? mutex_trylock+0x2b0/0x2b0 [ 569.137719] __should_failslab+0x124/0x180 [ 569.141961] should_failslab+0x9/0x14 [ 569.145767] kmem_cache_alloc_node+0x26e/0x730 [ 569.150355] ? __netlink_dump_start+0x4e9/0x6f0 [ 569.155032] ? lock_downgrade+0x900/0x900 [ 569.159190] __alloc_skb+0x114/0x770 [ 569.162922] ? skb_scrub_packet+0x490/0x490 [ 569.167251] ? netlink_recvmsg+0x1480/0x1480 [ 569.171675] ? kasan_check_write+0x14/0x20 [ 569.175914] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 569.180852] ? wait_for_completion+0x8a0/0x8a0 [ 569.185451] ? lock_downgrade+0x900/0x900 [ 569.189625] netlink_dump+0x6e3/0xd50 [ 569.193450] ? netlink_broadcast+0x50/0x50 [ 569.197748] __netlink_dump_start+0x4f1/0x6f0 [ 569.202353] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 569.206946] rtnetlink_rcv_msg+0x809/0xc20 [ 569.211192] ? rtnetlink_put_metrics+0x690/0x690 [ 569.215957] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 569.220578] netlink_rcv_skb+0x172/0x440 [ 569.224667] ? rtnetlink_put_metrics+0x690/0x690 [ 569.229483] ? netlink_ack+0xb80/0xb80 [ 569.233405] rtnetlink_rcv+0x1c/0x20 [ 569.237144] netlink_unicast+0x5a5/0x760 [ 569.241224] ? netlink_attachskb+0x9a0/0x9a0 [ 569.245641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 569.251187] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 569.256215] netlink_sendmsg+0xa18/0xfc0 [ 569.260293] ? netlink_unicast+0x760/0x760 [ 569.264536] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 569.269497] ? apparmor_socket_sendmsg+0x29/0x30 [ 569.274267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 569.279813] ? security_socket_sendmsg+0x94/0xc0 [ 569.284579] ? netlink_unicast+0x760/0x760 [ 569.288827] sock_sendmsg+0xd5/0x120 [ 569.292557] ___sys_sendmsg+0x7fd/0x930 [ 569.296579] ? copy_msghdr_from_user+0x580/0x580 [ 569.301360] ? lock_downgrade+0x900/0x900 [ 569.305538] ? proc_fail_nth_write+0x9e/0x210 [ 569.310059] ? __fget_light+0x2e9/0x430 [ 569.314054] ? fget_raw+0x20/0x20 [ 569.317535] ? kasan_check_write+0x14/0x20 [ 569.321801] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 569.326754] ? wait_for_completion+0x8a0/0x8a0 [ 569.331350] ? lock_release+0x970/0x970 [ 569.335344] ? trace_hardirqs_on+0xbd/0x310 [ 569.339694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 569.345256] ? sockfd_lookup_light+0xc5/0x160 [ 569.349774] __sys_sendmsg+0x11d/0x280 [ 569.353685] ? __ia32_sys_shutdown+0x80/0x80 [ 569.358778] ? __sb_end_write+0xd9/0x110 [ 569.362862] ? fput+0x130/0x1a0 [ 569.366153] ? ksys_write+0x1ae/0x260 [ 569.369976] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 569.375479] __x64_sys_sendmsg+0x78/0xb0 [ 569.379556] do_syscall_64+0x1b9/0x820 [ 569.383468] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 569.388852] ? syscall_return_slowpath+0x5e0/0x5e0 [ 569.393795] ? trace_hardirqs_on_caller+0x310/0x310 [ 569.398820] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 569.403840] ? recalc_sigpending_tsk+0x180/0x180 [ 569.408603] ? kasan_check_write+0x14/0x20 [ 569.412852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 569.417707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 569.422896] RIP: 0033:0x457579 [ 569.426266] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 569.446950] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.454664] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 [ 569.461931] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 569.469198] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 569.477522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 569.484817] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 14:22:36 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x800, 0x2da, 0xffffffff, 0x0, 0x8, 0x81, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast1}, 0x4}}, 0x3, 0x9, 0x9, 0xb55, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0xb5, 0x5, 0x9, 0x9, 0x8001}, &(0x7f00000001c0)=0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x1000040, 0x4) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 14:22:36 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaabaaaaa6a186dd02d930c376006d19700300600fe80000000fe000000000000000000ffff0200000000000000000000000000010200907800000000600a07ec00000000fe8000000000000000000000000000ffff000000000000000002ffffac141400"], &(0x7f0000000000)) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x42) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x6, 0x2, 0xff, 0x2, 0x2, 0x90f0, 0x3fc}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0xfffffffffffffffe, 0xfffffffffffffff8}, &(0x7f0000000400)=0x8) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000480)) uname(&(0x7f0000000040)=""/19) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000440)={0x8000, 0x5, 0x4}, 0xc) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="736d6400000000000000000000000000c7fa57577f18fa634986f8201233cda35f604c9c10ad5b1c2fe52edcaa437e61d9de509057b9b830cffeee8944edd03a54a482772c88787cd88de0975415c97f002b5e58000000000000"], &(0x7f0000000240)=""/114, 0x72) r2 = dup2(r0, r0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000002c0)={0x2, 0x200, 0x2}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) [ 569.500072] binder: 26960:26985 transaction failed 29189/-3, size 0-0 line 2973 14:22:36 executing program 2 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:36 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x800, 0x2da, 0xffffffff, 0x0, 0x8, 0x81, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast1}, 0x4}}, 0x3, 0x9, 0x9, 0xb55, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0xb5, 0x5, 0x9, 0x9, 0x8001}, &(0x7f00000001c0)=0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x1000040, 0x4) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 14:22:36 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x800, 0x2da, 0xffffffff, 0x0, 0x8, 0x81, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast1}, 0x4}}, 0x3, 0x9, 0x9, 0xb55, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0xb5, 0x5, 0x9, 0x9, 0x8001}, &(0x7f00000001c0)=0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x1000040, 0x4) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x1, r3, 0x0, r2}, 0x10) [ 569.574026] binder: undelivered TRANSACTION_ERROR: 29189 14:22:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x8000a0ffffffff) 14:22:36 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaabaaaaa6a186dd02d930c376006d19700300600fe80000000fe000000000000000000ffff0200000000000000000000000000010200907800000000600a07ec00000000fe8000000000000000000000000000ffff000000000000000002ffffac141400"], &(0x7f0000000000)) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x42) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x6, 0x2, 0xff, 0x2, 0x2, 0x90f0, 0x3fc}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0xfffffffffffffffe, 0xfffffffffffffff8}, &(0x7f0000000400)=0x8) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000480)) uname(&(0x7f0000000040)=""/19) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000440)={0x8000, 0x5, 0x4}, 0xc) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="736d6400000000000000000000000000c7fa57577f18fa634986f8201233cda35f604c9c10ad5b1c2fe52edcaa437e61d9de509057b9b830cffeee8944edd03a54a482772c88787cd88de0975415c97f002b5e58000000000000"], &(0x7f0000000240)=""/114, 0x72) r2 = dup2(r0, r0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000002c0)={0x2, 0x200, 0x2}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14:22:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000007c0)={r1, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={0x0, 0x23, "54dc95a2c1f9e30c68dc80935a8c88429482c2cf3302b5fd6481bffc36bdf00702a5f8"}, &(0x7f0000000880)=0x2b) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB="001005000325b395724eec54b686ecbb1d019400a3070000ff00"], 0x1) listen(r0, 0xfffffffffffffe14) r2 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6(0xa, 0x7, 0x1ff) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x400201) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x3, 0x3, 0xa, 0xffffffffffffff81, 0x6, 0xfffffffffffffffa}, 0x20) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10281) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000003c0)) setsockopt$inet_group_source_req(r4, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000880), 0x336) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(0xffffffffffffffff, &(0x7f00000006c0)=""/216, 0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000500)={r8, 0x4}, &(0x7f0000000540)=0x8) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a31e301b21fdf14195b87fc2f3cdf2cd311d63a3170abb1089c2917fae0de93dc298e5229000000"], 0x2a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote, 0x7}}, 0xfffffffffffffffc, 0x100}, &(0x7f0000000680)=0x90) [ 569.662241] FAULT_INJECTION: forcing a failure. [ 569.662241] name failslab, interval 1, probability 0, space 0, times 0 [ 569.702080] CPU: 1 PID: 27013 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 14:22:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfffffdfd) [ 569.710643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.720003] Call Trace: [ 569.722609] dump_stack+0x1d3/0x2c4 [ 569.726278] ? dump_stack_print_info.cold.2+0x52/0x52 [ 569.732374] should_fail.cold.4+0xa/0x17 [ 569.736629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 569.741771] ? __save_stack_trace+0x8d/0xf0 [ 569.746135] ? save_stack+0xa9/0xd0 [ 569.749776] ? save_stack+0x43/0xd0 [ 569.753411] ? kasan_kmalloc+0xc7/0xe0 [ 569.757349] ? kasan_slab_alloc+0x12/0x20 [ 569.761530] ? kmem_cache_alloc_node+0x144/0x730 [ 569.766312] ? __alloc_skb+0x114/0x770 [ 569.770233] ? netlink_dump+0x6e3/0xd50 [ 569.774240] ? __netlink_dump_start+0x4f1/0x6f0 [ 569.778938] ? rtnetlink_rcv_msg+0x809/0xc20 [ 569.783384] ? netlink_rcv_skb+0x172/0x440 [ 569.787641] ? rtnetlink_rcv+0x1c/0x20 [ 569.791558] ? netlink_unicast+0x5a5/0x760 [ 569.795800] ? netlink_sendmsg+0xa18/0xfc0 [ 569.800397] ? ___sys_sendmsg+0x7fd/0x930 [ 569.805109] ? fs_reclaim_acquire+0x20/0x20 [ 569.809450] ? lock_downgrade+0x900/0x900 [ 569.813605] ? netlink_dump+0x9f/0xd50 [ 569.817513] ? check_same_owner+0x330/0x330 [ 569.821852] ? lock_downgrade+0x900/0x900 [ 569.826021] __should_failslab+0x124/0x180 [ 569.830320] should_failslab+0x9/0x14 [ 569.834144] kmem_cache_alloc_node_trace+0x270/0x740 [ 569.839254] ? kasan_unpoison_shadow+0x35/0x50 [ 569.843869] ? kasan_kmalloc+0xc7/0xe0 [ 569.847776] __kmalloc_node_track_caller+0x3c/0x70 [ 569.852722] __kmalloc_reserve.isra.39+0x41/0xe0 [ 569.857490] __alloc_skb+0x150/0x770 [ 569.861214] ? skb_scrub_packet+0x490/0x490 [ 569.865558] ? netlink_recvmsg+0x1480/0x1480 [ 569.869994] ? kasan_check_write+0x14/0x20 [ 569.874243] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 569.879190] ? wait_for_completion+0x8a0/0x8a0 [ 569.883798] ? lock_downgrade+0x900/0x900 [ 569.887978] netlink_dump+0x6e3/0xd50 [ 569.891794] ? netlink_broadcast+0x50/0x50 [ 569.896062] __netlink_dump_start+0x4f1/0x6f0 [ 569.900575] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 569.905165] rtnetlink_rcv_msg+0x809/0xc20 [ 569.909420] ? rtnetlink_put_metrics+0x690/0x690 [ 569.914215] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 569.918839] netlink_rcv_skb+0x172/0x440 [ 569.922912] ? rtnetlink_put_metrics+0x690/0x690 [ 569.927683] ? netlink_ack+0xb80/0xb80 [ 569.931595] rtnetlink_rcv+0x1c/0x20 [ 569.935320] netlink_unicast+0x5a5/0x760 [ 569.939393] ? netlink_attachskb+0x9a0/0x9a0 [ 569.943824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 569.949382] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 569.954499] netlink_sendmsg+0xa18/0xfc0 [ 569.958582] ? netlink_unicast+0x760/0x760 [ 569.962827] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 569.967770] ? apparmor_socket_sendmsg+0x29/0x30 [ 569.972557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 569.978129] ? security_socket_sendmsg+0x94/0xc0 [ 569.982892] ? netlink_unicast+0x760/0x760 [ 569.987200] sock_sendmsg+0xd5/0x120 [ 569.990941] ___sys_sendmsg+0x7fd/0x930 [ 569.994937] ? copy_msghdr_from_user+0x580/0x580 [ 570.000413] ? lock_downgrade+0x900/0x900 [ 570.005121] ? proc_fail_nth_write+0x9e/0x210 [ 570.009631] ? __fget_light+0x2e9/0x430 [ 570.013628] ? fget_raw+0x20/0x20 [ 570.017094] ? kasan_check_write+0x14/0x20 [ 570.021339] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 570.026335] ? wait_for_completion+0x8a0/0x8a0 [ 570.030926] ? lock_release+0x970/0x970 [ 570.034910] ? check_preemption_disabled+0x48/0x200 [ 570.040112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 570.046767] ? sockfd_lookup_light+0xc5/0x160 [ 570.051424] __sys_sendmsg+0x11d/0x280 [ 570.055321] ? __ia32_sys_shutdown+0x80/0x80 [ 570.059733] ? __sb_end_write+0xd9/0x110 [ 570.063781] ? fput+0x130/0x1a0 [ 570.067062] ? ksys_write+0x1ae/0x260 [ 570.070980] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 570.077403] __x64_sys_sendmsg+0x78/0xb0 [ 570.082272] do_syscall_64+0x1b9/0x820 [ 570.086500] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 570.091867] ? syscall_return_slowpath+0x5e0/0x5e0 [ 570.096806] ? trace_hardirqs_on_caller+0x310/0x310 [ 570.101820] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 570.106841] ? recalc_sigpending_tsk+0x180/0x180 [ 570.111584] ? kasan_check_write+0x14/0x20 [ 570.115997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.120842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 570.126050] RIP: 0033:0x457579 [ 570.129239] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 570.148157] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.155886] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 14:22:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7377692d74683d3078303030303030303030303030303030352c6e6f616c69676e2c0005bb83c9e48dd8f54e63110a8698c2e95b64d3c437c8872630025d52c95b55fa5bc1aec141954e39def894449ccc002f63783a7bf17a78573586c07aea1cc99e7d2e12f3"]) [ 570.163152] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 570.170408] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 570.177699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 570.184968] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 [ 570.194730] binder: undelivered TRANSACTION_COMPLETE [ 570.201171] binder: BINDER_SET_CONTEXT_MGR already set 14:22:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x400081, 0x100ffd) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0x4, 0x0, 'client1\x00', 0xffffffff80000000, "6a8dfc5f30c6edcc", "ec33f815d9362db7ed0a3a701ffc5d74e458e5b8e1c4ebca2d1dccfdd5f9e042", 0x5, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0xf30c000000000000, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)}}, 0xfcf3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00'}) [ 570.221414] binder: 27020:27035 ioctl 40046207 0 returned -16 [ 570.230520] binder: send failed reply for transaction 396, target dead [ 570.238552] binder: 27020:27035 transaction failed 29189/-22, size 0-0 line 2834 14:22:37 executing program 5: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)="2d5d6d317472757374656428af00883e2b6ef07de01023c8b0b5518f66720ef81cfbcc243adf18567c9b2c3c0f840ab6503b02284bd8e166b09cb3dc2ab19458b76ed278a68b3495d9a4f5beeae45a048d311376783116ac1a1e5786e1e4a16c493ed697d3973cb8f99364df566aea7dc44ab45bab513756a5f1556ef3bcd9eed4a1fc890a1c2295a119572c3051efef0649164187a2c249c31954405d21795d1b718e18fc7aae805441b0b7aa883bdd76603eba668bac1157f5d7ed828ec3c865a4899ffa47f550f7b689066801", 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x2002) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) 14:22:37 executing program 0: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x51c7}, 0xb) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x101e41) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x6, 0x3, 0xffff, 0x1ff, 0x0, 0xfffffffffffffffb, 0x100, 0x7, 0x3, 0xd6, 0x7, 0x7, 0x8070, 0x7f, 0x9, 0x1, 0x50, 0x3, 0x8, 0xfff, 0x2, 0x9, 0xd7cf, 0xfffffffffffffffa, 0x7fffffff, 0x2, 0x8, 0x7, 0x6, 0x9, 0x6b3, 0x9d8, 0xc8, 0x0, 0xc120, 0x3, 0x0, 0xffff, 0x0, @perf_config_ext={0x100, 0x3}, 0x10800, 0x3ff, 0xa3fd, 0x7, 0x0, 0x3, 0x8}, r3, 0x3, r2, 0x8) [ 570.263502] XFS (loop3): unknown mount option [swi-th=0x0000000000000005]. 14:22:37 executing program 2 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 570.305050] binder: undelivered TRANSACTION_ERROR: 29189 [ 570.330171] XFS (loop3): unknown mount option [swi-th=0x0000000000000005]. 14:22:37 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000740)={{0x2, 0x4e23, @loopback}, {0x6, @remote}, 0x50, {0x2, 0x4e23, @multicast1}, 'gretap0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000001, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_sa2={0x2, 0x13, 0x288540a8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x200) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x1e4, 0x80, 0x80000000}) 14:22:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendto(r0, &(0x7f0000000180)="0c563a2a4fb1a89f33b822c55e373197d0c588852ad8a3a1897ee5c260632d6f9709f6e2c8e149a4b92ddc90ccb9172e8227a565146bd77ffa36888a987fe9503800ca4589f6f1d0cf35552ffe7490cf2b5b6538c1271f3fdeb256428cbf66dee891f71f593b6a266edbf3975e4a7e5e722ea5f68e86a9fe12451e58242c656671fdf51f12d6b3aa10f1166c131f96e3807a7fbb9ea3da4f3297a1a221175b", 0x9f, 0x10, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @remote, 'eql\x00'}}, 0x80) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8947, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000140)=@ethtool_gstrings}) close(r3) close(r2) 14:22:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/166}, 0x18) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000200)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8c8c, 0x200000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) [ 570.462003] FAULT_INJECTION: forcing a failure. [ 570.462003] name failslab, interval 1, probability 0, space 0, times 0 [ 570.486926] binder: send failed reply for transaction 399 to 27020:27044 [ 570.493987] binder: undelivered TRANSACTION_COMPLETE [ 570.499271] binder: undelivered TRANSACTION_ERROR: 29189 [ 570.526899] CPU: 1 PID: 27061 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 [ 570.535453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.545303] Call Trace: [ 570.547914] dump_stack+0x1d3/0x2c4 [ 570.551565] ? dump_stack_print_info.cold.2+0x52/0x52 [ 570.556807] should_fail.cold.4+0xa/0x17 [ 570.562974] ? rcu_softirq_qs+0x20/0x20 [ 570.567658] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 570.572776] ? is_bpf_text_address+0xd3/0x170 [ 570.577292] ? kernel_text_address+0x79/0xf0 [ 570.581717] ? __kernel_text_address+0xd/0x40 [ 570.586226] ? __save_stack_trace+0x8d/0xf0 [ 570.590567] ? save_stack+0xa9/0xd0 [ 570.594201] ? save_stack+0x43/0xd0 [ 570.594215] ? kasan_kmalloc+0xc7/0xe0 [ 570.594228] ? __kmalloc_node_track_caller+0x50/0x70 [ 570.594245] ? __kmalloc_reserve.isra.39+0x41/0xe0 [ 570.594265] ? netlink_dump+0x6e3/0xd50 [ 570.601775] ? __netlink_dump_start+0x4f1/0x6f0 [ 570.601792] ? rtnetlink_rcv_msg+0x809/0xc20 [ 570.601806] ? netlink_rcv_skb+0x172/0x440 [ 570.601819] ? rtnetlink_rcv+0x1c/0x20 [ 570.601837] ? netlink_unicast+0x5a5/0x760 [ 570.638066] ? netlink_sendmsg+0xa18/0xfc0 [ 570.642318] ? ___sys_sendmsg+0x7fd/0x930 [ 570.646473] ? __sys_sendmsg+0x11d/0x280 [ 570.650552] ? __x64_sys_sendmsg+0x78/0xb0 [ 570.654885] ? do_syscall_64+0x1b9/0x820 [ 570.659002] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 570.664376] ? lock_downgrade+0x900/0x900 [ 570.668541] __should_failslab+0x124/0x180 [ 570.672789] should_failslab+0x9/0x14 [ 570.676594] kmem_cache_alloc_trace+0x4b/0x750 [ 570.676611] ? kasan_unpoison_shadow+0x35/0x50 [ 570.676632] ? kasan_kmalloc+0xc7/0xe0 [ 570.685878] inet6_dump_fib+0xbc8/0xe80 [ 570.685897] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 570.699016] ? kasan_unpoison_shadow+0x35/0x50 [ 570.703609] ? kasan_kmalloc+0xc7/0xe0 [ 570.707521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.713106] ? inet_dump_fib+0x5c3/0x850 [ 570.717454] ? __kmalloc_node_track_caller+0x50/0x70 [ 570.722647] ? fib6_purge_rt+0x7e0/0x7e0 [ 570.726692] ? fib_net_init+0x430/0x430 [ 570.730652] ? __alloc_skb+0x4c1/0x770 [ 570.734547] ? skb_scrub_packet+0x490/0x490 [ 570.738921] ? netlink_recvmsg+0x1410/0x1480 [ 570.743334] ? fib6_purge_rt+0x7e0/0x7e0 [ 570.747399] rtnl_dump_all+0x335/0x570 [ 570.751376] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 570.755945] ? kasan_check_write+0x14/0x20 [ 570.760172] netlink_dump+0x519/0xd50 [ 570.763975] ? netlink_broadcast+0x50/0x50 [ 570.768222] __netlink_dump_start+0x4f1/0x6f0 [ 570.772716] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 570.777303] rtnetlink_rcv_msg+0x809/0xc20 [ 570.781528] ? rtnetlink_put_metrics+0x690/0x690 [ 570.786281] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 570.790856] netlink_rcv_skb+0x172/0x440 [ 570.795366] ? rtnetlink_put_metrics+0x690/0x690 [ 570.800820] ? netlink_ack+0xb80/0xb80 [ 570.804699] rtnetlink_rcv+0x1c/0x20 [ 570.808401] netlink_unicast+0x5a5/0x760 [ 570.812458] ? netlink_attachskb+0x9a0/0x9a0 [ 570.816945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.822490] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 570.827497] netlink_sendmsg+0xa18/0xfc0 [ 570.831547] ? netlink_unicast+0x760/0x760 [ 570.835783] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 570.840700] ? apparmor_socket_sendmsg+0x29/0x30 [ 570.845461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.851008] ? security_socket_sendmsg+0x94/0xc0 [ 570.855761] ? netlink_unicast+0x760/0x760 [ 570.860001] sock_sendmsg+0xd5/0x120 [ 570.863715] ___sys_sendmsg+0x7fd/0x930 [ 570.867677] ? copy_msghdr_from_user+0x580/0x580 [ 570.872429] ? lock_downgrade+0x900/0x900 [ 570.876583] ? proc_fail_nth_write+0x9e/0x210 [ 570.881088] ? __fget_light+0x2e9/0x430 [ 570.885069] ? fget_raw+0x20/0x20 [ 570.888511] ? kasan_check_write+0x14/0x20 [ 570.892730] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 570.897649] ? wait_for_completion+0x8a0/0x8a0 [ 570.902217] ? lock_release+0x970/0x970 [ 570.906446] ? check_preemption_disabled+0x48/0x200 [ 570.911467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 570.916995] ? sockfd_lookup_light+0xc5/0x160 [ 570.921482] __sys_sendmsg+0x11d/0x280 [ 570.925357] ? __ia32_sys_shutdown+0x80/0x80 [ 570.929753] ? __sb_end_write+0xd9/0x110 [ 570.933800] ? fput+0x130/0x1a0 [ 570.937065] ? ksys_write+0x1ae/0x260 [ 570.940870] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 570.946332] __x64_sys_sendmsg+0x78/0xb0 [ 570.950422] do_syscall_64+0x1b9/0x820 [ 570.954310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 570.959665] ? syscall_return_slowpath+0x5e0/0x5e0 [ 570.964593] ? trace_hardirqs_on_caller+0x310/0x310 [ 570.969943] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 570.974948] ? recalc_sigpending_tsk+0x180/0x180 [ 570.979707] ? kasan_check_write+0x14/0x20 [ 570.983939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.988793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 570.993985] RIP: 0033:0x457579 [ 570.997163] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.016051] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:22:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600000000000000) 14:22:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000130005010000001000dbc429c1c100000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000010002b000c0001000800ffff", @ANYRES32], 0x30}}, 0x0) 14:22:38 executing program 5: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)="2d5d6d317472757374656428af00883e2b6ef07de01023c8b0b5518f66720ef81cfbcc243adf18567c9b2c3c0f840ab6503b02284bd8e166b09cb3dc2ab19458b76ed278a68b3495d9a4f5beeae45a048d311376783116ac1a1e5786e1e4a16c493ed697d3973cb8f99364df566aea7dc44ab45bab513756a5f1556ef3bcd9eed4a1fc890a1c2295a119572c3051efef0649164187a2c249c31954405d21795d1b718e18fc7aae805441b0b7aa883bdd76603eba668bac1157f5d7ed828ec3c865a4899ffa47f550f7b689066801", 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x2002) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) 14:22:38 executing program 2 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:38 executing program 3: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)="2d5d6d317472757374656428af00883e2b6ef07de01023c8b0b5518f66720ef81cfbcc243adf18567c9b2c3c0f840ab6503b02284bd8e166b09cb3dc2ab19458b76ed278a68b3495d9a4f5beeae45a048d311376783116ac1a1e5786e1e4a16c493ed697d3973cb8f99364df566aea7dc44ab45bab513756a5f1556ef3bcd9eed4a1fc890a1c2295a119572c3051efef0649164187a2c249c31954405d21795d1b718e18fc7aae805441b0b7aa883bdd76603eba668bac1157f5d7ed828ec3c865a4899ffa47f550f7b689066801", 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x2002) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) [ 571.023748] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 [ 571.031002] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 571.038863] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 571.046296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 571.053917] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 14:22:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x4fa, 0x101100) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x4, 0x24cf, 0x3, 0xfffffffffffffffa, 0x0, 0x3, 0x1249, 0x1, 0x3, 0x100000001, 0x9f84, 0x1c6, 0x9ca, 0x2, 0x9, 0xfffffffffffffffd, 0x9, 0x4, 0x101, 0xf1f, 0x2, 0x7fff, 0x9, 0x0, 0x8b, 0x6, 0x2, 0x9, 0x6, 0x5, 0x4, 0x2, 0x4, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x20000, 0x5, 0x3, 0x7, 0x8000, 0x8, 0x1}, r5, 0x8, 0xffffffffffffff9c, 0x1) [ 571.130341] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. [ 571.159685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 14:22:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101000, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x1}) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1, 0x1000) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000240)="820d398129898512c1687490bdb54f4c2f55afcc3d4e8126aa1091c38647b124b84051a025b32885bd3d7b1fbfef67", 0x2f) shmdt(0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) msgget$private(0x0, 0x8) r3 = msgget$private(0x0, 0x90) msgsnd(r3, &(0x7f0000000540)=ANY=[], 0x0, 0x800) [ 571.188846] FAULT_INJECTION: forcing a failure. [ 571.188846] name failslab, interval 1, probability 0, space 0, times 0 [ 571.204344] binder_thread_release: 4 callbacks suppressed [ 571.204355] binder: release 27084:27094 transaction 401 out, still active [ 571.217593] binder: release 27084:27088 transaction 401 in, still active [ 571.231078] binder: undelivered TRANSACTION_COMPLETE [ 571.252951] CPU: 0 PID: 27087 Comm: syz-executor2 Not tainted 4.19.0-rc6-next-20181005+ #88 [ 571.261482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.271372] Call Trace: [ 571.274334] dump_stack+0x1d3/0x2c4 [ 571.277988] ? dump_stack_print_info.cold.2+0x52/0x52 [ 571.283211] should_fail.cold.4+0xa/0x17 [ 571.287287] ? rcu_softirq_qs+0x20/0x20 [ 571.291282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.296577] ? is_bpf_text_address+0xd3/0x170 [ 571.300454] binder: send failed reply for transaction 401, target dead [ 571.301089] ? kernel_text_address+0x79/0xf0 [ 571.301107] ? __kernel_text_address+0xd/0x40 [ 571.301130] ? __save_stack_trace+0x8d/0xf0 [ 571.324711] ? save_stack+0xa9/0xd0 [ 571.328530] ? save_stack+0x43/0xd0 [ 571.332171] ? kasan_kmalloc+0xc7/0xe0 [ 571.336074] ? __kmalloc_node_track_caller+0x50/0x70 [ 571.341202] ? __kmalloc_reserve.isra.39+0x41/0xe0 [ 571.346145] ? netlink_dump+0x6e3/0xd50 [ 571.349314] binder: BINDER_SET_CONTEXT_MGR already set [ 571.350303] ? __netlink_dump_start+0x4f1/0x6f0 [ 571.350320] ? rtnetlink_rcv_msg+0x809/0xc20 [ 571.350340] ? netlink_rcv_skb+0x172/0x440 [ 571.371786] ? rtnetlink_rcv+0x1c/0x20 [ 571.375688] ? netlink_unicast+0x5a5/0x760 [ 571.376635] binder: 27084:27094 ioctl 40046207 0 returned -16 [ 571.379932] ? netlink_sendmsg+0xa18/0xfc0 [ 571.379952] ? ___sys_sendmsg+0x7fd/0x930 [ 571.379978] ? __sys_sendmsg+0x11d/0x280 [ 571.398290] ? __x64_sys_sendmsg+0x78/0xb0 [ 571.401731] binder_alloc: 27084: binder_alloc_buf, no vma [ 571.402548] ? do_syscall_64+0x1b9/0x820 [ 571.412153] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 571.417545] ? kasan_check_read+0x11/0x20 [ 571.421704] __should_failslab+0x124/0x180 [ 571.425946] should_failslab+0x9/0x14 [ 571.429749] kmem_cache_alloc_trace+0x4b/0x750 [ 571.434819] ? kasan_unpoison_shadow+0x35/0x50 [ 571.439402] ? kasan_kmalloc+0xc7/0xe0 [ 571.443312] inet6_dump_fib+0xbc8/0xe80 [ 571.447286] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 571.452568] ? kasan_unpoison_shadow+0x35/0x50 [ 571.457151] ? kasan_kmalloc+0xc7/0xe0 [ 571.461046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 571.466597] ? inet_dump_fib+0x5c3/0x850 [ 571.470660] ? __kmalloc_node_track_caller+0x50/0x70 [ 571.476121] ? fib6_purge_rt+0x7e0/0x7e0 [ 571.480972] ? fib_net_init+0x430/0x430 [ 571.486809] ? __alloc_skb+0x4c1/0x770 [ 571.491393] ? do_raw_spin_unlock+0xa7/0x2f0 [ 571.496868] ? skb_scrub_packet+0x490/0x490 [ 571.501898] ? fib6_purge_rt+0x7e0/0x7e0 [ 571.506837] rtnl_dump_all+0x335/0x570 [ 571.510923] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 571.515513] ? kasan_check_write+0x14/0x20 [ 571.519760] netlink_dump+0x519/0xd50 [ 571.523571] ? netlink_broadcast+0x50/0x50 [ 571.527831] __netlink_dump_start+0x4f1/0x6f0 [ 571.532345] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 571.536931] rtnetlink_rcv_msg+0x809/0xc20 [ 571.541180] ? rtnetlink_put_metrics+0x690/0x690 [ 571.546292] ? rtnl_bridge_dellink+0xbe0/0xbe0 [ 571.550892] netlink_rcv_skb+0x172/0x440 [ 571.554970] ? rtnetlink_put_metrics+0x690/0x690 [ 571.559729] ? netlink_ack+0xb80/0xb80 [ 571.563641] rtnetlink_rcv+0x1c/0x20 [ 571.567359] netlink_unicast+0x5a5/0x760 [ 571.571429] ? netlink_attachskb+0x9a0/0x9a0 [ 571.575863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 571.581408] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 571.586795] netlink_sendmsg+0xa18/0xfc0 [ 571.591744] ? netlink_unicast+0x760/0x760 [ 571.596598] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 571.601541] ? apparmor_socket_sendmsg+0x29/0x30 [ 571.606309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 571.611852] ? security_socket_sendmsg+0x94/0xc0 [ 571.616609] ? netlink_unicast+0x760/0x760 [ 571.620850] sock_sendmsg+0xd5/0x120 [ 571.624575] ___sys_sendmsg+0x7fd/0x930 [ 571.628559] ? copy_msghdr_from_user+0x580/0x580 [ 571.633338] ? lock_downgrade+0x900/0x900 [ 571.637498] ? proc_fail_nth_write+0x9e/0x210 [ 571.642003] ? __fget_light+0x2e9/0x430 [ 571.645977] ? fget_raw+0x20/0x20 [ 571.649475] ? kasan_check_write+0x14/0x20 [ 571.653715] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 571.658651] ? wait_for_completion+0x8a0/0x8a0 [ 571.663235] ? lock_release+0x970/0x970 [ 571.667221] ? check_preemption_disabled+0x48/0x200 [ 571.672249] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 571.678309] ? sockfd_lookup_light+0xc5/0x160 [ 571.682813] __sys_sendmsg+0x11d/0x280 [ 571.686887] ? __ia32_sys_shutdown+0x80/0x80 [ 571.692343] ? __sb_end_write+0xd9/0x110 [ 571.696847] ? fput+0x130/0x1a0 [ 571.700133] ? ksys_write+0x1ae/0x260 [ 571.703957] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 571.709429] __x64_sys_sendmsg+0x78/0xb0 [ 571.713512] do_syscall_64+0x1b9/0x820 [ 571.717411] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 571.722785] ? syscall_return_slowpath+0x5e0/0x5e0 [ 571.727722] ? trace_hardirqs_on_caller+0x310/0x310 [ 571.732742] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 571.737763] ? recalc_sigpending_tsk+0x180/0x180 [ 571.742531] ? kasan_check_write+0x14/0x20 [ 571.746787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.751649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 571.757471] RIP: 0033:0x457579 [ 571.760767] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.779674] RSP: 002b:00007f65e683ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.787407] RAX: ffffffffffffffda RBX: 00007f65e683ec90 RCX: 0000000000457579 [ 571.794691] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 14:22:39 executing program 5: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x200) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffef6) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000002640)={0x77359400}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'erspan0\x00'}) [ 571.801967] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 571.809245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f65e683f6d4 [ 571.818025] R13: 00000000004c3891 R14: 00000000004d56d0 R15: 0000000000000006 14:22:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x202001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x800, "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"}, &(0x7f0000001600)=0x808) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x38, &(0x7f0000005dc0)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x1}]}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001700)={0x0, 0x7}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000002b40)={0x0, 0xfffffffffffffffc}, &(0x7f0000002b80)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002bc0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002c00)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000005540)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000005600)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000005640)={0x0, 0xe7, "c16cddc549f486064200f42b15f6a6b83659c47d97e49a7781d737e5498b449e80f8ef7b9cce5d496c95770e0fd077a4a91056acd6569b6c36467af22d945610d461c614acba41b09723877cdb7c5e7852ffbf1ae8e489fde35380cfd531eca9e008f73b01d18c94146b3448186e4a5ea8a4f97ba8330b6a756f85ae42eed6c2638472869edf0556498c343e42343a44247fda08e319ff6e10fad32b0b9f79e27a1b22173c19359e4520eeb21aa16a02af103132e7e02f7d6337abd5721f763973a03250fbc6c515a847dfe899ce447f18f43805b302cc985a1f71ba067c88a41e1f08cd6e2f63"}, &(0x7f0000005740)=0xef) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000005780)={0x0, 0x3}, &(0x7f00000057c0)=0x8) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000058c0)={0x7, 0x9}) accept$packet(r1, &(0x7f000000ae80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000aec0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000001640), 0x4000) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10009) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x0, 0x1f, 0xd1a, r2}, 0x10) 14:22:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf617732743e397b89f26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000a40)="153f6234488dd25d766070") write$cgroup_int(r0, &(0x7f0000000200), 0x330) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x80) signalfd4(r1, &(0x7f0000000080)={0x3}, 0x8, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x801c581f, &(0x7f0000000000)) r2 = semget(0x0, 0x2, 0x120) semop(r2, &(0x7f0000000040)=[{0x7, 0x3, 0x1000}, {0x0, 0x80000000, 0x800}, {0x1, 0x2, 0x800}, {0x0, 0x401, 0x800}, {0x9c03b19812b573b8, 0x4, 0x1000}, {0x2, 0x7, 0x1000}, {0x2, 0x3f, 0x1800}], 0x7) 14:22:39 executing program 2 (fault-call:3 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 571.888088] binder: 27084:27088 transaction failed 29189/-3, size 0-0 line 2973 [ 571.896105] binder: undelivered TRANSACTION_ERROR: 29189 [ 571.963238] kauditd_printk_skb: 2 callbacks suppressed [ 571.963252] audit: type=1800 audit(1538749359.150:224): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16579 res=0 14:22:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6800) 14:22:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101000, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x0, 0x0, 0x1}) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1, 0x1000) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000240)="820d398129898512c1687490bdb54f4c2f55afcc3d4e8126aa1091c38647b124b84051a025b32885bd3d7b1fbfef67", 0x2f) shmdt(0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) msgget$private(0x0, 0x8) r3 = msgget$private(0x0, 0x90) msgsnd(r3, &(0x7f0000000540)=ANY=[], 0x0, 0x800) [ 572.005882] audit: type=1804 audit(1538749359.150:225): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="file0" dev="sda1" ino=16579 res=1 [ 572.118045] binder: release 27118:27120 transaction 404 in, still active [ 572.141423] binder: send failed reply for transaction 404 to 27118:27124 14:22:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 572.186679] binder: BINDER_SET_CONTEXT_MGR already set [ 572.213994] binder: 27118:27125 ioctl 40046207 0 returned -16 [ 572.248512] binder_alloc: 27118: binder_alloc_buf, no vma [ 572.282083] binder: 27118:27120 transaction failed 29189/-3, size 0-0 line 2973 14:22:39 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x200000000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f0000000140)=0x20) fcntl$setpipe(r0, 0x407, 0x9) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x8, r2}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 14:22:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000380)={{0x3a, @local, 0x4e24, 0x1, 'fo\x00', 0x9, 0x1f54, 0xa7}, {@multicast1, 0x4e21, 0x0, 0x6, 0x7fffffff, 0xb4}}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2, 0x101}}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x81}}, 0x5}, &(0x7f0000000140)=0x90) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000240)={'ifb0\x00', {0x2, 0x4e23, @dev}}) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x8000, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x6, 0x4) 14:22:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4800) [ 572.403383] binder: undelivered TRANSACTION_ERROR: 29189 [ 572.442787] binder: undelivered TRANSACTION_COMPLETE [ 572.448006] binder: undelivered TRANSACTION_ERROR: 29189 14:22:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 572.511568] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 14:22:39 executing program 1: gettid() r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000000c0), &(0x7f0000000080)) [ 572.577287] binder: release 27142:27143 transaction 407 in, still active [ 572.611392] binder: send failed reply for transaction 407 to 27142:27145 [ 572.651311] binder: BINDER_SET_CONTEXT_MGR already set [ 572.656644] binder: 27142:27154 ioctl 40046207 0 returned -16 [ 572.701507] binder_alloc: 27142: binder_alloc_buf, no vma [ 572.729309] binder: 27142:27143 transaction failed 29189/-3, size 0-0 line 2973 [ 572.741275] binder: undelivered TRANSACTION_COMPLETE [ 572.746479] binder: undelivered TRANSACTION_ERROR: 29189 [ 572.814565] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.300357] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 573.606665] audit: type=1804 audit(1538749360.790:226): pid=27110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="file0" dev="sda1" ino=16579 res=1 14:22:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x4000) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x202001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x800, "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"}, &(0x7f0000001600)=0x808) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x38, &(0x7f0000005dc0)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x1}]}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001700)={0x0, 0x7}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000002b40)={0x0, 0xfffffffffffffffc}, &(0x7f0000002b80)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002bc0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002c00)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000005540)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000005600)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000005640)={0x0, 0xe7, "c16cddc549f486064200f42b15f6a6b83659c47d97e49a7781d737e5498b449e80f8ef7b9cce5d496c95770e0fd077a4a91056acd6569b6c36467af22d945610d461c614acba41b09723877cdb7c5e7852ffbf1ae8e489fde35380cfd531eca9e008f73b01d18c94146b3448186e4a5ea8a4f97ba8330b6a756f85ae42eed6c2638472869edf0556498c343e42343a44247fda08e319ff6e10fad32b0b9f79e27a1b22173c19359e4520eeb21aa16a02af103132e7e02f7d6337abd5721f763973a03250fbc6c515a847dfe899ce447f18f43805b302cc985a1f71ba067c88a41e1f08cd6e2f63"}, &(0x7f0000005740)=0xef) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000005780)={0x0, 0x3}, &(0x7f00000057c0)=0x8) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000058c0)={0x7, 0x9}) accept$packet(r1, &(0x7f000000ae80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000aec0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000001640), 0x4000) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10009) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x0, 0x1f, 0xd1a, r2}, 0x10) 14:22:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x74) 14:22:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x108, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) 14:22:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0xa, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000000), 0xffffffffffffffa5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000040)) r5 = dup3(r2, 0xffffffffffffff9c, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) listen(r6, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x22a}, &(0x7f0000000280)=0xf7f5dfd5427e8bb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x10000}, &(0x7f0000000300)=0xc) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000500)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', r5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000005c0)={0x100, 0x0, 0x80000001, 'queue1\x00', 0x80}) mbind(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000680)=0x1, 0xfff, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000380)='irlan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:41 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x13, &(0x7f0000013e95), 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) close(0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) [ 573.908505] audit: type=1800 audit(1538749361.090:227): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16600 res=0 [ 573.919787] binder: release 27163:27164 transaction 410 in, still active 14:22:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x11}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000f0ff48000000000000069500000000000000"], &(0x7f0000000300)="4f50431c4e4c0000eb0000000000000000"}, 0x48) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000007c0)=""/158, 0x9e}], 0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf6, &(0x7f00000000c0)="410b8a8046c3a988fbc5f08e8eb0", &(0x7f00000001c0)=""/246, 0xffffffff00000f20}, 0x28) 14:22:41 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400004, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) [ 573.958713] binder: release 27163:27178 transaction 410 out, still active [ 573.971256] binder: send failed reply for transaction 410, target dead [ 573.973882] binder: undelivered TRANSACTION_COMPLETE [ 573.980455] audit: type=1804 audit(1538749361.130:228): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="file0" dev="sda1" ino=16600 res=1 [ 574.038674] binder: BINDER_SET_CONTEXT_MGR already set [ 574.073252] binder: 27163:27178 ioctl 40046207 0 returned -16 [ 574.129855] binder_alloc: 27163: binder_alloc_buf, no vma 14:22:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x20000090}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 574.185854] binder: 27163:27183 transaction failed 29189/-3, size 0-0 line 2973 [ 574.271993] binder: undelivered TRANSACTION_ERROR: 29189 14:22:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140)="db", 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)=0x0) ptrace$setsig(0x4203, r0, 0xf4, &(0x7f0000000580)={0x3d, 0x9, 0x5, 0x20}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_matches\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') fanotify_mark(r1, 0x0, 0x8030010, r1, &(0x7f0000000440)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0xfffffffffffffdae) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r2, 0x8001, 0x10}, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000480)) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 14:22:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4800000000000000) [ 574.638637] binder: release 27203:27206 transaction 413 in, still active [ 574.645692] binder: release 27203:27208 transaction 413 out, still active [ 574.660102] binder: undelivered TRANSACTION_COMPLETE [ 574.673661] binder: send failed reply for transaction 413, target dead [ 574.717342] binder: BINDER_SET_CONTEXT_MGR already set [ 574.752662] binder: 27203:27208 ioctl 40046207 0 returned -16 [ 574.791505] binder_alloc: 27203: binder_alloc_buf, no vma [ 574.820418] binder: 27203:27206 transaction failed 29189/-3, size 0-0 line 2973 [ 574.851694] binder: undelivered TRANSACTION_ERROR: 29189 14:22:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x20000180) 14:22:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8001a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000f0ff48000000000000069500000000000000"], &(0x7f0000000300)="4f50431c4e4c0000eb0000000000000000"}, 0x48) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000007c0)=""/158, 0x9e}], 0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf6, &(0x7f00000000c0)="410b8a8046c3a988fbc5f08e8eb0", &(0x7f00000001c0)=""/246, 0xffffffff00000f20}, 0x28) 14:22:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140)="db", 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)=0x0) ptrace$setsig(0x4203, r0, 0xf4, &(0x7f0000000580)={0x3d, 0x9, 0x5, 0x20}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_matches\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') fanotify_mark(r1, 0x0, 0x8030010, r1, &(0x7f0000000440)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0xfffffffffffffdae) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r2, 0x8001, 0x10}, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000480)) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 14:22:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6c000000) 14:22:42 executing program 1: sched_setparam(0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffff9c, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000c80)=""/136, 0x88}, 0x2}, {{&(0x7f0000001400)=@llc, 0x80, &(0x7f0000002800)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000002880)=""/12, 0xc}}], 0x2, 0x100, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3c) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x3) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:22:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = dup2(r2, r1) semget(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r4 = getpid() sched_setscheduler(r4, 0x7, &(0x7f0000000000)) bind$rds(r3, &(0x7f00000000c0), 0xc) 14:22:42 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x7) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ftruncate(r2, 0x92) pwrite64(r1, &(0x7f0000000140)="84666a6e9394d3c2078f02fc8a9b08031fe9ea85a4c7fff9e096220b63544f9458fbfb2617918e3afca9d40e4c1e14e6876b10519a9d894e1ce6c4bb90586647fb0c0ed7c79f67c97947ac57fed0ffe44ec0c6f82cfcc1137b", 0x59, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) sendmsg$netlink(r4, &(0x7f0000005840)={&(0x7f0000000040)=@proc, 0xc, &(0x7f0000005140), 0x0, &(0x7f0000005700)=[@cred={0x14, 0x1, 0x24}], 0x20}, 0x0) 14:22:42 executing program 0: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300), 0x1) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) memfd_create(&(0x7f0000000140)='cpuset&\x00', 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0xffff, 0xefa6, 0x3, 0x9bd5}]}, 0x10) sendfile(r1, r2, 0x0, 0xa5cc549) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 575.257357] binder: release 27220:27234 transaction 416 out, still active [ 575.266093] binder: release 27220:27228 transaction 416 in, still active [ 575.285040] binder: undelivered TRANSACTION_COMPLETE 14:22:42 executing program 1: execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000000c0)='-%vmnet0\x00', &(0x7f00000002c0)='wlan0]\\wlan1proctrusted)\x00', &(0x7f0000000300)='g\x00', &(0x7f0000000340)='securityself*.+\x00', &(0x7f0000000380)='x*\x00', &(0x7f00000003c0)='}\x00', &(0x7f0000000400)='\\.\'\x00', &(0x7f0000000440)='.)\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='eth0posix_acl_accesssecurity$wlan0eth1selinux\x00']) r0 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0xffffffff, 0x100) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000005c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$inet(0x2, 0x3, 0x400) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000002100df3900000000000000000000000000000000000000000000000100000000000000000000000000000001000000000000000000dc000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000"], 0x50}, 0x8}, 0x0) [ 575.302541] binder: send failed reply for transaction 416, target dead [ 575.324011] binder: BINDER_SET_CONTEXT_MGR already set 14:22:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:42 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x40) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0x40, 0x4) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffe, 0xf, 0x6ab8, @buffer={0x0, 0x6c, &(0x7f00000000c0)=""/108}, &(0x7f0000000140)="bb0050ec235d77a5a08a61f0bc7202", &(0x7f0000000180)=""/249, 0xeff3, 0x11, 0xffffffffffffffff, &(0x7f0000000280)}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x59, 0x30, 0x7, 0x1}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r2}, &(0x7f0000000400)=0x8) r4 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x0, 0x4002) eventfd2(0xffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xa, 0x6, 0x8, 0x7, 0x0, 0xffffffffffffff9c, 0x6}, 0x2c) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000004c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x488800, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x0, 0x0) fadvise64(r6, 0x38, 0x0, 0x6) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e21, @loopback}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000680)={r3, @in={{0x2, 0x4e23}}}, 0x84) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000740)=0xa, 0x4) ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000000780)="18913ed039996c6ff730e055cf9e80af8dd820001d9b20f72556d94fe39ca0d90bff37cddb2c9f1a0c34de40d0d65ac18a9b8a1bd9e57846fef8927c006b8c6501e1ba3ec691fe587239a691724db927ee5b53") ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000800)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000840)={r3, 0x5}, 0x8) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x6, 0x402000) r8 = accept4$inet6(r1, 0x0, &(0x7f00000008c0), 0x800) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000900)={r2, 0x7}, &(0x7f0000000940)=0x8) r9 = openat$cgroup_ro(r1, &(0x7f0000000980)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x24) open(&(0x7f00000009c0)='./file0\x00', 0x401, 0x100) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000a00)={'veth0\x00', @local}) fgetxattr(r4, &(0x7f0000000a40)=@known='system.posix_acl_default\x00', &(0x7f0000000a80)=""/115, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) [ 575.335020] audit: type=1804 audit(1538749362.520:229): pid=27244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir606284232/syzkaller.ALwA6v/677/bus" dev="sda1" ino=16580 res=1 [ 575.337746] binder: 27220:27234 ioctl 40046207 0 returned -16 [ 575.368797] binder_alloc: 27220: binder_alloc_buf, no vma 14:22:42 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f0000000200), 0xd, &(0x7f0000001340)) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000300)={0xa, 0x0, [{0xd, 0x0, 0x4c, 0x0, 0x80000001}, {0x80000008, 0x52c, 0x8000, 0x3, 0xff}, {0x80000001, 0x1, 0x9, 0x0, 0x1}, {0x4000000b, 0x100000000, 0x101c45d, 0x2, 0x3f}, {0xb, 0x8, 0x10000, 0x6, 0x200}, {0x6, 0x1f, 0x368, 0x37}, {0x80000000, 0xc7, 0x6, 0x1f, 0x200000000}, {0xa, 0x9, 0x7, 0x1, 0x8568}, {0xd, 0x7, 0x20, 0x100000000, 0x3ff}, {0x2, 0xffffffffffffffff, 0x8, 0x20, 0x8}]}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)={'security\x00'}, &(0x7f0000001300)=0x24) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000240)) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='+', 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 14:22:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xb804}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 575.400707] binder: 27220:27228 transaction failed 29189/-3, size 0-0 line 2973 [ 575.412336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 575.427041] binder: undelivered TRANSACTION_ERROR: 29189 14:22:42 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x280200, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x9, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x0, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={0xffffffffffffff9c}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x101000, 0x0) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e22, 0x8, @remote, 0x9}}}, 0x32) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090c000000000000000000000002001300000000000000000000000000030006c2000000000002000000e0040001000000000000000002000100000000000000000200000000030005000000000002000000e000000100000000000000"], 0x60}}, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80080) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 14:22:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff) 14:22:42 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x2}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8084}, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair$unix(0x1, 0x8000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 14:22:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xff00}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r1, &(0x7f00000015c0)=[{&(0x7f0000000040)="cfc0fd50b1a0c12fcce9111d1d90d8eccbd2a82f485c6c16e6c517abfb778f24bb8853bac851031b0e22f0f79cc9791530fb76953d817d026704d96c7da7284b87d01d23196fec44af3aabfebee7a3d871fc12f972c168adf5babc87a865762e949c285b30d7640dad19e5bbe23c3a2db33c03f96b4342dcc5d4df9480b77bac10f6b7937a0550de8378f9dcde0913d7bc3d157d3c91310dfaab6dec144e8b74", 0xa0}, {&(0x7f0000000140)="44c3586c17eab130625bd97ee91bd1ebfdfe6a4fdc32259d211b8942859f370f0dfb3cc81797669da1c8eb3acc48fd2748362591b2142c71f26c83848aa3464c1c6a7c8f1cb6792166a7e7c0d8476ba0d646b0a1ca085c9d2665989acb70499cf9a818c165401ea91b7ddd0392710cd186c4df6ba2d65ed3fa05b50aa06297f14aed82e7802f17f2bc73660bd6640fa0e4f9988b9d877e1a20d8f1981896df884fb53e9f19235e292f46cd8bc4eb61dc1c5ae74b19e3ca46e0ddfeb87a323387ae838e9b4e253cb8b51a2565e1baf99e0a166e9ef60b068c1e62", 0xda}, {&(0x7f0000000240)="e7da2b5e4db732825916bc4109abe45026e9d83be02e265437aba8914d759f8294237340419275d85d495c39622410bb8f3f747a1ace38aecc0321e33a54099390bbd0d5236a428fa8e6d424c373d8e74720fa9f2e90e52f8cea357c5534dcde4150ffbb98b061e4bbd32b0a5c9dc4a62cda780bf4244ca198262a8a96e28e8f9a32793eb188c746", 0x88}, {&(0x7f0000000300)="094664b1973f6354a6576310e955565ce6b0f7aae8ec4b923394dd70dd604a8981b9b49de19be0417ea51b9c19c902dc6423f36e7abd42b637090700687dd2778a99800b686c6e835397524b092109965e42206d5b84e9b28ebc1c161802f5e76470b5ea834cdb62d00aefa481133ce7b32ca94920690db4675c1989ad19fcfd28e7dc89de835d6f68e0caba998632833ae931f66c21", 0x96}, {&(0x7f00000003c0)="abcc72d68ee3aa6779f04d107fa71ce602aa3f6a9319d1059ed853a458b89aa4517fdbe6c7b1bf031f7481bccf93b43c1866470863877a55db3e20e8ddffb475a57f6f69a885c61485680c991c57cd3c4ccabd5b8f28c03f59e811a121061f3c64613b3653c989856314ccaa60853078a80164f96cf755b29388e950ce4f7050e31f7aa850f3f725d2eac4f2e61494c959268f850ad13cf5043e3f4028e7fdabfa35385392ea68834be3cbb6e65d18fde7aad208c41bf8dd23334c7bb209682b6c58b88c27ca25143c46b3df675570776d27beec76d5f0ed1a7a564d1b3e265052f170d39806f95b1a3880ae300af2adffe7", 0xf2}, {&(0x7f00000004c0)="331dd51a7ff41fbe0cac25a67fe3ddf8b062c90775f6e2cdfe6067d9f6e556a0d5c38765316b804406559f", 0x2b}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="71748b43aecc64001945481edfc5304eb47114e88047ba1c3b10081966861c19bbaf6e63a2cb1ce4c29b", 0x2a}, {&(0x7f0000001540)="3e69c01578e5119a25407f8ead6ac3b0f68998245ec7ffea24e50cad85199df9d25f1508e5c3bb4549ab4e36f7ed0a01fc7cb106475ba33ac627e4bcdca91c1c6677222c8f6460a85074852575d9ba78a4a6e57a00f684be4479efd25c6ade54dd3b750499ff113192ba7628d96791", 0x6f}], 0x9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f0000001680)='ceph\x00', &(0x7f00000016c0)='./file0\x00', 0x20, 0x7, &(0x7f00000029c0)=[{&(0x7f0000001700)="4255f27e4ed4b76e95146d8dfe65394765b6f1e9fb2dddd9791fb5e4c79a9eff61c215074cc1ddeb7d6719061a9132", 0x2f, 0xa}, {&(0x7f0000001740)="5704a2a781610bf4b722b4f383d7d40402cadf8d6b48827c7f0e4f7e495e0bb2859ebe286c0c784c48ec1c5de8ed519c3d9f6db926f466e0b2656c7813b68d5f9c65c4aacfa04a4b468e445618505b87a8ff79962e1379de", 0x58, 0x3}, {&(0x7f00000017c0)="fbbf9dea264e70bf466e092d291ec3bc79962429e83830c4ade0aab78e9059921134c0ffd29a10d6721aa05023999d757cf5c328b3b56a41d69307a3e70395ea342cd00d0e666814c263815ba3b96cc440743ccc927ab63fb6753e5452eb624eb6262cc4909e3e6a97ee5bbe97c468225d269d2afcc2fff8562c514fe59fcf163148b1e92582683e38e747b198019f3857", 0x91, 0x5}, {&(0x7f0000001880)="1e07151f49482d05faf926158f8663e7337abd82b62b2ce672737f5c0d1d9efd46a2f858cf9abc14a0bb5076cf8bc931de89172c6fd45985992ad62ef440cd57fef6eab4ca", 0x45, 0x2}, {&(0x7f0000001900)="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", 0x1000, 0x9}, {&(0x7f0000002900)="0eacef4e1e97c8e828e19a65e9b98606412ab8be9a63ee2521d6bc72e6940d0f0fd86355f8120c7360f96facb6d6e45cf41583759cb08bcea16f83e69f5d8523c74083d2426c60653e5fc0845093269178184fc2768347972c079cc9c29b340d97f93ed393d3c154dc1ba2d59ec6d6ccc13a2dfe4bd1f2", 0x77, 0x3}, {&(0x7f0000002980)="0ddc8aa4b068ead5781367422d27ad25d2da136037b4fb69e3b4839baaf1d81f3e3e91f51d519024020057f31e9d785b6e604f4e99f2b2b4b473ba00", 0x3c, 0x7477b6c}], 0x100000, &(0x7f0000002a80)='{%cpuset/user)-nodev\x00') close(r0) 14:22:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 575.656338] binder: undelivered TRANSACTION_COMPLETE [ 575.661806] binder: send failed reply for transaction 419, target dead [ 575.676534] binder: BINDER_SET_CONTEXT_MGR already set [ 575.689898] binder: 27272:27291 ioctl 40046207 0 returned -16 [ 575.726551] binder_alloc: 27272: binder_alloc_buf, no vma [ 575.742453] binder: 27272:27273 transaction failed 29189/-3, size 0-0 line 2973 [ 575.750333] binder: undelivered TRANSACTION_ERROR: 29189 [ 576.128162] audit: type=1804 audit(1538749363.310:230): pid=27258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir606284232/syzkaller.ALwA6v/677/bus" dev="sda1" ino=16580 res=1 [ 576.152066] audit: type=1804 audit(1538749363.340:231): pid=27307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir606284232/syzkaller.ALwA6v/677/bus" dev="sda1" ino=16580 res=1 14:22:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000040), 0xfd71) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x7ff, 0x8, 0x1, @time={0x77359400}, {0x20000000000074, 0x8}, {0x3, 0x8001}, @note={0x5, 0xff, 0x6, 0x7fff, 0x68a}}, {0x7f, 0xfffffffffffffffa, 0x4, 0x5, @tick=0x7, {0x20, 0x1}, {0xff, 0x1}, @raw8={"3f51f2c5c222f503b73012b6"}}], 0x60) socketpair(0xd, 0x4, 0x9, &(0x7f0000000100)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x9d90, 0xf7, 0x1}) 14:22:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f407e38044235f00000000000000f934be160993eaa39c9b1a1641d3f02188aa0e8c55677ae99bb6d67099"], 0x28}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3f, 0xc0002) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x4, 0x0, 0x2, 0x2}}, 0xffffffffffffffc2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @rand_addr}}, 0x459, 0x0, 0x0, 0x81, 0x80000000}, &(0x7f0000000080)=0x98) ioctl$KDSETLED(r1, 0x4b32, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000001c0)) 14:22:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x400) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000002c0)={0x0, r1}) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x1000}}, 0x18) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6de, 0x280002) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000340)=r6, 0x4) close(r4) socket$kcm(0x2, 0xa, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000000c0)={{0x3, 0x3}, {}, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") keyctl$session_to_parent(0x12) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x2, @local, 0x9}}, 0x0, 0x8, 0x800, "37c9136a29561feac52107da3613b345f595eb4af10f29de55367ac10149804d6f0558040331674435184c56da58973c73d1eca6a8bdcdf8bff7ba9ba5fabed8798ef8c60edf0ff7d545fb86336ac2b8"}, 0xd8) close(r4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0x9, 0x800}, {0x1, 0x8}, 0x0, 0x4}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000300)={0x200, {{0x2, 0x4e23, @rand_addr=0x62}}, 0x1, 0x3, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @broadcast}}]}, 0x210) 14:22:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000001ac0)=0x10001) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000f73f0e00000045000107000000141900020002000700005d14a4e91ee438d2fd00000000000000", 0x39}], 0x1) fadvise64(r0, 0x8001, 0x85f, 0x2) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8880100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@upd={0x110, 0x12, 0x110, 0x70bd2d, 0x25dfdbfd, {{'morus1280-generic\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x3}, {0x8}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x20}]}, 0x110}, 0x1, 0x0, 0x0, 0x20044000}, 0x4010) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg(r0, &(0x7f0000001a40)={&(0x7f0000000300)=@xdp={0x2c, 0x4, r2, 0x6}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)="2d498db490631b0e34ebe3d7976ae883a0736456e389b6337d3460d9c0d6f1c336ba0d0ed88f6d877877ca2a2064d2a56cb16824abe53535c8e3f45f322e0827f44f7432c42d8e9ca502d9f999fe182ab7d5ec808b21df679f799966618c3a8475d0d029db8313da285df894c11511efa0cd1b93e7e43f8354857d06eb66dfb3900d2c9bfb6aa2998cf57d6782fa09e6eb3078f9677c6a00f18700262bd019f511679f62be122ef9de11", 0xaa}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="434e4effff2f09449a8520794923a11eb896520419042b919e800bc95b3b4b3a7ab93bd1c3cc989f3ee1caf01ed4e3993585555197fcf71d2aa4c069ef84858525ddf99db79a4788060eecae99dfaf73600ef0de536e800ab4cdd414150b48c7ab66a77d10a4f7cdeb3454ea550dfd97f18784ae7717e0ad2292d2726cee0aa8ec2dd82ee6e82c32e24710a51df6f30260cdca71aeb4ecffae3aaacf3f832d2b6544289c80f108d8ad9c2be160d224309fa64a51f544688e23b1f686129514d00e3fc07d16cad9a07ad4cf7ad745a903da63c04d8a77953ea8f4dcbab001424645aa454aeb58ef6bcecbf2309d66c69d", 0xf0}, {&(0x7f0000001540)="dee029a73fad2a36a81f3c4a14fae30bb23821f6f94ef2", 0x17}, {&(0x7f0000001580)="8af1a71d6e07d6fa08672e8a1581fb7639d58fccb3795e223f61f4d6a764b10e7c", 0x21}], 0x5, &(0x7f0000001640)=[{0xf0, 0x0, 0x1, "4b0ad6b24546f66989306ce4a74639937d7b690f97dd9626c61d6505902b99cb296e8631456e7207ccd9cf3f0fd9038f506ded6059ac54a901818086013fabd28e41adfa8782b17a0988b385fb749b6e7c3f6fe0f13bd7a176112fbe27ce5a66af0966efe67a67b6016e1215bb26f5ac7bec00742bb0bd1193c2448ea410bd62495a0449560e6ce87dc4efcdd0aa8818bc332f3009527e32a2753e7121a21050f87958c4b86ec290be17ea66633cc5110cb8bb2f99ad6e9dd4171dbbca90211516aed083b98390e18da3ec30ff5eb491d908af015b1f529670f8281e1496"}, {0xb8, 0x104, 0x9, "81c1dcd01009369b4b1026e9c4e70bb26609bea8ced381b67aa6c6858d0bda0d9afd6c1633ecfe7bd63709ca54d34d1cf7266578bc70b4f3bb6cac5de6dc9655d061ff8bb1a4e3efca8d3ec897728c0cf76a6ebf1ba25eca9ca7671a947e18769921be68cc2fc9a771dbe37fdcd3487601a6de29bbdd8af301c494bdead88f3bbe9936cc137df3465e7dc7fed659bb258279c7e28f3a0ab8c4b3acdbd32dcdb68b902fc2f8"}, {0x70, 0x10e, 0xf06, "721160a21df506c6dc1b5de181641bcfa720b831482e47eb7cb89182df7145ab1799a00d0c059439e42173c24aef8fdcefca57f57182e73bdf702a04d58526f6320fe2f6e4c627eed8be401b9c68604998a3f2e31085b867ca127c89ab57"}, {0x48, 0x101, 0x8, "de9255d02f0fd264a2d1d8899aff71e87c18f18f9d6beb04b4daaa974ddb0c3bc6eb32ecd6070b6e13f1755849ad923fe562891a64bcd7"}, {0x108, 0x117, 0x100000001, "42f595cb6dec411624cdb1dba5f773b71c589cf05c8f9b013faa7bd47d23202976455c78e3e54d24624f5b065c105c7254119faca0c42a6166dfa662cc90c23570de2594f4c189a0e61f8b77a5250c59307c2e4e3612916f6eca89541d417a788156c76bb3e36e85fb11993575a6cd573582f7764b8dcfef1298f737aedb6233f939e1df58c0d3bf95ba88f194ae0fd131d4deb2d36a93db1458baddec84357f96ec534a15c402ba6b0ea0fa561ee210bf4d3ede9fbbba45033408fe112b82803e1a6a6ffba123a596bed772f30d2b033ecce3e9825d9b68abaf1520b900d2751f7ff98ff0e5d9084bdfb414ebc846513e"}, {0x70, 0x115, 0xe, "77fe2ae7e8fd62586099cffc1e4248662deb431ed94ea8fbd52b940fe9a5832c816b7c00c3f66537edc8a6ceee3e26520b87ee75fcc461549f495e099517421672086d434fea676f0ea04fdb064acf70ef0a5859a8fcea1dff"}], 0x3d8, 0x80}, 0x20000000) 14:22:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x68000000) 14:22:43 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x20201) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000200)=0x9e) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 14:22:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 576.245901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 576.321770] binder_thread_release: 2 callbacks suppressed [ 576.321782] binder: release 27314:27320 transaction 422 in, still active [ 576.334449] binder: release 27314:27332 transaction 422 out, still active [ 576.346336] binder: undelivered TRANSACTION_COMPLETE 14:22:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x400) r1 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffa) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) keyctl$chown(0x4, r1, r2, r3) ioctl$UI_SET_SWBIT(r0, 0x80045518, 0xa) 14:22:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000140)={0x8, 0x14, [0x91fd, 0x8bb, 0x9, 0x8, 0xfffffffffffffffe]}) dup3(r1, r0, 0x0) 14:22:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 576.367644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 576.384318] binder: send failed reply for transaction 422, target dead [ 576.411575] device nr0 entered promiscuous mode [ 576.433447] binder: BINDER_SET_CONTEXT_MGR already set 14:22:43 executing program 1: fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = socket$inet6(0xa, 0x80806, 0xffffffffffc00001) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x1df28000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup(r2) recvfrom$inet(r3, &(0x7f00000003c0)=""/131, 0x83, 0x0, &(0x7f0000000480)={0x2, 0x0, @rand_addr}, 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x8912, &(0x7f0000000000)="153e623448566a9ae5d25d766070000000000000000000000000") shutdown(r2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000040)) [ 576.457579] binder: 27314:27348 ioctl 40046207 0 returned -16 [ 576.493394] binder_alloc: 27314: binder_alloc_buf, no vma 14:22:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="0fc3"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000080)="3e66400f3882bf010000004c0fae8fdc000000c74424003d010000c744240255690000ff1c2436f342c6c7be0f0172f80fc75b523e673e3e670ffa4729660fe9b14abbffff3e440f015d0066410f38807a03", 0x52}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:43 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) mount(&(0x7f00000003c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='mslos\x00', 0x0, &(0x7f0000000300)) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x22, 0xfff, 0x100000000, 0x1, 0x1, 0x2, 0x3e, 0xfffffffffffffa5e, 0x2ec, 0x40, 0x285, 0x3c0, 0x96c, 0x38, 0x1, 0x6, 0x6, 0x1}, [{0x7, 0xfff, 0x0, 0xffffffffffffff80, 0x2, 0x5, 0x80000001, 0x2}], "2acfddfdb63e4190b8d65a54d7eb398ee7bf65e6b2c22ce02f2a6c28c9e9940b84d534a8c1c29defbbb4c4ba33de8d0d5cc2cfbac8b02d856c7c577f261d258a85fea709b9cffeaf083f3c6f003a9f4a6e342387fa3f119534a8691560de247b470017e81a99653deb", [[], [], [], [], [], []]}, 0x6e1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xf4002, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x387) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xbbb) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 576.505553] binder: 27314:27320 transaction failed 29189/-3, size 0-0 line 2973 [ 576.515536] binder: undelivered TRANSACTION_ERROR: 29189 14:22:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x400) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000002c0)={0x0, r1}) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x1000}}, 0x18) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6de, 0x280002) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000340)=r6, 0x4) close(r4) socket$kcm(0x2, 0xa, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000000c0)={{0x3, 0x3}, {}, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") keyctl$session_to_parent(0x12) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x2, @local, 0x9}}, 0x0, 0x8, 0x800, "37c9136a29561feac52107da3613b345f595eb4af10f29de55367ac10149804d6f0558040331674435184c56da58973c73d1eca6a8bdcdf8bff7ba9ba5fabed8798ef8c60edf0ff7d545fb86336ac2b8"}, 0xd8) close(r4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0x9, 0x800}, {0x1, 0x8}, 0x0, 0x4}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000300)={0x200, {{0x2, 0x4e23, @rand_addr=0x62}}, 0x1, 0x3, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @broadcast}}]}, 0x210) 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xb8040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0xa65c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 14:22:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500000000000000) 14:22:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x2, 0x192, &(0x7f0000000040), &(0x7f0000000000)={0x77359400}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640)}]) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xb9, 0x40) connect$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x7, 0x1, 0x80000000, "2717fed9e5f92e6d17770ec527fcfdfce3f90c684a86bbd5ff691999cca4313f80ffc915e90b928458b53fd1544601d049b6a78603cf6bae3725b052720452", 0x2e}, 0x60) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) 14:22:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x175) setuid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000100)={0x8}) write$P9_RREADDIR(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\v'], 0x1) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x0, r3, 0xfffffffffffffffc, [0x305f]}, 0x2c) mlockall(0x6) 14:22:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x400) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000002c0)={0x0, r1}) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x1000}}, 0x18) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6de, 0x280002) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000340)=r6, 0x4) close(r4) socket$kcm(0x2, 0xa, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000000c0)={{0x3, 0x3}, {}, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") keyctl$session_to_parent(0x12) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x2, @local, 0x9}}, 0x0, 0x8, 0x800, "37c9136a29561feac52107da3613b345f595eb4af10f29de55367ac10149804d6f0558040331674435184c56da58973c73d1eca6a8bdcdf8bff7ba9ba5fabed8798ef8c60edf0ff7d545fb86336ac2b8"}, 0xd8) close(r4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0x9, 0x800}, {0x1, 0x8}, 0x0, 0x4}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000300)={0x200, {{0x2, 0x4e23, @rand_addr=0x62}}, 0x1, 0x3, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @broadcast}}]}, 0x210) 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xc00e0000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x208300, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4000000000d4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000240)=""/205, 0x3}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000100)=0x1c) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) socket$inet6(0xa, 0x1000000000002, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 576.951814] binder: release 27382:27396 transaction 425 out, still active [ 576.959198] binder: release 27382:27384 transaction 425 in, still active [ 576.959300] binder: undelivered TRANSACTION_COMPLETE [ 576.966278] binder: send failed reply for transaction 425, target dead 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf00}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000101, 0x0, 0x400000b7]}) [ 577.062848] binder: BINDER_SET_CONTEXT_MGR already set [ 577.069837] device nr0 entered promiscuous mode [ 577.084844] binder: 27382:27396 ioctl 40046207 0 returned -16 [ 577.121628] binder_alloc: 27382: binder_alloc_buf, no vma [ 577.152110] binder: 27382:27384 transaction failed 29189/-3, size 0-0 line 2973 [ 577.159635] binder: undelivered TRANSACTION_ERROR: 29189 [ 577.183429] device nr0 entered promiscuous mode 14:22:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4c00) [ 577.340607] binder: release 27424:27425 transaction 428 in, still active [ 577.360990] binder: send failed reply for transaction 428 to 27424:27426 [ 577.373328] binder: BINDER_SET_CONTEXT_MGR already set [ 577.378637] binder: 27424:27428 ioctl 40046207 0 returned -16 [ 577.388636] binder: undelivered TRANSACTION_COMPLETE [ 577.393841] binder: undelivered TRANSACTION_ERROR: 29189 [ 577.399677] binder_alloc: 27424: binder_alloc_buf, no vma [ 577.405996] binder: 27424:27425 transaction failed 29189/-3, size 0-0 line 2973 [ 577.414586] binder: undelivered TRANSACTION_ERROR: 29189 14:22:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1f}, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x1, 0x0, 0x0) 14:22:44 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000180)={0x8, 0x5435, 0x8000, 'queue1\x00', 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000000010, 0x80803, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:22:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000) 14:22:44 executing program 0: r0 = socket(0x11, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4041, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4f, 0x0], 0x2, 0x2, 0x1, 0x2, 0xfffffffffffffffb, 0xffffffffffffff80, {0x4, 0x1, 0x7, 0x40, 0x401, 0x0, 0x22, 0x1, 0x3, 0x100000000, 0x6, 0x0, 0x8, 0x7, "483f1e65ce078d5e1c79ef5988cc852db897991f33748ce7059f954d439cec2b"}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x7) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000180)) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xb804000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x4002, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000180)=""/254, &(0x7f0000000280)=0xfe) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x10000) accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80800) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) quotactl(0x10000, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)="9f3c26cd73fbcff5759f3a25521b04256da48364f56c8248e610bf47a0991ac7d1497aa0e389efc65e7b9b82db79aa55aafb2c6b4f088334c1d9e51f6ff30e8180cc343483505dbe0e3941ba5848095ec282cfa77be7e67922bb1e1d435c84c07c7f1121809bf49cce0f9186f74096fb1bc6627e304326cc4f2590ca746592bc99b1cb80705bc290f8747f49fa30e3f51ce8b623e68665f062f619312bc359dc38d302e42f5fdf615bf4") r3 = gettid() sched_rr_get_interval(r3, &(0x7f0000000100)) [ 577.606233] block nbd0: Receive control failed (result -22) [ 577.614246] block nbd0: Device being setup by another task 14:22:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x100020000002, &(0x7f0000000000)) setsockopt$inet6_buf(r0, 0x29, 0x80100000000040, &(0x7f00000001c0)="10aa02a0f4e6b75e1bb9a6a61bf10b180c4823e0ea3c4c9b7a3ab949e1c95e2f815eab1cf0a5826a47f2be6c594808ce160334bc695bbf54c67d1b1e9b9909fc2fdce39c624c59ec168a186b70781f93a63bda86aea27e63", 0x58) 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x3000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1f}, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x1, 0x0, 0x0) [ 577.660168] binder: release 27432:27447 transaction 431 out, still active [ 577.667303] binder: release 27432:27433 transaction 431 in, still active [ 577.667742] block nbd0: shutting down sockets [ 577.683353] binder: undelivered TRANSACTION_COMPLETE [ 577.695168] binder: send failed reply for transaction 431, target dead [ 577.731951] binder: BINDER_SET_CONTEXT_MGR already set 14:22:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x400300}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x300}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x80000000, 0x1f, 0xebe3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21}}, 0x9, 0x6, 0x7, 0x101, 0xa4}, 0x98) 14:22:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') fgetxattr(r0, &(0x7f0000001240)=@known='trusted.overlay.impure\x00', &(0x7f0000001280)=""/225, 0xe1) accept4(r1, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) write$vnet(r1, &(0x7f0000001380)={0x1, {&(0x7f0000000040)=""/168, 0xa8, &(0x7f0000001480)=""/4096, 0x3, 0x4}}, 0x68) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000240)=""/4096) preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000002480)={0x1, 0xdf, "9868576970999827bb6c45963a4892fd11616ad0bb2a0384d0808ed5ee1f79a1659183562ec00a0dc5ba801b9a92552db80e74c7a224e457f3621f9f9572f13025f673cf8a3608b8fa33f4592cf74dd71347a18c48ca370a59dd25ae55152fd49bde0c57780318ff750ecb5cee8f9d2e05975ed724334855c675cd29b3d8e85d393f3c79bbf3780a43688e2a41354d4383f64898d8526ceea8ece446115ddc2268e8e66952c47b2381645932319af1acfa745efba72992f5871714c9d48a446ea63e40d2bc824cdbfe9a5e53ce944e84db491cfbe909151f9fd6e756a7a032"}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2e) io_setup(0x100, &(0x7f0000000000)) 14:22:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = semget$private(0x0, 0x7, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='lo\x00', 0x6}) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80) accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) [ 577.763838] binder: 27432:27459 ioctl 40046207 0 returned -16 [ 577.800128] binder_alloc: 27432: binder_alloc_buf, no vma 14:22:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1f}, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x1, 0x0, 0x0) [ 577.841659] binder: 27432:27433 transaction failed 29189/-3, size 0-0 line 2973 [ 577.866424] binder: undelivered TRANSACTION_ERROR: 29189 14:22:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xffffffffa0008000) 14:22:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000480)=ANY=[], &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0xfffffffffffff800) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getresgid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl(r3, 0xfffffffffffffffd, &(0x7f0000000300)="b006b47fe5d67846a39579518fe14791e8ebd47fcc7df2ebd09ce7cb57089460480deaefb34f199d72ba09b4d383ecf404f69a1045f5dee2d32e22a842a6e49864fcb741cdb6d0aa0677bd3a3389bab58c3f09686aabc80e0f51809cc7d48f062ef5964ce68d6fbcac568edf151e59fe50b33c4c074636e5b1") r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000003c0)=0xe) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000400)={r5, 0x34, "e499b79015fca93414bd2aab4e8828b76bdadc511b66f3ca37439e22ccabf06f7a0e580c3c12d1ad7b95f5557f6096736c5b3026"}, &(0x7f0000000440)=0x3c) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000040), 0x244) 14:22:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x48030000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/46) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '/dev/input/event#\x00'}, &(0x7f00000000c0)='/dev/input/event#\x00', 0x12, 0x1) 14:22:45 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x210001, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000440)={0x6, 0x8, 0x401, 0x0, 0x400, 0x6, 0x9742}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4000000000000, 0x2, 0x80000001, 0x4, 0x94b2, 0x8, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2}}, 0x1000, 0x9, 0x8, 0x6, 0x1}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r1, 0x2}, &(0x7f0000000400)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) syz_open_procfs(r2, &(0x7f00000004c0)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x80ffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0056ff03000000000000436eb40ceec7495ad06c711bef4fae4a7d91fc0e9ec6df412d127709d37b7dc1e383bd"]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="fcce686624ffc27f414ddaf10ce711fc", 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:22:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x8001) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) read(r1, &(0x7f0000000000)=""/143, 0xfffffe5e) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x8000, 0x7fffffff, 0x2, 0x9, 0x0, 0x100, 0x80000, 0x4, 0x1, 0x7fff, 0x81, 0x10000, 0x100000000, 0x10000, 0x100000001, 0x6, 0x200000, 0x4c, 0x6d7, 0x85a, 0xdc48, 0x44, 0x0, 0x5, 0xce2, 0x180, 0x100000000, 0x1, 0x1, 0x954, 0xffffffffffff8000, 0x3, 0xfffffffffffffff7, 0x8, 0x4, 0x4be2, 0x0, 0x100, 0x3, @perf_config_ext={0x40, 0x1f}, 0x40, 0x9, 0x1000, 0x0, 0x101, 0x8938, 0x5}, r0, 0x3, 0xffffffffffffff9c, 0x2) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000300)='./file0\x00', 0x7f, 0x1, &(0x7f0000000500)=[{&(0x7f0000000440), 0x0, 0x6c2}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7e9ed01b000000612eca200000c28db44dcc02669f3a2e0dfd04000000000000009aa8373509fa09b9c20b28b7c516ba1a7fdec769a2dfb6de363203cd98fa032c70df6492f9d6dc88"]) dup3(r2, r1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) unlink(&(0x7f0000000280)='./file0\x00') 14:22:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="552ffda1490f1b9be0742d80e58e924ff6fa"], &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000000080)='./file0/bus/file0\x00', 0xe0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) [ 578.083489] binder: release 27494:27495 transaction 434 in, still active [ 578.090481] binder: release 27494:27504 transaction 434 out, still active [ 578.102488] binder: undelivered TRANSACTION_COMPLETE [ 578.117377] binder: send failed reply for transaction 434, target dead 14:22:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 578.193576] binder: BINDER_SET_CONTEXT_MGR already set [ 578.199113] binder: 27494:27519 ioctl 40046207 0 returned -16 [ 578.224938] binder_alloc: 27494: binder_alloc_buf, no vma [ 578.228937] XFS (loop5): Mounting V4 Filesystem [ 578.248256] hfsplus: unable to parse mount options [ 578.248678] binder: 27494:27495 transaction failed 29189/-3, size 0-0 line 2973 14:22:45 executing program 0: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) tee(r0, r0, 0x101, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xe8030000, @loopback}, @in={0x2, 0x4e23, @local, [0x0, 0x0, 0x2000000]}], 0x2c) getresgid(&(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@un=@abs, &(0x7f0000000240)=0x80) r2 = dup3(r0, r1, 0x80000) ioctl(r2, 0xfffffffffffffffd, &(0x7f0000000300)="b006b47fe5d67846a39579518fe14791e8ebd47fcc7df2ebd09ce7cb57089460480deaefb34f199d72ba09b4d383ecf404f69a1045f5dee2d32e22a842a6e49864fcb741cdb6d0aa0677bd3a3389bab58c3f09686aabc80e0f51809cc7d48f062ef5964ce68d6fbcac56") r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x8, 0x4, [0x2, 0xf4, 0x9, 0x3e]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x244) [ 578.302377] XFS (loop5): totally zeroed log [ 578.323969] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.329717] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 578.362971] hfsplus: unable to parse mount options 14:22:45 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x4000000007, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8001, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f0000001000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 14:22:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48) 14:22:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r3}) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r5 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) r6 = semget(0x3, 0x0, 0x2e2) semtimedop(r6, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r7 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x80045300, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000002c40)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5ffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="c8c3822642625609b35166ff86bece4e45ba6e005099e00c82bdac3b201a408072834a9bbed1b4a4e84e0d066b072850e40603039b89d9074cb408aa9e52279ed93cbd8582417995a1ca953b93d0efcc01dc97feffed33aa51ab2919cf77737c30201fa2d8c34f498f8b3da940010c474919ca49da47085eb42c36ff67aa1c0c02cef0f5fafc1f6f59b35f0e59016ffcac91f68dae5fa3cc0248fc776124e52125c11bc7282eab83fd9dbc4763e52e94a2bc634e7f29e1c73d153af853d8", 0xbe, 0x8}], 0x20000, &(0x7f0000000200)=ANY=[]) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) 14:22:45 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x210001, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000440)={0x6, 0x8, 0x401, 0x0, 0x400, 0x6, 0x9742}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4000000000000, 0x2, 0x80000001, 0x4, 0x94b2, 0x8, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2}}, 0x1000, 0x9, 0x8, 0x6, 0x1}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r1, 0x2}, &(0x7f0000000400)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) syz_open_procfs(r2, &(0x7f00000004c0)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x80ffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0056ff03000000000000436eb40ceec7495ad06c711bef4fae4a7d91fc0e9ec6df412d127709d37b7dc1e383bd"]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="fcce686624ffc27f414ddaf10ce711fc", 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:22:45 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb21f, 0x80) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6f73322b737973384eda0170757365742d00"], &(0x7f00000000c0)='\\\x00', 0x2, 0xa6a405b970196b63) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fremovexattr(r1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x5, 0x4) 14:22:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x1f}, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 14:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x400000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 578.874422] binder: 27568:27569 ERROR: BC_REGISTER_LOOPER called without request [ 578.884122] binder: BINDER_SET_CONTEXT_MGR already set [ 578.890395] binder: send failed reply for transaction 437 to 27568:27569 [ 578.899212] binder: 27553:27570 ioctl 40046207 0 returned -16 [ 578.905322] binder: 27568:27569 ioctl c0306201 2000efd0 returned -14 [ 578.913758] binder: BINDER_SET_CONTEXT_MGR already set 14:22:46 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000e05000/0x1000)=nil, 0x1000, 0x200000e, 0x13, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x10001}, 0x8) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) [ 578.929283] binder: 27568:27574 ioctl 40046207 0 returned -16 [ 578.936196] binder: release 27553:27578 transaction 438 out, still active [ 578.956503] binder: undelivered TRANSACTION_COMPLETE [ 578.976894] binder: 27568:27585 ERROR: BC_REGISTER_LOOPER called without request [ 578.995333] XFS (loop5): Mounting V4 Filesystem [ 579.006824] binder_alloc: 27568: binder_alloc_buf, no vma [ 579.029886] binder: 27568:27569 transaction failed 29189/-3, size 0-0 line 2973 [ 579.053156] XFS (loop5): totally zeroed log [ 579.063360] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 579.077052] binder: undelivered TRANSACTION_COMPLETE [ 579.087346] binder: send failed reply for transaction 438, target dead 14:22:46 executing program 0: r0 = socket(0x40000000015, 0x800, 0x0) recvfrom(r0, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000001c0)) tkill(r1, 0x1000000000013) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) 14:22:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="013c003f23"], 0x5) close(r1) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendto$inet(r1, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000800)=[{&(0x7f00000003c0)="13ee8bc4a69718df8b905e24374ff95a53cf44b362f897d937d58e03e50d3c62b5e9", 0x22, 0xb467}, {&(0x7f0000000400)="aba8908d204935", 0x7, 0xe52}, {&(0x7f0000000440)="feb10b4c6f8b6dd37bf0", 0xa, 0x8}, {&(0x7f0000000580)="f871cad496a137ebedae0f34dbd33155b3c4ae633da411fa86d12d9319c47e9263982e3b8f5734db53ca1520057140b0309ee5bdbdbc05bfb5b12af70b7d4503acd22fefaaccc526bdddd1c5700d4b273c61d43781172b06cdc8d5e94c2b3747318730234b47fc40aeebcfab1c9388cf53ffabb5e7f2113b4097e8f4cc26a5", 0x7f, 0x100}, {&(0x7f0000001180)="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", 0x1000, 0x100}, {&(0x7f0000000600)="966af2ad6c2b7ddfe75077439d8030166030515e2682366d1c5c6c231205b2854f05595ed0eab4450858ee04a4aa8590b4c9120d03b4e63d32e1e31f28037965dfd440a4305115dd4a9287aaf5df4e047a077a7f8db1d6f165fb5ccb995fbdbc301b1cee916bb7605ede1fd8b4d50b79e6b6ad1aee6e052ccb62b075550a59da3ae210addcaebe2bba0a6149ba8e664e9f667da008102ba4a9ef698b9d3fbb7b1f30ca7888c967657ef1628bd7f273506d38c092f1b1b47d9421188e38429f9c78080ec2cfc7c09091a034d9d96f0178b7", 0xd1, 0x7}, {&(0x7f0000000700)="720493f418c03117a8875f8ff9616760edc2ad0cff0d0c9eea8b4fd5d46caa0b071e1ff66e77f5b13cac07b232fa79ecd92aa23576d42acfdd19177cf3707d5182757797ef6f0e78f9a6f3218e3deb5949ce97515865c19bfbfd842b59b708bbeb0136a549fc1ea76cd8abd4453f5e5444bed78f56e2f8e1829f63bfe698f8d83abbb067f7e843f3bb83e053e35a356c381400f937971a6ec7d8a973dcbe5056056d11168056a5e337f6060e4369aec8540aee4380fddbc541f173090fcc5a1f9e3b6ff5ea8eb0a6a70c113be7c86ba996256e70011149", 0xd7, 0x4}], 0x1802, &(0x7f00000008c0)='/%\x00') r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180), 0x2) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000300)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212013df5be9bcbfe72da65be7e471f32e2f66696c6573797374656d5c0a908fafd2f10b7f3dd163000000000000"], 0x2f) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000900)=""/216) 14:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x210001, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000440)={0x6, 0x8, 0x401, 0x0, 0x400, 0x6, 0x9742}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4000000000000, 0x2, 0x80000001, 0x4, 0x94b2, 0x8, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2}}, 0x1000, 0x9, 0x8, 0x6, 0x1}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r1, 0x2}, &(0x7f0000000400)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) syz_open_procfs(r2, &(0x7f00000004c0)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x80ffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0056ff03000000000000436eb40ceec7495ad06c711bef4fae4a7d91fc0e9ec6df412d127709d37b7dc1e383bd"]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="fcce686624ffc27f414ddaf10ce711fc", 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 579.508304] XFS (loop5): Mounting V4 Filesystem [ 579.519981] XFS (loop5): totally zeroed log [ 579.532704] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 579.608167] binder: undelivered TRANSACTION_COMPLETE 14:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffffffa0018000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r3}) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r5 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) r6 = semget(0x3, 0x0, 0x2e2) semtimedop(r6, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r7 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x80045300, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000002c40)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5ffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="c8c3822642625609b35166ff86bece4e45ba6e005099e00c82bdac3b201a408072834a9bbed1b4a4e84e0d066b072850e40603039b89d9074cb408aa9e52279ed93cbd8582417995a1ca953b93d0efcc01dc97feffed33aa51ab2919cf77737c30201fa2d8c34f498f8b3da940010c474919ca49da47085eb42c36ff67aa1c0c02cef0f5fafc1f6f59b35f0e59016ffcac91f68dae5fa3cc0248fc776124e52125c11bc7282eab83fd9dbc4763e52e94a2bc634e7f29e1c73d153af853d8", 0xbe, 0x8}], 0x20000, &(0x7f0000000200)=ANY=[]) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) 14:22:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7400000000000000) 14:22:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000fcb000), 0x4) 14:22:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="013c003f23"], 0x5) close(r1) poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendto$inet(r1, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000800)=[{&(0x7f00000003c0)="13ee8bc4a69718df8b905e24374ff95a53cf44b362f897d937d58e03e50d3c62b5e9", 0x22, 0xb467}, {&(0x7f0000000400)="aba8908d204935", 0x7, 0xe52}, {&(0x7f0000000440)="feb10b4c6f8b6dd37bf0", 0xa, 0x8}, {&(0x7f0000000580)="f871cad496a137ebedae0f34dbd33155b3c4ae633da411fa86d12d9319c47e9263982e3b8f5734db53ca1520057140b0309ee5bdbdbc05bfb5b12af70b7d4503acd22fefaaccc526bdddd1c5700d4b273c61d43781172b06cdc8d5e94c2b3747318730234b47fc40aeebcfab1c9388cf53ffabb5e7f2113b4097e8f4cc26a5", 0x7f, 0x100}, {&(0x7f0000001180)="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", 0x1000, 0x100}, {&(0x7f0000000600)="966af2ad6c2b7ddfe75077439d8030166030515e2682366d1c5c6c231205b2854f05595ed0eab4450858ee04a4aa8590b4c9120d03b4e63d32e1e31f28037965dfd440a4305115dd4a9287aaf5df4e047a077a7f8db1d6f165fb5ccb995fbdbc301b1cee916bb7605ede1fd8b4d50b79e6b6ad1aee6e052ccb62b075550a59da3ae210addcaebe2bba0a6149ba8e664e9f667da008102ba4a9ef698b9d3fbb7b1f30ca7888c967657ef1628bd7f273506d38c092f1b1b47d9421188e38429f9c78080ec2cfc7c09091a034d9d96f0178b7", 0xd1, 0x7}, {&(0x7f0000000700)="720493f418c03117a8875f8ff9616760edc2ad0cff0d0c9eea8b4fd5d46caa0b071e1ff66e77f5b13cac07b232fa79ecd92aa23576d42acfdd19177cf3707d5182757797ef6f0e78f9a6f3218e3deb5949ce97515865c19bfbfd842b59b708bbeb0136a549fc1ea76cd8abd4453f5e5444bed78f56e2f8e1829f63bfe698f8d83abbb067f7e843f3bb83e053e35a356c381400f937971a6ec7d8a973dcbe5056056d11168056a5e337f6060e4369aec8540aee4380fddbc541f173090fcc5a1f9e3b6ff5ea8eb0a6a70c113be7c86ba996256e70011149", 0xd7, 0x4}], 0x1802, &(0x7f00000008c0)='/%\x00') r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180), 0x2) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000300)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212013df5be9bcbfe72da65be7e471f32e2f66696c6573797374656d5c0a908fafd2f10b7f3dd163000000000000"], 0x2f) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000900)=""/216) [ 579.661473] binder: send failed reply for transaction 441, target dead 14:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:46 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb13296539860415a3a3d2580ccf43f0da4", 0x19}], 0x1) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000340)={0x2, 0x4, 0x0, [{0x0, 0x81, 0x3, 0x80, 0x100000000, 0x5, 0x8}, {0x3, 0x6, 0x5, 0x0, 0xdce, 0x100, 0x4}, {0x8, 0x2, 0xffffffffffffffff, 0x7, 0x8001, 0xffffffff, 0x968}, {0xd237, 0x2, 0x8001, 0x2dd, 0x660c6de5, 0x3, 0x8}]}) write(r1, &(0x7f0000805000), 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r2, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) read(r2, &(0x7f0000000000)=""/253, 0xfd) [ 579.805279] binder: send failed reply for transaction 443 to 27654:27660 [ 579.814152] binder: undelivered TRANSACTION_COMPLETE [ 579.819280] binder_release_work: 2 callbacks suppressed [ 579.819286] binder: undelivered TRANSACTION_ERROR: 29189 [ 579.829412] Unknown ioctl 43783 [ 579.844873] binder: BINDER_SET_CONTEXT_MGR already set [ 579.858174] binder: 27654:27660 ioctl 40046207 0 returned -16 [ 579.870712] binder_alloc: 27654: binder_alloc_buf, no vma [ 579.877243] binder: 27654:27655 transaction failed 29189/-3, size 0-0 line 2973 [ 579.941645] binder: undelivered TRANSACTION_ERROR: 29189 [ 579.953718] Unknown ioctl 43783 14:22:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2a600, 0xc0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'yam0\x00', r1}) 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8000a0ffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r3}) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r5 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) r6 = semget(0x3, 0x0, 0x2e2) semtimedop(r6, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r7 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x80045300, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000002c40)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5ffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="c8c3822642625609b35166ff86bece4e45ba6e005099e00c82bdac3b201a408072834a9bbed1b4a4e84e0d066b072850e40603039b89d9074cb408aa9e52279ed93cbd8582417995a1ca953b93d0efcc01dc97feffed33aa51ab2919cf77737c30201fa2d8c34f498f8b3da940010c474919ca49da47085eb42c36ff67aa1c0c02cef0f5fafc1f6f59b35f0e59016ffcac91f68dae5fa3cc0248fc776124e52125c11bc7282eab83fd9dbc4763e52e94a2bc634e7f29e1c73d153af853d8", 0xbe, 0x8}], 0x20000, &(0x7f0000000200)=ANY=[]) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) 14:22:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xffffff7f00000000) 14:22:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1f81bd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a6"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={"66696c7465720200", 0x4}, 0x68) 14:22:49 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x10}, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xfffff000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 582.279461] binder_thread_release: 2 callbacks suppressed [ 582.279483] binder: release 27679:27699 transaction 446 out, still active [ 582.292139] binder: release 27679:27692 transaction 446 in, still active 14:22:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x7, 0x0, "5e8453de11357a5015c0d11d782db470e504e3fa84739256360c6feaa6b550d2d7fe48a1a31079ef019d376ab9be444ea378fcdfbe683ef8807378f5f248a16bd0b8de850100"}, 0xd8) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r1, 0xffff}}, 0x10) [ 582.324659] binder: undelivered TRANSACTION_COMPLETE 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 582.354986] binder: send failed reply for transaction 446, target dead 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 582.442633] binder: BINDER_SET_CONTEXT_MGR already set [ 582.447971] binder: 27679:27718 ioctl 40046207 0 returned -16 [ 582.459412] binder_alloc: 27679: binder_alloc_buf, no vma 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x4803000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r3}) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r5 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) r6 = semget(0x3, 0x0, 0x2e2) semtimedop(r6, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r7 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x80045300, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000002c40)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5ffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="c8c3822642625609b35166ff86bece4e45ba6e005099e00c82bdac3b201a408072834a9bbed1b4a4e84e0d066b072850e40603039b89d9074cb408aa9e52279ed93cbd8582417995a1ca953b93d0efcc01dc97feffed33aa51ab2919cf77737c30201fa2d8c34f498f8b3da940010c474919ca49da47085eb42c36ff67aa1c0c02cef0f5fafc1f6f59b35f0e59016ffcac91f68dae5fa3cc0248fc776124e52125c11bc7282eab83fd9dbc4763e52e94a2bc634e7f29e1c73d153af853d8", 0xbe, 0x8}], 0x20000, &(0x7f0000000200)=ANY=[]) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) 14:22:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x1, r2}) [ 582.488905] binder: 27679:27699 transaction failed 29189/-3, size 0-0 line 2973 [ 582.521988] binder: undelivered TRANSACTION_ERROR: 29189 14:22:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0x4, 0xba2, {"1ecb3165ca49fe8563d089f113eb53ad"}, 0x0, 0xb21e, 0x9c}}}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x3aec7fe65d1b00, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x40, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000000)={{0x4, 0x0, 0xe, 0x8, 0x1f, 0xfffffffffffffffd, 0x6, 0xffff, 0x9, 0xf494, 0x401, 0x8}, {0x1000, 0x2002, 0x0, 0x800, 0x1, 0xf1a6, 0x5, 0x370, 0x100000001, 0xec, 0x5, 0x80000000}, {0x0, 0x16000, 0xe, 0x3, 0x8000, 0x3, 0x4, 0x400, 0x4, 0x2, 0x0, 0x400}, {0x11000, 0xf000, 0x0, 0x4, 0x0, 0x80, 0x1, 0x3, 0x3, 0x10001, 0xe8d2, 0x8}, {0xf002, 0x0, 0x9fd2e6f67ab43c40, 0x895, 0x8000, 0x5, 0x3, 0xe1, 0x9, 0x10001, 0x6, 0x8}, {0x104000, 0x7000, 0xf, 0x3, 0x38d, 0xfff, 0x0, 0x819, 0x100000001, 0x8, 0x585, 0x3}, {0x0, 0x2, 0xe, 0x1, 0x4, 0x7, 0x5, 0x4, 0xd9f, 0x9, 0x5, 0x100}, {0x6000, 0x10000, 0xf, 0x3, 0x9, 0x8, 0x29ed, 0x8, 0x7e68, 0x6, 0x8, 0xcb81}, {0x2000, 0x5000}, {0x2, 0xf000}, 0x10, 0x0, 0x6000, 0x400000, 0xc, 0x4000, 0xf000, [0x4, 0x8ca4, 0xffff, 0x1]}) 14:22:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x48000000) [ 582.724293] binder: release 27737:27738 transaction 449 in, still active [ 582.731760] binder: release 27737:27746 transaction 449 out, still active [ 582.741603] binder: undelivered TRANSACTION_COMPLETE [ 582.747785] binder: send failed reply for transaction 449, target dead [ 582.770672] binder: BINDER_SET_CONTEXT_MGR already set [ 582.776942] binder: 27737:27746 ioctl 40046207 0 returned -16 [ 582.783796] binder_alloc: 27737: binder_alloc_buf, no vma [ 582.790012] binder: 27737:27738 transaction failed 29189/-3, size 0-0 line 2973 [ 582.798203] binder: undelivered TRANSACTION_ERROR: 29189 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:50 executing program 0: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0xd0, 0x3}, {0x2c9}, 0x6, 0x7, 0x200}) r3 = gettid() ioctl$RTC_PIE_OFF(r2, 0x7006) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r1, 0x8, r3) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000140)) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r6, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 14:22:50 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x7, 0x0, 0x80000001, 0x4}) 14:22:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:22:50 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000fffffffe) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x46, 0x75, 0x1, {0x3b, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c182cb61a105dc8eb3225db13831f318587746467966f6e3b3a0643ae9d3"}}, 0x46) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sendfile(r5, r2, &(0x7f00000000c0), 0x542) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="164e9096ce016540627accafc3d41db9c916981893d5440ab73545e08303ad6c318837d35f2292a9798689962087eed30150286b08082d6b4c39248ed584992e1d80519d2cdbb81325cb69427160055ecabbdd738d10642a99a3ab75f00c13957af67f309b6af3cc00df5f98fcdfec2e266edde059804973710387b8e3c6b4fd0715d1c9aee90b13035813357bff93ce545186ae7817880c3433c69215"], 0x9d) 14:22:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1f81bd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a6"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={"66696c7465720200", 0x4}, 0x68) 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 583.123802] binder: release 27755:27764 transaction 452 in, still active [ 583.130761] binder: release 27755:27767 transaction 452 out, still active [ 583.143332] binder: undelivered TRANSACTION_COMPLETE [ 583.157681] binder: send failed reply for transaction 452, target dead 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 583.193526] binder: BINDER_SET_CONTEXT_MGR already set [ 583.198853] binder: 27755:27773 ioctl 40046207 0 returned -16 [ 583.217959] binder_alloc: 27755: binder_alloc_buf, no vma [ 583.225294] binder: 27755:27764 transaction failed 29189/-3, size 0-0 line 2973 [ 583.236056] binder: undelivered TRANSACTION_ERROR: 29189 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:22:50 executing program 0: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0xd0, 0x3}, {0x2c9}, 0x6, 0x7, 0x200}) r3 = gettid() ioctl$RTC_PIE_OFF(r2, 0x7006) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r1, 0x8, r3) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000140)) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r6, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 14:22:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x100000000000) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 583.451773] binder: release 27791:27792 transaction 455 in, still active [ 583.460638] binder: release 27791:27794 transaction 455 out, still active [ 583.469726] binder: undelivered TRANSACTION_COMPLETE [ 583.475001] binder: send failed reply for transaction 455, target dead [ 583.490107] binder: BINDER_SET_CONTEXT_MGR already set 14:22:50 executing program 0: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0xd0, 0x3}, {0x2c9}, 0x6, 0x7, 0x200}) r3 = gettid() ioctl$RTC_PIE_OFF(r2, 0x7006) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r1, 0x8, r3) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000140)) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r6, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 14:22:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 583.521703] binder: 27791:27794 ioctl 40046207 0 returned -16 [ 583.532611] binder_alloc: 27791: binder_alloc_buf, no vma [ 583.558168] binder: 27791:27792 transaction failed 29189/-3, size 0-0 line 2973 [ 583.574212] binder: undelivered TRANSACTION_ERROR: 29189 14:22:51 executing program 3: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x10) accept$packet(r2, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000001800)={&(0x7f00000016c0)={0x1d, r3}, 0x10, &(0x7f00000017c0)={&(0x7f0000001740)={0x1, 0x400, 0x19, {r4, r5/1000+30000}, {0x0, 0x2710}, {0x3, 0x0, 0x40, 0x4}, 0x1, @canfd={{0x3, 0x7, 0x4, 0x5d38}, 0x28, 0x2, 0x0, 0x0, "180778982108716562b6a454111e4721de45ff35db4fc154208e1e8efff43b399828c8817b96c8f36cd0efb84b5a0c36c2a1add1658c197fa05e2e885f0f7d25"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="453a5271e27ca7eb205d8879672473a9ac225025314023712183444c1a5b026869ad8fc27a3bdea3736cf32f11bd22d3feafb6e317a8990d35b402ef76dc87314987e787d6bf4a93c2a6519185b5821c469c577f6fbe62e4a4ce3516911b04b887c3316d6694fa72d4f4c6a128a00c5a4e41d1171c84942af83b3375af86261390781cad58682008872df39d2376a0e947ae03326edc2d3bb90c14389ef23aeefc7cbe4b75990d2709b265a7f721e576bc3e75c5740000000000000000000000"], &(0x7f0000000180)=0x4) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xa7, @tick, 0x800, {0x802000000}}) r6 = shmget$private(0x0, 0x1000, 0x78000040, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r6, 0xb) 14:22:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 584.234127] binder: release 27813:27818 transaction 458 out, still active [ 584.241549] binder: release 27813:27815 transaction 458 in, still active [ 584.243551] binder: undelivered TRANSACTION_COMPLETE [ 584.253684] binder: send failed reply for transaction 458, target dead [ 584.274702] binder: BINDER_SET_CONTEXT_MGR already set [ 584.280027] binder: 27813:27818 ioctl 40046207 0 returned -16 [ 584.298593] binder_alloc: 27813: binder_alloc_buf, no vma [ 584.311076] binder: 27813:27815 transaction failed 29189/-3, size 0-0 line 2973 [ 584.382699] binder: undelivered TRANSACTION_ERROR: 29189 14:23:21 executing program 5: 14:23:21 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX]], &(0x7f0000001340)=""/4096, 0x84, 0xfffffffffffffcd0, 0x1}, 0xfffffffffffffe24) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x4, 0x21, 0x4}, 0x193) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)) 14:23:21 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) r3 = dup3(r2, r1, 0x0) read(r0, &(0x7f0000000140)=""/11, 0x9) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x3ff}) 14:23:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:21 executing program 0: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0xd0, 0x3}, {0x2c9}, 0x6, 0x7, 0x200}) r3 = gettid() ioctl$RTC_PIE_OFF(r2, 0x7006) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r1, 0x8, r3) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000140)) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(r6, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r6, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 14:23:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1f81bd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a6"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={"66696c7465720200", 0x4}, 0x68) 14:23:21 executing program 3: 14:23:21 executing program 5: [ 614.262403] binder: release 27824:27836 transaction 461 out, still active [ 614.269422] binder: undelivered TRANSACTION_COMPLETE [ 614.269594] binder: release 27824:27825 transaction 461 in, still active 14:23:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:21 executing program 5: [ 614.312919] binder: send failed reply for transaction 461, target dead [ 614.329975] binder: 27824:27836 ioctl 4040ae77 20000000 returned -22 [ 614.352368] binder: BINDER_SET_CONTEXT_MGR already set 14:23:21 executing program 3: [ 614.357933] binder: 27824:27836 ioctl 40046207 0 returned -16 [ 614.367053] binder_alloc: 27824: binder_alloc_buf, no vma [ 614.374354] binder: 27824:27825 transaction failed 29189/-3, size 0-0 line 2973 14:23:21 executing program 3: [ 614.405174] binder: undelivered TRANSACTION_ERROR: 29189 [ 614.411569] binder: 27824:27836 ioctl 4040ae77 20000000 returned -22 14:23:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xff00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:22 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) tgkill(r0, r1, 0x2e) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="b781000073688b5400000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000000000400010000000404000001000000b7020000000000086a0a00fe00000000850000001c000000b7000000000000007a0000000000f500326bb826c8ef9bc8aa852d1b82aff893267b67938278a700227563390dba5871894c4c3920c85f2b4a29d1e3f2ba199db3c454701adff5e861e650ab619f690a3c2a0da86964249e390ebff0e0385b8df6691ae09eade7a1f993a6deb9b488762164c8130775c23a993fa8e6267bec64e1383c6b9d0441c27b2b9c"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, r2, 0x1}, 0xc) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000001e00)=0x1ff, 0x4) 14:23:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYBLOB="78d05f9a1700000000f3090032a95d960c2471cf9bd1aa1506000000d6cc943e87aed522b0bbbf2a41763c0b3e84"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xffffffffffffffe3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000000000000f1465ca15ef7c36cf8f61186db52dd7575dcbb68fe731502a62f0621aa5e6b0b87333380b65ca15b5ba266e948b2409d104f21272cecf21100894cb0637c692293f699f22ba476b624518fe4bae3c9b14edd5b6270deb27e648fb5ff0b84276ad0c4d0915c1f81bd0998ca26c92b98c740c9dab299d4a4f476e932d8b516fb33c92fb9e453a7bcb2e61c51ca2acb64d42cb7a2ff198588eba65a7916ae3696edb38293270d0fe5f1e5e3fc8a90dda7767ee932eaf3ac1c3d36a4308800df8efece63e2ad723c2f76c4b398bd703ef74ce5c846b1a741a8d13cad5e103e8e9107f2d2a7796a90a6"], 0x1, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r1}) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000640)) fstat(r0, &(0x7f00000007c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x2}, &(0x7f00000005c0)=0x8) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={"66696c7465720200", 0x4}, 0x68) 14:23:22 executing program 5: mount$bpf(0x0, &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode']) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x80000001}}, 0x18) 14:23:22 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x1bfb, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x1cd, 0x7, 0xffff, 0x5, 0x100000001, 0x10001, 0x10000, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r2, 0x1234, 0x1, [0x1]}, 0xa) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='msdos\x00', 0x20000, &(0x7f0000000280)='ppp0em0]cgroupbdev\'\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) 14:23:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x65, 0x0, &(0x7f0000000200)="72c94949c8191bb63db03c3391d450a387394158db19d5684d31900e6732ba8e4ece256a3da0a7fd7534a044fbcbe3e81c3b7fd1f1d37040a1152fa464de16cd4b2a38db99bfcf38175490be56b22eccaf7f7eb31870482d6fbcb2af8280557dbf5173ca8d"}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000240)=0x1f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0xffc, "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"}, &(0x7f00000000c0)=0x1004) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r1, 0x0, 0x20}, 0xc) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300), &(0x7f0000000000)='asymmetric\x00', 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000200)=0xe37f) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 14:23:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev={[], 0x1e}, 'veth0_to_bridge\x00'}}) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3e3) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 14:23:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0x4c1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0505350, &(0x7f0000000180)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0305302, &(0x7f0000000340)={{}, 'port1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@mpls_getnetconf={0x14, 0x52, 0x868982dd5c21e331}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000008300)=[{{&(0x7f0000002440)=@sco, 0x80, &(0x7f0000002b40), 0x0, &(0x7f0000002bc0)=""/226, 0xe2}}], 0x1, 0x0, &(0x7f0000008400)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x7800000000000) [ 615.148033] binder: release 27861:27862 transaction 464 in, still active [ 615.156594] binder: release 27861:27875 transaction 464 out, still active 14:23:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 615.210293] binder: send failed reply for transaction 464, target dead [ 615.244656] binder: BINDER_SET_CONTEXT_MGR already set 14:23:22 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00d\x00\x00'], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5c30617bf143a8a0d351c0c7d55407c483055ae7b8a54ad073c22d9ee0c0b1dbc0f8dd1e83168a94681d6fa66f42d31f2dc0bd5f3e603c0ec402a97c6b4089c23726d33ae8df753a93ec165eb77d596246e4fec7c2a1480cf5ff3f34c6a5d0f90b838bccc6a17416511845108de56838c42035e12c75ed090104753d26bfd023a3235f630be90a329e3c2d7a5ff2188655ef1298003d09a3646dc84ec2d69e4a61b838cb67102191c16c907e4d17371b349b35103819747f92e03cfea194df109dcab17b3c4c7025a7d6cbb679a6409a5f634dadc7789dc92ed1359e547114536c6abd06cecca055b46322060c8b1f9e891c5ff426c9048ed9a90fe386ee"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r2, &(0x7f0000000280)={0x2, 0x2004e25, @local}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077fe94e781219960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac01ff0f000000"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a00)={r4, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r7, 0x402, 0x413) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) getdents64(r7, &(0x7f0000000340)=""/57, 0x39) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) [ 615.255798] binder: 27861:27890 ioctl 40046207 0 returned -16 [ 615.277129] binder_alloc: 27861: binder_alloc_buf, no vma [ 615.296882] binder: 27861:27862 transaction failed 29189/-3, size 0-0 line 2973 14:23:23 executing program 1: r0 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) getsockname(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) 14:23:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xa0018000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818218e5a080000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r3}) setsockopt$inet6_int(r2, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x890c, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x2, 0x0, 0x0, 0xe003, 0x33c, 0x2, 0x8, 0x0, 0x0, 0x8]}, 0x75, r4}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c0270, r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000300)) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000340)={0x20}, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x0, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000500)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x348}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:23 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000680)=@ethernet={0x0, @random}, &(0x7f0000000700)=0x80, 0x800) bind$inet6(r3, &(0x7f0000000740)={0xa, 0x4e23, 0x100000000, @local, 0x20}, 0x1c) setresuid(r0, r1, r2) futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000048000), 0x0) 14:23:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000380)=0x2) sendto$inet6(r2, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0x0, 0xe603000000000000]}}, 0x1c) [ 616.056857] binder: release 27907:27916 transaction 467 in, still active [ 616.064381] binder: release 27907:27922 transaction 467 out, still active [ 616.083848] binder: undelivered TRANSACTION_COMPLETE [ 616.096357] binder: send failed reply for transaction 467, target dead 14:23:23 executing program 5: r0 = getpid() getpriority(0x107, r0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 616.139603] binder: BINDER_SET_CONTEXT_MGR already set [ 616.165596] binder: 27907:27922 ioctl 40046207 0 returned -16 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$bt_hci(r0, &(0x7f0000000280), 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0xfff) [ 616.195845] binder_alloc: 27907: binder_alloc_buf, no vma [ 616.204452] binder: 27907:27922 transaction failed 29189/-3, size 0-0 line 2973 [ 616.205191] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 616.228196] binder: undelivered TRANSACTION_ERROR: 29189 14:23:23 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00d\x00\x00'], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r2, &(0x7f0000000280)={0x2, 0x2004e25, @local}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077fe94e781219960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac01ff0f000000"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a00)={r4, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r7, 0x402, 0x413) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) getdents64(r7, &(0x7f0000000340)=""/57, 0x39) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e21, 0x10001, @ipv4={[], [], @local}, 0xffffffffffffff00}, r3}}, 0x38) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) 14:23:23 executing program 5: set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 14:23:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x4803}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 616.459504] binder: release 27972:27973 transaction 470 in, still active [ 616.466611] binder: release 27972:27986 transaction 470 out, still active [ 616.490275] binder: undelivered TRANSACTION_COMPLETE [ 616.501152] binder: send failed reply for transaction 470, target dead [ 616.525592] binder: BINDER_SET_CONTEXT_MGR already set [ 616.534249] binder: 27972:27990 ioctl 40046207 0 returned -16 [ 616.540640] binder_alloc: 27972: binder_alloc_buf, no vma [ 616.547665] binder: 27972:27973 transaction failed 29189/-3, size 0-0 line 2973 [ 616.556098] binder: undelivered TRANSACTION_ERROR: 29189 14:23:24 executing program 0: syz_mount_image$ntfs(&(0x7f00000002c0)='ntfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="f569642c", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 14:23:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xa7, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000180)=0x3) 14:23:24 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xfb, 0x0, &(0x7f0000000140), 0x100000000000007f) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000000c0)={0x17fc0ed2, 0xa46e, 0x8, 0x400}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$KVM_RUN(r0, 0xae80, 0x0) 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffffffa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0xfffffffffffffe7e, 0x0, &(0x7f0000000000)='r'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xec0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 617.023738] ntfs: (device loop0): parse_options(): Unrecognized mount option õid. [ 617.027535] binder: release 28001:28004 transaction 473 in, still active [ 617.031799] ntfs: (device loop0): parse_options(): Unrecognized mount option 0x0000000000000000. [ 617.038490] binder: release 28001:28012 transaction 473 out, still active [ 617.047435] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 617.055127] binder: send failed reply for transaction 473, target dead [ 617.087661] binder: BINDER_SET_CONTEXT_MGR already set [ 617.089107] binder: undelivered TRANSACTION_COMPLETE [ 617.117968] binder: 28001:28017 ioctl 40046207 0 returned -16 [ 617.125299] binder_alloc: 28001: binder_alloc_buf, no vma [ 617.132675] binder: 28001:28004 transaction failed 29189/-3, size 0-0 line 2973 [ 617.133853] ntfs: (device loop0): parse_options(): Unrecognized mount option õid. [ 617.147993] binder: undelivered TRANSACTION_ERROR: 29189 14:23:24 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00d\x00\x00'], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r2, &(0x7f0000000280)={0x2, 0x2004e25, @local}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077fe94e781219960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac01ff0f000000"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a00)={r4, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r7, 0x402, 0x413) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) getdents64(r7, &(0x7f0000000340)=""/57, 0x39) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) 14:23:24 executing program 1: r0 = eventfd2(0xb4, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40000000000, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x0) 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8000a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:24 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x10000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000640)=""/4096) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x6, {0xfffffffffffffffb}}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x366, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setgroups(0x40000000000001db, &(0x7f00000000c0)) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0)={0x10000, 0xbd56, 0x8, 0x7f, 0x1, 0x31, 0x5, 0x9}, &(0x7f0000000100)={0x9, 0x400, 0x3ff, 0x0, 0x0, 0x2, 0x2, 0x5}, &(0x7f0000000140)={0xffffffffffffff81, 0x81, 0x9c, 0x401, 0x8, 0x9dd}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={0x29}, 0x8}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001680)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x1e32}, &(0x7f0000001740)=0x90) 14:23:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) write$P9_RREAD(r2, &(0x7f0000000000)={0x74, 0x75, 0x2, {0x69, "673921891d9605565dd0c1e2e8679bfbce06668bbb7122dfe706c3883a4e9c67d857f266689ca575e576bd2c28a2c7b489b459a9a846a35e579271ee837021544fb0101ab86c1bfa8889f4564bd6039a2a4f52d5f3ac4477217de30a65a35b0254c26c4002ed7f4f6d"}}, 0x74) 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xff000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 617.182045] ntfs: (device loop0): parse_options(): Unrecognized mount option 0x0000000000000000. [ 617.208924] ntfs: (device loop0): parse_options(): Unrecognized mount option . 14:23:24 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x3ffff, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="438ea916bf724c039aae", 0xa, 0x7fffffff}], 0x100000, &(0x7f0000000180)='/dev/vcs\x00') clone(0x4024100, &(0x7f0000000780), &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x181145) 14:23:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000080)='wlan1\x00', 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x330) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000a000000000000000000000000000000000000000000009df955f7a041a220f7f2bd441228000000000000000000000000000000000000000000000000000000627ea051ab464e3d2e7cb3000000000000080000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) r4 = getpgrp(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x4, 0x200, 0x0, 0x7}) waitid(0x1, r4, 0x0, 0xd, &(0x7f0000000140)) close(r3) close(r2) 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:24 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1000000000) fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)=""/171, 0xab) [ 617.352952] binder: 28040:28050 transaction failed 29189/-22, size 0-0 line 2834 [ 617.373384] binder: undelivered TRANSACTION_ERROR: 29189 14:23:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:24 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa0002ffffffffffb9f6c8ac612ffb00000009aaaaaaaa00000000e90000000000000000000000"], &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) 14:23:25 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00d\x00\x00'], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r2, &(0x7f0000000280)={0x2, 0x2004e25, @local}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077fe94e781219960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac01ff0f000000"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x19, 0x80801, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a00)={r4, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r7, 0x402, 0x413) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) getdents64(r7, &(0x7f0000000340)=""/57, 0x39) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) 14:23:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000943ffc)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0xfffffe24}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'eql\x00', {0x2, 0x4e20, @local}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x16) 14:23:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000200afc8ef372b323c55c77126d97c7776c5ab36df34c26ba775802b28484c0d907a43312ee9e2e075d79462051c3b8fefcb6b9c15729485c8c067b7416c417137d4da108771569531fbd1"], 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f00000000c0)=""/232}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x481, 0x0, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) [ 618.104858] binder: BINDER_SET_CONTEXT_MGR already set [ 618.114226] binder: 28040:28088 ioctl 40046207 0 returned -16 [ 618.125053] binder: 28040:28088 transaction failed 29189/-22, size 0-0 line 2834 [ 618.135371] binder: undelivered TRANSACTION_ERROR: 29189 14:23:25 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x61) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000540)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x4, @remote, 0x26}, @in={0x2, 0x4e22}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0xffff, @multicast2}, @in6={0xa, 0x4e23, 0x80, @mcast1, 0x80000000}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @multicast1}], 0xb8) dup3(r2, r0, 0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x74, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000140)=[@flat={0x77622a85, 0xb, r3, 0x3}], &(0x7f00000002c0)=[0x78]}}, @request_death={0x400c630e, 0x4, 0x3}, @clear_death={0x400c630f, 0x0, 0x4}], 0x41, 0x0, &(0x7f0000000380)="6b88ab535574d6cd4b9a58b26f537ada34a7f81725f23a35b01caaf84f5fc7a21263dc034538521589b9c1c535eea07ce2d23c85c87d4692b167c6ecb78cc8f521"}) 14:23:25 executing program 5: mincore(&(0x7f0000601000/0x600000)=nil, 0x20c01000, &(0x7f0000000080)=""/144) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x100ffe, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000001c0)="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"}, 0x10) 14:23:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x81000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xc00e}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010020}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1bff86ea362a2add1f4a4fffd59aadf721f02bb29065734952f23ddc73a4b9abe9627521d033fe8cf8c5ebc4d819eced08000000000000009208fdee759a58d95908b75cf4d1e69a24947b64ab10e341963c02eb7da5dea80b9b6962cfc8a52576ef10b1b14a0fbaaa90b3e977ff6b6b2488513c81eb89cf970e4dead25fa9c5d00d0c5389e76d0f15fe1800739107a7c27053280a8dff2881da54", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044850) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x186, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x1fe) 14:23:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x4b8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 618.275552] binder: BINDER_SET_CONTEXT_MGR already set [ 618.284931] binder: 28107:28116 ioctl 40046207 0 returned -16 [ 618.294818] kernel msg: ebtables bug: please report to author: entries_size too small [ 618.303512] binder_alloc: 28107: binder_alloc_buf, no vma [ 618.311903] binder: 28107:28108 transaction failed 29189/-3, size 0-0 line 2973 14:23:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000015c0)={{{@in, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000016c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @empty, 0x9}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x181}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x1}, @in6={0xa, 0x4e20, 0x7, @local, 0x9}, @in={0x2, 0x4e23, @multicast2}], 0xa0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007011dfffd940101830020200a000900000006000000600000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 618.331693] binder: send failed reply for transaction 479 to 28107:28116 [ 618.350300] binder: undelivered TRANSACTION_COMPLETE 14:23:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x8001a0ffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 618.374068] binder: undelivered TRANSACTION_ERROR: 29189 [ 618.397560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 618.407589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 618.431723] binder: undelivered TRANSACTION_ERROR: 29189 14:23:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) set_thread_area(&(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x8001, 0x800, 0x100, 0x5, 0x5, 0xfffffffffffffa04}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000380), &(0x7f00000000c0)=""/33}, 0x18) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xc00e000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090000000000000000001d0000000000000000000000f499056591c5b6f3b3fc2b7a5b8da81138c2ae"], 0x1c}, 0x1, 0x0, 0x0, 0x100000000}, 0x0) fadvise64(r0, 0x0, 0xff, 0x7) 14:23:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000440)=0x0, &(0x7f00000005c0)) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffff, 0x4, &(0x7f0000000540)=[{&(0x7f0000000200)="69595fdfc682eda51d0f877599389053d1f7dd79476ff57cec6565b599b52adea5f3f4f942d55af6129611fe69766fba36e8d98c79166a978818b685c0625ab5a5a46d5ec5b7b306e0", 0x49, 0x1}, {&(0x7f0000000280)="5bff250505106745d63b72edf4cb6d0ecd90eb992c0ac8df46dbec00e2ec8b18b3893ac2b6c65b58f0f4e15cc34c880a80be1b7fb47574931239aa18baf7926fecdcc960568c94c13db5785b7c7fac00d83afcd867f7adb534448dd2cabd13d38b1e65329257b34f60b1f6a55053933a4cefb79e823c1ef5c12d7df20c6dbbc77fcfa1689a8cd59133cdc72a867f530a37fd7ca9e3bdba3483eebd06911f0cb5ab4a737d5687e47d6494b1b3c436e8be88a93ab9630d3b807d7217fd0fde0c9be9a8bc1ff7a184f402045ab4c8afadd11545705c75c9d192a919270c9ac8d15c31ab18e960f5480dbb", 0xe9, 0x800}, {&(0x7f0000000380)="c315eb2f90fca16e6051226c263e2f0eadc223c70c0d04a0e5533d4df2ee6f42d5a67711db785cdbc50d5f6655677a3cdd6aa74c19c4c6f4f18e7cf0defcd0c11f46c7aaf371bbb34804b48b72dd0aee6891041c6ed649f9c5e80080d4641d69fef1b6e0a758ae2df21c64a5a66135ad90c0bd7c45aeb1f54c1ac17c058e3b893ada905deca23ff5bb840c15f2f6ad6ca67151076440949367", 0x99, 0xc25}, {&(0x7f00000000c0)="df19ef7cb5c684016951836c63", 0xd, 0x1}], 0x800, &(0x7f0000000600)={[{@fat=@nocase='nocase'}, {@dots='dots'}, {@fat=@check_normal='check=normal'}, {@fat=@uid={'uid', 0x3d, r2}}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}], [{@subj_role={'subj_role', 0x3d, '\'eth0.^'}}, {@subj_user={'subj_user', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit='audit'}, {@subj_type={'subj_type', 0x3d, '^/lo'}}, {@euid_gt={'euid>', r3}}, {@permit_directio='permit_directio'}]}) 14:23:26 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 14:23:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x6, 0x805, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = dup3(r0, r1, 0xbf1a9687e9b25e5c) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 14:23:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) set_thread_area(&(0x7f0000000040)={0x20, 0x0, 0xffffffffffffffff, 0x8001, 0x800, 0x100, 0x5, 0x5, 0xfffffffffffffa04}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000380), &(0x7f00000000c0)=""/33}, 0x18) 14:23:26 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x608}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xf0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000800)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000940)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2002048, &(0x7f0000000980)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@mmap='mmap'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_uid={'access', 0x3d, r3}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}, {@msize={'msize', 0x3d, 0x3f}}], [{@smackfsdef={'smackfsdef', 0x3d, '\',security'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@euid_lt={'euid<', r4}}]}}) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:26 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000feffffff1edaaea25b8ab856e52adfe344022e1ede4bc4263561792b43d7f2bac5b21c19fc8908270040c8ada9f1d84fe555ed97ffcc80986ded154ab848c5a94272d9401101ab0b657267210d0d18f132f036768963f8ea82f05687daf902e1ee680775a2af4bf8c00fa35e97520fd642925bb8d44ec8abf9f82dbf8208e08ef98d9df6d280b106fa564d5b867927e29066a8a5ae5117bbec31c90224dd2094c51c93d74022eb372daf2f5310693adfa1cb1db5be2c1d6c64a7b8cb624de6175c365b"]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={"736974300000000000000200", @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x200000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@gettaction={0x94, 0x32, 0x220, 0x70bd2b, 0x25dfdbfb, {0x0, 0x4, 0x6}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffa}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffc}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb4b}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf35}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 619.134607] binder: send failed reply for transaction 482 to 28147:28161 [ 619.141604] binder: undelivered TRANSACTION_COMPLETE [ 619.146721] binder: undelivered TRANSACTION_ERROR: 29189 14:23:26 executing program 1: socket$inet6(0xa, 0x3, 0x7fff) r0 = socket$inet6(0xa, 0x6, 0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x1, 0x6) getsockopt$inet6_buf(r2, 0x29, 0x4b, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 14:23:26 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2b, @rand_addr=0x954, 0x4e22, 0x1, 'ovf\x00', 0x0, 0x4, 0x31}, 0x2c) r1 = socket(0x13, 0x80005, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7fff, @loopback, 0xfffffffeffffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0xd8f}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22}], 0x98) bind(r1, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x2, 0x2, 0xfa6d, 0x7, "6ec0b45741f1e97674d50fd09745b8fb336b2103a8ef2a0510546db05e4fa5229bc36f3df73a258ae469cfa9bbff7834f8fd23f0ed2fdae2e8a84a573c2166", 0x1f}, 0x80) [ 619.203066] FAT-fs (loop4): Unrecognized mount option "subj_role='eth0.^" or missing value [ 619.251108] binder: BINDER_SET_CONTEXT_MGR already set [ 619.270318] binder: 28147:28179 ioctl 40046207 0 returned -16 14:23:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_misc(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x1004) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0xfffffffffffffffe}, &(0x7f0000000200)=0x8) ftruncate(r0, 0x7cf) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000740)=""/4096, 0xf2ff}], 0x1) 14:23:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0xffffffff, 0x200) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000b80)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x5, 0x30}, &(0x7f0000000a40)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={0x0, 0x7}, &(0x7f0000000ac0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xe1, @mcast2, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="ee7e2041f4986dbcdef3e4f4d6dd510f0edf6b9afdf26167721ac3c1b3e92231f4d6e1fd38a4056e9f8dbf46d7457104449b477da5ce7d1682b41b89dbf9cdbb634403bd23b35017d31cfe07aafbfbdadcccf7031c42c5ed100ab7ad8dec5aae2c46f140980eb0dd08eb851e87364a0b89b58a37ee7806c3b00fcbba15c8358e8fb390bc9471251d856619d95c1d131d0220307538615a115b5b3b355f72b7e9a0460cc213a3a2841f18e5d8c77e3609e0f48ace95721f65", 0xb8}, {&(0x7f0000000540)="c4121bbc4dfab5bb71730aaea55b999d6bf714ff07f19186dfea069d75d44b3891235d630fa9a13c4992647342e1b2cd51ba4a1d810e4ddfd9fd8e1670beaf5f64b5fc4b3434b7591c7ad6895a7215058a4c43a3a0917a159312730a6b1811ea7f245ae26e54d0575c37", 0x6a}, {&(0x7f00000005c0)="d5af868738466068210b89a7946a0993aeecca5f871d42267e9f13055a09489d4033be32d124ab0b0f6a46eda599623b1cfad1990584dfb16857809a65ae1a33b9b0cd751d2e7bbc47d78c5769920984f06560556ebb47e7c60f946def2ce1cef13b726191640be7d0bbce451e36abea4332085e784328f979e1a8f7d67b61828771ac25a490fa1f32d643b11021e4e8e3c6b00b7121bddcd86d534fece124c3c645c4e2bd1ebfe60e1f3bdfacbe306bf964", 0xb2}, {&(0x7f0000000440)="8b30b12951cbcf3987d0f20948395720036faaf3eada8b32f9acfb277bdd2b6070cf1ad94fb8b10d44a889", 0x2b}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f00000004c0)="0d54a4a99679af0f631e4e232caa57c1c6350e", 0x13}, {&(0x7f0000000780)="9acc712747dd90138847c9c2b2f2ee34a182aa4705e861603c37725141992c9fc9b114e5a3e08d88c59c5c68ffad8f34b86a04971b66dcca763c653703dc7b03fc294fe34287a6f477cdc2ef655f7b6e6d14a0c3bead917d6e521980130358c5e8bde82f2a8ac378ea3cd404aac7c0a8817b1c", 0x73}, {&(0x7f0000000800)="0502b095dc103355dc073f2a9513e743830a8397423e9673066b2fda72c21e8b5baa6a7ad8db40373825855b460b4a", 0x2f}, {&(0x7f0000000840)="22225ab53c688cbb86fff27b7f6eca45f05234be53f389a4f25626d0946fa9c1961045f2913eb6db7d0a68e4fa06fcbc1fe8da70b688f43722147a519e7f9216219dfa692329c5f61fe634b2be0f13bc6192c319c6c56772521d63b30a2f47f0709c86a8f32cdb5181b90851d4050efb0dec2f78ed3d23a05df24d7a808db853698571ca714409d792b48ca0189c8c88af417987c86f7caa0d0823b5a5600e6525e73765e7297b93b9b3fc23c5b1b4541fce88a0de920e6c92d52f8187aa157db82e705649a323699e84ce64496f6f", 0xcf}], 0x9, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0xa, 0xf2, 0x401, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x2, 0x80000001, r4}}], 0x40, 0x40000}, 0x4c080) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) readv(r5, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x10024}], 0x146) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) rmdir(&(0x7f0000000100)='./file0\x00') r6 = getpgrp(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x3, r1}) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r8 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r6, r7, r8}, 0xc) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 619.295964] binder_alloc: 28147: binder_alloc_buf, no vma [ 619.321556] binder: 28147:28148 transaction failed 29189/-3, size 0-0 line 2973 [ 619.382232] FAT-fs (loop4): Unrecognized mount option "subj_role='eth0.^" or missing value [ 619.406317] binder: undelivered TRANSACTION_ERROR: 29189 14:23:26 executing program 4: lstat(&(0x7f0000000000)='\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) getgid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) setgroups(0x4000001f, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) fanotify_init(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x100000) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2, 0x59}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0xbc, r1}) 14:23:26 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001480), &(0x7f00000014c0)=0xc) syz_mount_image$nfs(&(0x7f00000001c0)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x3, &(0x7f00000013c0)=[{&(0x7f0000000240)="d489965721d563f89dd392befb3ce467096d66cb56c532b6b16e10e8ede15585454d4f9d87e190b18e59726e0c55d815955cfa469c5fb12727c315b62d10b04698e16a0377c073a37f85da00ccdd4a666f56d07c688f89d38f57789b3883d6c0c3b6f6290b292e50e47b4bd4691e74d48770feb2c41dc4376537809cf06c77257f633bfe41", 0x85, 0x100000001}, {&(0x7f0000000300)="a93dd52c5e65575dd9a43bd2d14d0856db5f8042fe0e71bac908a681c0b5aadcfa5b0fcf640bc33f826c52fce2195b7537bd70d6d109d26ae378928f89d2369cd4b9c17cef2a08465b6d64d719898a11adcd285aa8ce2be0b43326965faf75054ebb4f5c8f954c89c274f5961eb9ea13bc55a0b789ab6bf9dc0f541e4006ad36daf4311d8da0194b7d44a2d4fda905f69f9f028c030a267a6fd867d65375be2674803367d8ee89469b6156814a7a3dcc23519c30e813adec841367fe73b2ab", 0xbf}, {&(0x7f00000003c0)="b8a80a3b47fa0018096ea5c659319dca54ffa2bc73825acb40162117fd2556104d12216353e2868f6312343346d37499608a8cb165fccf6d9f5e6895123bb0df74a42bebf1d132d933a27d65f127bc0676955b7784c1920582f13592449571d4b1ad0ac5ad2afe43893ce1e048dd347861bf70acd8def2a4dfccf8df47aa69108902509ca9f6262638c82d3240dd57def76c3147e4ecf70a6578723e768b4cea0e9395ae8ac8e04e6d6ba64705668affda0ffdd494558caf32ab99d4bc980319ddd146cc6a39b6fcb88be42e268a3bd6e93aca69e4249b7ea344d285fa00cd80477a775438c96331c4d653c32dc2dd48e9ab718c47fc6d731928fab9a3cd3e50ea6492afe2b9eba3a5465481cc6c39e0ac1ca1a70fd9b9fc55edd5ae33c0fcf48f87b6532b836a47ac959b67644cc2def1ddc3b0bcc65093e43b27ca90411a10f812b2b3757bb3fd7d4fa500777c3f28a0e748ab70cbd1feb77d08ecbcc1a325950068eacefd5dca8959b1f8493bbe7cfde0fdef41f9ff6761fd106851478ff99525f7d5e4597ae31056f1784382a8ab86f3021f4b922172e5e106035f9f42af3cd1106c19b53a006040d8f2807599bda4d89c3b304a7d8b2a68c7b51669714d3f5c7c50d0776fe82569690aaa8ea1d683c14ad95cf30cec988c45a6ab15b4441d45a82f40fead25905012fadfa3cef961fbae9eeb9779d9361292a220bd582ad2ab1f672365b65886d57d9a702c78aa4ac774e7cd23bf98da803a869f590d532c2961447c0d83bff2f48dd73b37cb236eff5f1e2a7ef9296e2016cfce3d3b4b248c3f1a3107408e5f088dc4fa7854c7fc7d251ab1e92e5ecd2b927be23653f7d0aa238fa671e4da6c5c43621e5a8bf72538bddc6c28c99ee1ab70af1d9f4b0b8f1f4351d1c788627a9630573cc6e0ef8422d75cd2b4c71a4179ec04b4f3621c4fb1def3f17d6b54146347f72a1ba5b9459748952eabbbbdf196d31d87f1494b6baf9e49662e8e06c70c490f924be2d30caf09552fc31b4eb41e49b0b4149e2bd8d45ef3cf821a44b5c6bf858303f4acb04e8c8c1c3808129e028e89852b8ddc8df6aa3867cbe5e644dc5a9809aabc323ad07fb4bcb014e80320a939327345567c9193df20841f7824bfaf6110db2ff68ef7924568188b2604c47987d709b8129de65397e88eafbeffc1e44392ac8524f7961986169e7b59b659c1309139c93f2c8f2d08d39d8cd4a421ad5ee71b17ff13715232695f6d39c8420a77221a4e1b7edb8be860d77075337d12d4fcdf7d3de952cf0018225b6c9da261c19856d6d90137d64dd885b1456ae67a6380f31b0304985d4fbec27c22d21d5004b9cd413bbaae8216938c764516a38e1c58466e462c699edf436596f004d8759b57214577f90384edaea9a62ca4a6968c335dc0241fdaf4a985f1f40026bcc91e24c6b3307ec0bba6425638695376f50ffe1fe931b52932db82e457104f0b9170027bf8fb8fb620502c2b9839526d2a54c8d44ac917c66af0d22d71b70469665a76c51f4c3b3626d343163d1c7617bf592ba602190e4b853f2f6167e6d092640401ead758d017fd3deccdf7012f33f4325d0ae41406a077fa2b93356754dfa84db7f46e432874b6cf3fec1f5f2e551a46afed3ebc1bddf9b6675901de96494ce111382ba2ca286d010758b0ba752a665b39ec1dd3572751873606e37f70fc625c99d3eaecad272703c0a29de97e167f6e5e45c56673778aef3e5c2a58f08653abbca452fd656fbb70a7cbc81186352fb1613711c99ad06057a175c4e8a690aa4a80957a10d6fecee527f14609636eb3f33ac980f8c8c655e952fe142aff26937d00476a55e05373990910eb1e1c981b24bce44e05aa980b4f13487a4c579b1ddf696600229d75ba3a72ed71277dc3eeea5e6b72d09ac8c3430c4b29db1e05a04485b8839010b883ec0b1548abc22a2a6eafbd1d112850ccbaed00b5fa22d96d27a6a36061a5997f987f4a0b5a270440b929e7ebfc3abbba1ee7cb122324a7ddf24f67ffdba36f75e144171801a07b8dde8e975d2338e4af83a082b26714375bf895022b4a63842f2525c3da88a01e5b4a78b0d2fe5e005990632edc652c898da189ac614441ff60ebc6afd15ed5035b4f8b3ae13b4f356fd393023865b3e7f6c80737111300701e38dc53ba2ecf20f42b3d9c987ea8334d8ca7a3131826b4726dc17b053aa74adce875c8442ace8d43ecc36e8e96bf7f33b6fea001eff791337345025b47092f85baf9ba751ff3ed28503d298a1ffd911f3f2b67ed98e347e212b1119cf090556e059a45b47d5214149e646fea38b9439306d0622597b7549b2ce9a8b8acc849a0f8e6853a08674c2d35fcf06d7828108952c5f00210c48d5fb77e49342733618ffd3525e7893ae401089851810e2628aea543abfde89305808ec965f02d3a36219b519784e19a0969b903791732ebda7f5ab85b2a2e67496b133fe6f4fb7314d0997d828d0aba46cf3c8ec7687c223bb5c745c78e67a822e46d87b7dcac64bc36772c43bdad901a432fb5250b683b52f8543ec0d22b2b317d8dfe288846a5cf360e2f458d922ea522d0b286e178b232391b459f2034b12139ff91166bf4067aefda81c6b18725274294aa57cbf6186a862730bea21bb09d38a9e6b739601dcb77463071705106973a1cdc310a64b6e63fc004ae6fb4a3e59115e5cec4ca8c2cdc9d17bc804230d378581138ae6344d398b44160d292a4852c979bfc130aeee24afc40371780d4b377bd22f119cfeff6a49b495f01068fda2986c01be192c6aa14b9ba8b57c013be742f4ce676187d07f00e9c0691a6ba0831105d64dbbccb6a72fea5c4b55133a80294fa2ae32eb72d33b76590a5b2b297381fa48ea30cec971cf9de5dc82ee235007204e4da15901340d6fadeabd2e5ec12d932e16f6eec6a771d1719487349867bf53ed126e747ff60993c0caab91cbc46ac7c13cb2377131d00cb16fef5380c70c43a7351bb29764e82ddb92c646f1bef49ccbc6bcc6636a3627bebec713ca4c875457f36e1946b581fea448a96057904fc97e26cb1ae93ceb58948d93e41e7d255847465834abfe2db3d18ac78d36346be5a6d80b892ca8e926eb67fc580ccd669c0261c109c0d2176632dcffbc7b6c628cfbfe1a9245efb3fe0fedc531ba3798df5ab549bd55ab0e51be0230f14afeb5ed804923e611effd694d60ff9f3e83d2e00cadc03cd55bd38efa8d57adf925f81dd2e521690472b68dd4d1ae096b3a0d170259cc9359a3d60a5dc455c3462c4cad8f512154bb1ae916e7fbf45dc4ea6165349135a496cc530784247b0bcb599bbdc32cd9afb1798de1bca1665ffecf9d574e590ed5e2dda62c8597ea6171d7af87c161fb67860ed7ac69a67bd7eb34ba46ed724a61e5e8ae2234d1617a3b931c79ecec6dbb1ca79886477d7b93c2849b783795a1fe3e7af1355a97d8a5f7be7636bef686bfe399a64a1efa0d19f16f8f1162663982219f2be5010d12f63b876bc20fa8639dc145452e8d47fd69302d3a25ada23988f641effed50b28039acb95f5bba76e0c7b1f8c7a29c2353e28d07fc968668d712fad240376668b37e1f80d92b13d5cae51752fd6f0728aa2d56508272f6fd420c35e374c7de53a9bbbf3a61ec52b763734a54f8ecfd9c591ba89211b04f0d901c3bc04b98ff267a4e0d5f037a2e06dfc5bc6a6af52e937b58bf4a94e6bf6185c72ecffd6ec17dc9fc380b9d6417f17c857b27b9bf918861db18907fdd562cafc9b937e858716c4ca9918c7e85de461110967ba2fb6bc1609e1fae7099c5b50dda1264b6940e30f47583d4c5cb4e9cd23201e77a2a539fb597d04021d6bdab92e14cbc771ece5410ec8e60c4ad81f3c9cfc57c6da93c820dd32c2ebb3c56db1ba435333e96726b844f98fe6a84c68bd12c5e19a848c78ef4670b023dd3c13ec0a0aa8c36df4e14f6b6294c6269163ffba1a08c40f7b62ce980558940ff472472d8068eb52b3f03f060f37f1f4154a022a00874c472a4316e4d344d300c41ed8dbe242f70d80f0cb10806066b16438e6fae1c125521a8f919638b3b5fcd5731d33482f45a13caa8720db84027c338d6f2cdf297ad4a88a2147d9d097cc300e02616c2dbcc9605edbcc4a0e26874ef6b7761784ba56718b7499b4fa8dfc898388f7dd6c6f4e4431c7d1538da8aa2675fb02573f08081ab7330e06f5949ab5b3bfaff0d63afd3a8f9b7d312c8bc38f57324f2cfc68211858bd2c33833cf9cd12711275aa79fbac05425c605f4cc8902328de51ebe97b56d2ba7ad994f81e3dfe56fb9dc726f51c551ee6f4e6e6e2d3b2c3cf93a0f2e257f1fb40daf1a6289ccaf6114935fdd51c8e68fa1f611a93a868001862c58768aab1596f23496daf964ec2f87bf08621524246a1b0693a8ea8221b53fb6ebd10cfb62ef3e10039df27e1aa069815d49bb8a5b7839e4656673a32216eb868063613b74d5c95e3ab21ec17ae227b0665f8b9e325dd4b7fef6cf7b6454706bbac7c9325e086557b293b7827f87b322c3e3a58d930556fa52220ece77fd4be841bb2278be753c60ccc04a04ec26dff5715e41fe757068ec0dbd609dd7c17526c722405c0ad5d06391a61364a53ddd2ab71ff47ed1346450b6b8ade2e338a7a3fca20b7b20f34575758d913f100d9f4ad453a6e661a12b825e1ad07fb21870a0579cc2f17be9beb070452bd8cd0e88b6b12dfc798f0c426e73c8e37c967f279101081ad4d6babbcfb14e0016a12536b96befe8f52f652ef19e1ba18536198ea1675029a4198c761e43676a2942c160cbecca2021f219188a736db43179bc41f6c15400e873dbcdc22464ae9815fb1d793caca3642bd5c9497d7b06bfe41aea9c74d903bd0d7f9221e80b37bd082278a0db93d6d6e3670f6cc2c8d745f12ea3c677e58b9fa7f7919259207a3fa2ac8040425485cbebcc2d7d8790f920f6b91976a2bce7e312f20e7269d0be41c4ee8350f35d282e18ce76b2cc05967edb07b528cf1f37abc76d840c307e51e672600e6e97e0e627f9362b20ff18f4f1ef36808fca55fe1916421184cb0a750b79b225d4502b45bba84efb876ca83a9ffcc0dd4f38c3b2884c5344753d0f9a0b8dbdd9cf30bbc96efa9dbfaf9c3b5133a38743f550205d149dddfe7e7382fb86f5eff50010b9157b9288dbe48c70a396653cfb6ffa124a40d500c933edfc3a64938e50a0d3131ce67715d2df6c5fea2e999b2776f0c657b9fb1e095f2377e0f3ee6bdaf3fe89fe2728288626cad38d587347d96472e88f39c522771309b546f1e65baf000f3370e717e0dbf6f9cdc39d568e3301a4a48ffaa1b42a672fa65173021e6a80d62d5a1a41e7aa0c68384c229535593e18bd8f86377e262846848716068f2a790c74accbb11e67d72f3e4cc9e4bd495029ba59a49d3696f8e0491de118cf2bf2ee0c54748a7f2f1e412ba74dccefd9ecf69087509178b18d2d7f0de0dcdaea956e2d4184bdb1a3fa2eebf27d443561d6723c37e9623f12353d2e7a624042d11748f607bfb6c95f5d994302ad9f65904c9dd2aa906551384b29b84970a5edf2ad9df78cda4c186e3cfbd078d0e3ba1f51a9ede7f3a033e5832e6d768c53d0559265d9bc871e290fa87ac4fd170c7d0c4143282d17b49e46c98d34fcd01ad313c62f93098153deacea80bee6c0ae28517155101be4c3e5a2005ba765d998730870ad4709bbd06afea8e33665358eedbade5ad9eb6899d30892179ff654450ed535d1ee9373ee46eae9f01dca7944aa", 0x1000, 0x6}], 0x10, &(0x7f0000001440)='keyringcgroup.selinuxcpusetposix_acl_access#@em0\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(r2, &(0x7f0000000040), 0x8) setsockopt$sock_timeval(r2, 0x1, 0x4000000014, &(0x7f0000000140)={0x0, 0x2710}, 0x10) listen(r2, 0x0) accept(r2, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 619.577788] binder_thread_release: 2 callbacks suppressed [ 619.577799] binder: release 28213:28216 transaction 485 in, still active [ 619.590771] binder: release 28213:28226 transaction 485 out, still active [ 619.600312] binder: send failed reply for transaction 485, target dead [ 619.607509] binder: undelivered TRANSACTION_COMPLETE 14:23:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x3, 0x400, 0x7, 0x200}) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x40, 0x4) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0202000923000000000000000000000005000000000000000a002000000000010000000000000000000000000000000000000000000000000200010000000000800000020000000005000500000000000a000000000000001e17bdc48935a6b2b54a0400000000170000000000000000"], 0x70}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)="7065742fbc909ccb65") preadv(r4, &(0x7f0000000480), 0x1000000000000064, 0x0) unlink(&(0x7f0000000140)='./file0\x00') ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000001c0)=""/180) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000180)) unlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 619.683666] binder: BINDER_SET_CONTEXT_MGR already set [ 619.700033] binder: 28213:28228 ioctl 40046207 0 returned -16 14:23:26 executing program 3: personality(0x1bb2baf3005ac137) creat(&(0x7f0000000000)='./file0\x00', 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) 14:23:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 619.724754] binder_alloc: 28213: binder_alloc_buf, no vma [ 619.754695] binder: 28213:28216 transaction failed 29189/-3, size 0-0 line 2973 [ 619.839661] binder: undelivered TRANSACTION_ERROR: 29189 14:23:27 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x20) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="a162bc70eee504dd1f7943fff1171c65233817b392410379191464a34711bc3d1e153808f18ca676ed8ee690e58183791e984941a73cd0cc28"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000240)=""/107, 0x2c) getdents64(r2, &(0x7f0000002300)=""/4096, 0x1000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 14:23:27 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r1}) io_setup(0x9, &(0x7f0000000080)=0x0) io_destroy(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000440)='syzkaller1\x00', 0xffffffffffffffff}, 0x30) 14:23:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x8, 0x3, 0x5}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpgrp(0x0) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r3, r2}) 14:23:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xa0018000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0xffffffff, 0x200) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000b80)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x5, 0x30}, &(0x7f0000000a40)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={0x0, 0x7}, &(0x7f0000000ac0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xe1, @mcast2, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="ee7e2041f4986dbcdef3e4f4d6dd510f0edf6b9afdf26167721ac3c1b3e92231f4d6e1fd38a4056e9f8dbf46d7457104449b477da5ce7d1682b41b89dbf9cdbb634403bd23b35017d31cfe07aafbfbdadcccf7031c42c5ed100ab7ad8dec5aae2c46f140980eb0dd08eb851e87364a0b89b58a37ee7806c3b00fcbba15c8358e8fb390bc9471251d856619d95c1d131d0220307538615a115b5b3b355f72b7e9a0460cc213a3a2841f18e5d8c77e3609e0f48ace95721f65", 0xb8}, {&(0x7f0000000540)="c4121bbc4dfab5bb71730aaea55b999d6bf714ff07f19186dfea069d75d44b3891235d630fa9a13c4992647342e1b2cd51ba4a1d810e4ddfd9fd8e1670beaf5f64b5fc4b3434b7591c7ad6895a7215058a4c43a3a0917a159312730a6b1811ea7f245ae26e54d0575c37", 0x6a}, {&(0x7f00000005c0)="d5af868738466068210b89a7946a0993aeecca5f871d42267e9f13055a09489d4033be32d124ab0b0f6a46eda599623b1cfad1990584dfb16857809a65ae1a33b9b0cd751d2e7bbc47d78c5769920984f06560556ebb47e7c60f946def2ce1cef13b726191640be7d0bbce451e36abea4332085e784328f979e1a8f7d67b61828771ac25a490fa1f32d643b11021e4e8e3c6b00b7121bddcd86d534fece124c3c645c4e2bd1ebfe60e1f3bdfacbe306bf964", 0xb2}, {&(0x7f0000000440)="8b30b12951cbcf3987d0f20948395720036faaf3eada8b32f9acfb277bdd2b6070cf1ad94fb8b10d44a889", 0x2b}, {&(0x7f0000000680)="00af259f17b5b6d3d3e26e2cae2b57bbdeef2caff124681be1c3eb68ec3ac01d3cc88f1f10d89c107c1945e4e98e16446371b3a91c24be1ed7c55ab78d05d34ee030cfc871f6c7c8b11d9905b7bc64191cd8cedc998a30ac3a861256402e00efa8765793ed91d3f27e8cc6158d4e7c71815f3f606f9328d5c5fb6e01a912b0ab389ae0c08b820d8d393b6d4363830cc54e5a5f1f6f2cd478f2f96f4d7f06423ab359741d04c671e5c53a9c68718d3f1f3a11ff3f27662316dbc0c1ffedd469e53741bc2c479163a442c8f3a5d4d29100d9aaf3ad4f999edbd051d2dcb5d1123d45cc3ea832d159c7043194992b4d447e99cad7ec10f000aded2fd4", 0xfb}, {&(0x7f00000004c0)="0d54a4a99679af0f631e4e232caa57c1c6350e", 0x13}, {&(0x7f0000000780)="9acc712747dd90138847c9c2b2f2ee34a182aa4705e861603c37725141992c9fc9b114e5a3e08d88c59c5c68ffad8f34b86a04971b66dcca763c653703dc7b03fc294fe34287a6f477cdc2ef655f7b6e6d14a0c3bead917d6e521980130358c5e8bde82f2a8ac378ea3cd404aac7c0a8817b1c", 0x73}, {&(0x7f0000000800)="0502b095dc103355dc073f2a9513e743830a8397423e9673066b2fda72c21e8b5baa6a7ad8db40373825855b460b4a", 0x2f}, {&(0x7f0000000840)="22225ab53c688cbb86fff27b7f6eca45f05234be53f389a4f25626d0946fa9c1961045f2913eb6db7d0a68e4fa06fcbc1fe8da70b688f43722147a519e7f9216219dfa692329c5f61fe634b2be0f13bc6192c319c6c56772521d63b30a2f47f0709c86a8f32cdb5181b90851d4050efb0dec2f78ed3d23a05df24d7a808db853698571ca714409d792b48ca0189c8c88af417987c86f7caa0d0823b5a5600e6525e73765e7297b93b9b3fc23c5b1b4541fce88a0de920e6c92d52f8187aa157db82e705649a323699e84ce64496f6f", 0xcf}], 0x9, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0xa, 0xf2, 0x401, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x2, 0x80000001, r4}}], 0x40, 0x40000}, 0x4c080) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) readv(r5, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x10024}], 0x146) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) rmdir(&(0x7f0000000100)='./file0\x00') r6 = getpgrp(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x3, r1}) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r8 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r6, r7, r8}, 0xc) 14:23:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x10200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) dup3(r0, r0, 0x80000) 14:23:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0xffffffff, 0x200) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000b80)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x5, 0x30}, &(0x7f0000000a40)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={0x0, 0x7}, &(0x7f0000000ac0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xe1, @mcast2, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="ee7e2041f4986dbcdef3e4f4d6dd510f0edf6b9afdf26167721ac3c1b3e92231f4d6e1fd38a4056e9f8dbf46d7457104449b477da5ce7d1682b41b89dbf9cdbb634403bd23b35017d31cfe07aafbfbdadcccf7031c42c5ed100ab7ad8dec5aae2c46f140980eb0dd08eb851e87364a0b89b58a37ee7806c3b00fcbba15c8358e8fb390bc9471251d856619d95c1d131d0220307538615a115b5b3b355f72b7e9a0460cc213a3a2841f18e5d8c77e3609e0f48ace95721f65", 0xb8}, {&(0x7f0000000540)="c4121bbc4dfab5bb71730aaea55b999d6bf714ff07f19186dfea069d75d44b3891235d630fa9a13c4992647342e1b2cd51ba4a1d810e4ddfd9fd8e1670beaf5f64b5fc4b3434b7591c7ad6895a7215058a4c43a3a0917a159312730a6b1811ea7f245ae26e54d0575c37", 0x6a}, {&(0x7f00000005c0)="d5af868738466068210b89a7946a0993aeecca5f871d42267e9f13055a09489d4033be32d124ab0b0f6a46eda599623b1cfad1990584dfb16857809a65ae1a33b9b0cd751d2e7bbc47d78c5769920984f06560556ebb47e7c60f946def2ce1cef13b726191640be7d0bbce451e36abea4332085e784328f979e1a8f7d67b61828771ac25a490fa1f32d643b11021e4e8e3c6b00b7121bddcd86d534fece124c3c645c4e2bd1ebfe60e1f3bdfacbe306bf964", 0xb2}, {&(0x7f0000000440)="8b30b12951cbcf3987d0f20948395720036faaf3eada8b32f9acfb277bdd2b6070cf1ad94fb8b10d44a889", 0x2b}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f00000004c0)="0d54a4a99679af0f631e4e232caa57c1c6350e", 0x13}, {&(0x7f0000000780)="9acc712747dd90138847c9c2b2f2ee34a182aa4705e861603c37725141992c9fc9b114e5a3e08d88c59c5c68ffad8f34b86a04971b66dcca763c653703dc7b03fc294fe34287a6f477cdc2ef655f7b6e6d14a0c3bead917d6e521980130358c5e8bde82f2a8ac378ea3cd404aac7c0a8817b1c", 0x73}, {&(0x7f0000000800)="0502b095dc103355dc073f2a9513e743830a8397423e9673066b2fda72c21e8b5baa6a7ad8db40373825855b460b4a", 0x2f}, {&(0x7f0000000840)="22225ab53c688cbb86fff27b7f6eca45f05234be53f389a4f25626d0946fa9c1961045f2913eb6db7d0a68e4fa06fcbc1fe8da70b688f43722147a519e7f9216219dfa692329c5f61fe634b2be0f13bc6192c319c6c56772521d63b30a2f47f0709c86a8f32cdb5181b90851d4050efb0dec2f78ed3d23a05df24d7a808db853698571ca714409d792b48ca0189c8c88af417987c86f7caa0d0823b5a5600e6525e73765e7297b93b9b3fc23c5b1b4541fce88a0de920e6c92d52f8187aa157db82e705649a323699e84ce64496f6f", 0xcf}], 0x9, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0xa, 0xf2, 0x401, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x2, 0x80000001, r4}}], 0x40, 0x40000}, 0x4c080) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) readv(r5, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x10024}], 0x146) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) rmdir(&(0x7f0000000100)='./file0\x00') r6 = getpgrp(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x3, r1}) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r8 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r6, r7, r8}, 0xc) 14:23:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x48030000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:27 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x310) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="cdc450917dc0e61a90b5b08fa0983c5fc6a0154a3771ab56661605d037f3d6dc5e38a28e4ec20d84cf271b159320fb08e14fbadea2909c1b16a302ad83454254837322fac9c251aea903fbe65ea2a8ac58289a"], 0x1) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f00000000c0)=0x8001, 0x4) [ 620.399877] binder: release 28273:28274 transaction 488 out, still active [ 620.410064] binder: BINDER_SET_CONTEXT_MGR already set [ 620.421824] binder: 28273:28300 ioctl 40046207 0 returned -16 [ 620.422416] binder: undelivered TRANSACTION_COMPLETE [ 620.445391] binder_alloc: 28273: binder_alloc_buf, no vma [ 620.463116] binder: 28273:28274 transaction failed 29189/-3, size 0-0 line 2973 [ 620.479904] binder: undelivered TRANSACTION_ERROR: 29189 14:23:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000080)=""/124, 0x7c) 14:23:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) flistxattr(r1, &(0x7f00000001c0)=""/1, 0xffffffffffffffa1) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000002780), &(0x7f00000027c0)=0xc) r2 = dup3(r0, r0, 0x80000) inotify_init1(0x80800) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000000c0)={{0x7, 0x2}, 'port1\x00', 0x446a2066114d2cb3, 0x80000, 0x401, 0x81, 0x6, 0x81, 0x4, 0x0, 0x6, 0x416}) setsockopt$sock_void(r2, 0x1, 0x28, 0x0, 0x0) [ 620.503113] binder: release 28273:28293 transaction 488 in, still active [ 620.536104] binder: send failed reply for transaction 488, target dead 14:23:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x10) recvmmsg(r1, &(0x7f0000000f00), 0x4000000000002d8, 0x10000, &(0x7f0000001000)={0x77359400}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x2) linkat(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) 14:23:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xb804}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:27 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) fchdir(r0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x240000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x86000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x0, 0x70bd29, 0x0, {0x0, 0x7, 0x80000000}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.redirect\x00', &(0x7f0000000340)='\x00', 0x1, 0x3) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x0, 0x0, 0x1f, 0x0, 0x60}}) times(&(0x7f0000000380)) [ 620.715993] binder: 28324:28334 got transaction to context manager from process owning it [ 620.729714] binder: 28324:28334 transaction failed 29201/-22, size 0-0 line 2825 [ 620.744185] binder: undelivered TRANSACTION_ERROR: 29201 14:23:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x101000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x16}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xffffffffffffff38, &(0x7f00000001c0)={&(0x7f0000003080)=ANY=[]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7f, 0x0, 0x37, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000000)=0xb0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = getpgrp(0xffffffffffffffff) process_vm_readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000000680)=""/185, 0xb9}], 0x6, &(0x7f0000000980)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/218, 0xda}], 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000014000702000000000000000002ff000600000000000001848d8720416e9410281bd35089eb4774fc66d11d91f55e27adba62ce2dc961f276fe6f27b278a4aa281aed48b23d85b8b8831baf2bc1f956c65f4d36ed80c16fd4b25f1f3a77cbc279b1021cbb11c0563def9c48b0f26544e0e797e2a20fa084ff71a93ca144b4828e1927f185ea", @ANYRES32], 0x24c}}, 0x0) 14:23:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x5, "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", 0x53, 0x9, 0x1, 0x80000001, 0x3, 0x1, 0x4, 0x1}, r2}}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x9, 0xffffff89}]}}}]}, 0x3c}}, 0x0) 14:23:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0xffffffff, 0x200) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000b80)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x5, 0x30}, &(0x7f0000000a40)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a80)=@assoc_value={0x0, 0x7}, &(0x7f0000000ac0)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xe1, @mcast2, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000380)="ee7e2041f4986dbcdef3e4f4d6dd510f0edf6b9afdf26167721ac3c1b3e92231f4d6e1fd38a4056e9f8dbf46d7457104449b477da5ce7d1682b41b89dbf9cdbb634403bd23b35017d31cfe07aafbfbdadcccf7031c42c5ed100ab7ad8dec5aae2c46f140980eb0dd08eb851e87364a0b89b58a37ee7806c3b00fcbba15c8358e8fb390bc9471251d856619d95c1d131d0220307538615a115b5b3b355f72b7e9a0460cc213a3a2841f18e5d8c77e3609e0f48ace95721f65", 0xb8}, {&(0x7f0000000540)="c4121bbc4dfab5bb71730aaea55b999d6bf714ff07f19186dfea069d75d44b3891235d630fa9a13c4992647342e1b2cd51ba4a1d810e4ddfd9fd8e1670beaf5f64b5fc4b3434b7591c7ad6895a7215058a4c43a3a0917a159312730a6b1811ea7f245ae26e54d0575c37", 0x6a}, {&(0x7f00000005c0)="d5af868738466068210b89a7946a0993aeecca5f871d42267e9f13055a09489d4033be32d124ab0b0f6a46eda599623b1cfad1990584dfb16857809a65ae1a33b9b0cd751d2e7bbc47d78c5769920984f06560556ebb47e7c60f946def2ce1cef13b726191640be7d0bbce451e36abea4332085e784328f979e1a8f7d67b61828771ac25a490fa1f32d643b11021e4e8e3c6b00b7121bddcd86d534fece124c3c645c4e2bd1ebfe60e1f3bdfacbe306bf964", 0xb2}, {&(0x7f0000000440)="8b30b12951cbcf3987d0f20948395720036faaf3eada8b32f9acfb277bdd2b6070cf1ad94fb8b10d44a889", 0x2b}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f00000004c0)="0d54a4a99679af0f631e4e232caa57c1c6350e", 0x13}, {&(0x7f0000000780)="9acc712747dd90138847c9c2b2f2ee34a182aa4705e861603c37725141992c9fc9b114e5a3e08d88c59c5c68ffad8f34b86a04971b66dcca763c653703dc7b03fc294fe34287a6f477cdc2ef655f7b6e6d14a0c3bead917d6e521980130358c5e8bde82f2a8ac378ea3cd404aac7c0a8817b1c", 0x73}, {&(0x7f0000000800)="0502b095dc103355dc073f2a9513e743830a8397423e9673066b2fda72c21e8b5baa6a7ad8db40373825855b460b4a", 0x2f}, {&(0x7f0000000840)="22225ab53c688cbb86fff27b7f6eca45f05234be53f389a4f25626d0946fa9c1961045f2913eb6db7d0a68e4fa06fcbc1fe8da70b688f43722147a519e7f9216219dfa692329c5f61fe634b2be0f13bc6192c319c6c56772521d63b30a2f47f0709c86a8f32cdb5181b90851d4050efb0dec2f78ed3d23a05df24d7a808db853698571ca714409d792b48ca0189c8c88af417987c86f7caa0d0823b5a5600e6525e73765e7297b93b9b3fc23c5b1b4541fce88a0de920e6c92d52f8187aa157db82e705649a323699e84ce64496f6f", 0xcf}], 0x9, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0xa, 0xf2, 0x401, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x2, 0x80000001, r4}}], 0x40, 0x40000}, 0x4c080) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) readv(r5, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x10024}], 0x146) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x8a02]}}) pkey_alloc(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) rmdir(&(0x7f0000000100)='./file0\x00') r6 = getpgrp(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x3, r1}) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r8 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r6, r7, r8}, 0xc) 14:23:28 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) fchdir(r0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x240000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x86000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x0, 0x70bd29, 0x0, {0x0, 0x7, 0x80000000}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.redirect\x00', &(0x7f0000000340)='\x00', 0x1, 0x3) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x0, 0x0, 0x1f, 0x0, 0x60}}) times(&(0x7f0000000380)) 14:23:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x101000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x16}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xffffffffffffff38, &(0x7f00000001c0)={&(0x7f0000003080)=ANY=[]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7f, 0x0, 0x37, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000000)=0xb0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = getpgrp(0xffffffffffffffff) process_vm_readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000000680)=""/185, 0xb9}], 0x6, &(0x7f0000000980)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/218, 0xda}], 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000014000702000000000000000002ff000600000000000001848d8720416e9410281bd35089eb4774fc66d11d91f55e27adba62ce2dc961f276fe6f27b278a4aa281aed48b23d85b8b8831baf2bc1f956c65f4d36ed80c16fd4b25f1f3a77cbc279b1021cbb11c0563def9c48b0f26544e0e797e2a20fa084ff71a93ca144b4828e1927f185ea", @ANYRES32], 0x24c}}, 0x0) 14:23:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80) 14:23:28 executing program 3: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4207, r3) waitid(0x0, 0x0, &(0x7f0000000000), 0x8, &(0x7f0000000140)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000003, 0x0) [ 621.307989] netlink: 'syz-executor0': attribute type 9 has an invalid length. [ 621.363275] netlink: 'syz-executor0': attribute type 9 has an invalid length. [ 621.463487] binder: 28324:28334 got transaction to context manager from process owning it [ 621.472483] binder: 28324:28334 transaction failed 29201/-22, size 0-0 line 2825 [ 621.480173] binder: undelivered TRANSACTION_ERROR: 29201 14:23:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) memfd_create(&(0x7f0000000000)='ppp1:}!\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, [0xfffffffe]}) close(r0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x10001, 0xc04, 0x0, 0xff}, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 14:23:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x7) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={"ffffff"}, &(0x7f00000000c0)="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", 0x4c1, 0xfffffffffffffffe) 14:23:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000140)=0xc8) recvfrom$unix(r0, &(0x7f0000000000)=""/222, 0xde, 0x0, 0x0, 0x0) shutdown(r1, 0x1) connect$unix(r1, &(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl(r0, 0x2000000004, &(0x7f0000001240)="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") pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000001c0)) 14:23:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 621.634817] binder: release 28389:28390 transaction 495 in, still active [ 621.641866] binder: release 28389:28398 transaction 495 out, still active [ 621.648818] binder: send failed reply for transaction 495, target dead [ 621.649534] binder: undelivered TRANSACTION_COMPLETE [ 621.661565] binder: BINDER_SET_CONTEXT_MGR already set [ 621.667000] binder: 28389:28398 ioctl 40046207 0 returned -16 [ 621.673079] binder_alloc: 28389: binder_alloc_buf, no vma [ 621.678752] binder: 28389:28401 transaction failed 29189/-3, size 0-0 line 2973 [ 621.686820] binder: undelivered TRANSACTION_ERROR: 29189 14:23:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xec0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:29 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x8800) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000001340)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r2, &(0x7f0000001480)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0x20000234}], 0x1) 14:23:29 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x0, 0xfff, 0xff, 0x6, 0x9}) ioctl$TIOCSBRK(r1, 0x5427) prctl$getreaper(0xf, &(0x7f0000000040)) 14:23:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000040e96c024fef3d0a6b73e8b966701505b1180c81bb795fc39e3854aee615c804702e783fde2f39a0b60956a932e6e700362b2795e676a673589615880efef7cf453a4813", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x13, 0x0, &(0x7f0000000000)="bd683b93b4c2219d5317ca8f48651aeabcab6c"}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2002, 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4c, 0x1ff, 0x1, 0x1, 0x3, 0xfb05, 0x5, 0x12c7, 0xf763, 0xa7}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x562}, 0x28, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200)={0xa}, 0x4) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000240)=""/208) ustat(0x100000001, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x6, 0x0, 0x7}}) fsetxattr$security_capability(r0, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0xffffffffffffff7c, 0xf5f}]}, 0xc, 0x1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='./file0/file0\x00', 0xa6c4, 0x2, &(0x7f0000000600)=[{&(0x7f00000004c0)="6d06545c8dff7a13a1e73914bef69b3d62c5034f2b54449e44b3e0090a26fe15f99d08deefeb4fbd7c7d3dc5ff53c588cbeee427e4042a86561425bf6b2d07f52e9e09c2573454058fdf9f6302aba891e0fc3963086aed0858d13e2c48809b1826345a3f51fffc462089e4aa7cea60d65be398d13b4a1c2431a120c27c01ad940f725ba41dcf687baf490f51d228cb617e78b66d24a23cb89dc3223c74d826f5f2f6f94dd5a1a753820ed15fa776c2eb31ef62af9f326b857c1568d7b34406d3a211154fbfcd7470b0e6832c958e9028b5a8ccff6693e318aaef7157677f5e4835", 0xe1, 0x7}, {&(0x7f00000005c0)="d2e7", 0x2, 0x80}], 0x8040, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlateno='uni_xlate=0'}], [{@obj_role={'obj_role', 0x3d, 'cgroup\x00'}}]}) fanotify_init(0x10, 0x0) chroot(&(0x7f0000000680)='./file0\x00') linkat(r1, &(0x7f00000006c0)='./file0\x00', r1, &(0x7f0000000700)='./file0/file0\x00', 0x1400) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x40, 0x0) r3 = accept$unix(r2, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x8001, 0xab}, {0xff, 0xffffffffffffffe1}, {0x8001, 0x80}]}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000008c0)=0xff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000900)={0x0, 0x7fff, 0x20, 0x3, 0x91c}, &(0x7f0000000940)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000980)={r4, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000a40)=0x84) write$evdev(r2, 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) linkat(r2, &(0x7f0000000a80)='./file0\x00', r2, &(0x7f0000000ac0)='./file0/file0\x00', 0x1000) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000bc0)=[{{}, 0x2, 0x7, 0x1}, {{0x77359400}, 0x17, 0x8, 0x2}, {{r5, r6/1000+10000}, 0x16, 0x0, 0x8}, {{r7, r8/1000+10000}, 0x11, 0x10001, 0x7}, {{r9, r10/1000+30000}, 0x14, 0x70c0, 0x7ff}, {{0x77359400}, 0x1f, 0x4, 0x100000001}, {{0x77359400}, 0x17, 0x7}, {{}, 0x16, 0x200, 0x100000000}], 0xc0) write$P9_RSETATTR(r2, &(0x7f0000000c80)={0x7, 0x1b, 0x1}, 0x7) utimes(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00)={{}, {0x0, 0x2710}}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000dc0)={r11, 0x2}) 14:23:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, [0xfffffffe]}) close(r0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x10001, 0xc04, 0x0, 0xff}, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 14:23:29 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000680)) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r6 = dup2(r1, r5) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000004c0), &(0x7f00000005c0)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f00000002c0)={0x73, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x4, 'sh\x00', 0x8, 0x81, 0x59}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0xfffffffffffffffe, r7}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000480)={@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xbda7) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) munlockall() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 14:23:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x4803000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 622.156404] serio: Serial port pts1 [ 622.185071] binder: 28411:28424 unknown command 1073741824 [ 622.195264] binder: 28411:28424 ioctl c0306201 20000180 returned -22 14:23:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x40000082, 0x3]}) r3 = getpgrp(0x0) ptrace$peek(0x2, r3, &(0x7f0000000080)) [ 622.235167] IPVS: set_ctl: invalid protocol: 115 172.20.20.23:20003 [ 622.264404] IPVS: set_ctl: invalid protocol: 115 172.20.20.23:20003 14:23:29 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000680)) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r6 = dup2(r1, r5) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000004c0), &(0x7f00000005c0)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f00000002c0)={0x73, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x4, 'sh\x00', 0x8, 0x81, 0x59}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0xfffffffffffffffe, r7}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000480)={@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xbda7) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) munlockall() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 14:23:29 executing program 1: r0 = gettid() sched_getscheduler(r0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000016ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000640)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0xd162, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008000000000580200004001000098030000980300009803000004000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="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"], 0x4d0) close(r2) ppoll(&(0x7f0000000000)=[{r2}, {r1}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) 14:23:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 622.418848] IPVS: set_ctl: invalid protocol: 115 172.20.20.23:20003 [ 622.928294] binder: BINDER_SET_CONTEXT_MGR already set [ 622.933717] binder: 28411:28464 ioctl 40046207 0 returned -16 [ 622.939985] binder: 28411:28464 unknown command 1073741824 [ 622.940683] serio: Serial port pts2 [ 622.950238] binder: 28411:28464 ioctl c0306201 20000180 returned -22 14:23:30 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) fallocate(r0, 0x0, 0x0, 0x4003ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x0, 0x8001) 14:23:30 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x400000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x7, 0x78f, 0x529, 0x100, [], [], [], 0x9, 0xa02e, 0x16, 0x5, "49a2412e6f998eca111254fd4ccb70a2"}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x2285, 0x0) 14:23:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x100000000020017, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:30 executing program 5: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000e80)}], 0x1200000, &(0x7f0000000940)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x88402}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d80)={0x68, 0x0, 0x6, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x2}, [@generic="84ecf9df22c8ce2e0ec9ec5e8bac34327561bd41e2b0b39acf477d6e73089dbb4e34ef1d6fdd914060b6384b98be4fd5f892107feae6da03930ae8c77099e98b4e809bd90a204c010cbce2f9e7f1f78013631411"]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000080) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000008c0)=@abs={0x1}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)}], 0x1}, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)="fe5ae566bc1823cbb6340f8c230032285c1878b95a4e8d7549cab2633d9bb0a3ae29b11fd0d122906667daa62b0dd85f7e1053d8c382c5379b543f5f18aff1fd0b66f215da6f51f87cf9b0e914ee51f106f15b78295ac9208fc446544f1666770d") getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd7, &(0x7f0000000100), &(0x7f00000003c0)) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@random={'btrfs.', 'lowerdir'}, &(0x7f0000000240)=""/253, 0xfd) mount$overlay(0x404000, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}]}) 14:23:30 executing program 3: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x4}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 14:23:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r2 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f00000002c0)=""/4096) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8, 0x8, 0x8, 0x1000, 0xfffffffffffffff9, 0x2, 0xff, 0x80, 0x4, 0x9, 0x1, 0x2}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f00000001c0)) getgroups(0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xffffffffffffffff]) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000240)={0x7, 0x1ff, 0x7fffffff}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r3, r4, 0x1c00) 14:23:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x348}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000000)="c4c2f9930c9d1f000000c4815d594101d9eac4c2f9904c5100650f000deb0000000f71d7278fc818efeed8c481835126c4a2a1406025f047ff8a00000021") socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000003c0)={0xbb, {{0xa, 0x4e21, 0x0, @mcast2, 0x6286}}}, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80440, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x2) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@user_xattr='user_xattr'}, {@tails_on='tails=on'}, {@commit={'commit', 0x3d, 0x9}}, {@grpjquota='grpjquota'}, {@data_writeback='data=writeback'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@hash_rupasov='hash=rupasov'}, {@resize={'resize', 0x3d, 0xffff}}], [{@hash='hash'}, {@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@uid_lt={'uid<', r2}}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) 14:23:30 executing program 0: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffff9c, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r2) r3 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000013000/0x2000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f00000001c0)=""/212) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x3cf, 0x4) close(r0) [ 623.106531] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 14:23:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000012ffc)=0xffffffffffffffa1) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 623.177706] binder_alloc: 28487: binder_alloc_buf, no vma [ 623.184926] overlayfs: missing 'lowerdir' [ 623.189788] binder: 28487:28497 transaction failed 29189/-3, size 0-0 line 2973 14:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10000, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x40, 0x1, 0xd1d, 0xfffffffffffffffa, 0x58d}, 0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x2, 0xfffffffffffffc01}, 0xc) setsockopt$inet6_int(r2, 0x29, 0x57, &(0x7f0000000140)=0x8001, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003d00)=@assoc_value={0x0, 0x1ff}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x401, 0x3, 0x27}, &(0x7f00000001c0)=0x14) 14:23:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40087602, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @loopback}}, [0x80000000, 0x3, 0x4af7, 0x1, 0x7, 0x3, 0x1f, 0xffff, 0x80, 0x6, 0xee, 0x6, 0x7caecf4c, 0x7fff, 0x5]}, &(0x7f00000000c0)=0x100) [ 623.236536] binder: undelivered TRANSACTION_ERROR: 29189 [ 623.282030] overlayfs: missing 'lowerdir' [ 623.539504] sctp: [Deprecated]: syz-executor3 (pid 28533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.539504] Use struct sctp_sack_info instead [ 623.595366] sctp: [Deprecated]: syz-executor3 (pid 28530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.595366] Use struct sctp_sack_info instead 14:23:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x200) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000540)="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", &(0x7f0000000200)="bc1797307a432cde6d1f467dd2df773217cf46dbf82f3228733779148d58d03dcc7d701f97a91d40cd2b7fb6526364294c4a1cd2d0097bd4ab227f5610bb3f1508694d057e39ddf92541d1f9f0bc87cb8a8677e495423745d3e258340a7faf3d1678f1f07cb9c94428db826a8070f739d7ad5aa4066598e9582cfa1f6b3870f85b490cbd8d4a9c10b8ec362c7436c835b87b8b61963fe55183d64c8317e699fad5c621b2d161ea7c225762d24db375e564e37cee7978"}}, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4000000044) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000240), 0x0) shutdown(r2, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="9b", 0x1}], 0x1, &(0x7f0000000500)}, 0xc041) r3 = geteuid() r4 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff8) keyctl$get_persistent(0x16, r3, r4) 14:23:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x800455d1, &(0x7f0000001000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x141000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) 14:23:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8001a0ffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:31 executing program 0: r0 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b1100b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2a000) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x8) 14:23:31 executing program 3: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = socket$inet6(0xa, 0x1000000000003, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r1, 0x3ff, &(0x7f00000000c0)="99bc6b4061a99957cf33bb6111aecb499a733b4a554d8ea2a3bb6d838001932ccb9887a54caf29fc2390f9a845a65da899c81a60abdccf0bc94e4dc2b033f530ed58f90690b88f1def1ae9154a35c415e73c08801c5a5459d08a201030cefc1acd50ea8a011613ae9ab8f94ca0725aeb6f69cc5105e62696309ae59191fa330b96e7102814f2a6b878e4223b332d65880f8f700da754bc2a79043047a1e8940d24037d6999c759d74b8e0b196ead91f9d3c2b3fa0ccb1d1f0e72c8d33a1e30310a58d6fb8239d8ab5509856885569896d744eef72b6c103ef6368abacbfcdd810295f998efd6") preadv(r0, &(0x7f0000000480), 0x109, 0x10400005) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={@local, 0x61, r3}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x60801, 0x0) [ 623.883109] binder: BINDER_SET_CONTEXT_MGR already set [ 623.888530] binder: 28487:28510 ioctl 40046207 0 returned -16 [ 623.895343] binder_alloc: 28487: binder_alloc_buf, no vma [ 623.901019] binder: 28487:28510 transaction failed 29189/-3, size 0-0 line 2973 [ 623.908814] binder: undelivered TRANSACTION_ERROR: 29189 14:23:31 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000300)=0xfffffffffffffffb, 0x4) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="d11ee5c37519b5ed4d986b8ebcdeb630e66dcda5f62db6ada33fe144c2e6efd40e4b7a7be6b58b002b48b371a321df55c6d04fb72409686d8599b9bc92233bc081930e66932af7bb460fe50fa0a9ae2dce825f2c93ec2cf1fb7f3dacb603d8bb74cb15499dd38eeb7fcd14f0cfcbcf55cc3e1c56d0c3da3dadd9") r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000100), 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000740)="7e78390bfeae08cc727295be026a4e5701cc5f1826b30377f0d7a37eabecdab2e6f329a8058a2cde90be507e1b9bc2560e03da4e4a57650e3d915ee9cba72620406361fcd3a6a620bbda06d1581146d303bc0f1a207b0bd3f4d123f67169cb10f7a6fdd74ed5b1612dc3881b5561ae9ceea1f7b207796d0f3bdd2883ff2c3050110435c491bba0aa2877246dd3c949ef2a632b942a02ded5ae61ef544ab39ef60b3210a0030947bc2484ae4c9b3297e729a6fcd4ebee8e4b31ab402b5c010ebe725a64fd6af1e87bbdc3803430a2bc3c15f32ba433b5267cac9a", 0xda) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x9) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5e", 0x59) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0xd5, "016dce", "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"}}, 0x110) 14:23:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="f27e85f199f78efd389ef1706af9cfa6cdfcf5edca3b7ec595145745f895109297454221855c368e98b2a12995dd0e38e4f1e086b83a02305c2def992a4249170885f7008405854f941af8da63cd1500984256a7717afd8f6d5ee137d5ad965c37f6", 0x62}, {&(0x7f0000000180)="ee5e46a88ac947e48c8971dfb8caf5e3f8d495cb9e5c4fe11cba270385fcc392cd995a98d532647c7501b7cdce933fe375b0b1b2b3b8a9b0da5034fdc5bbfca5c7440c83c88cfb612309897b6755f11b373ecf857297c354320840211b1a2679755ef01ec2b140cb07527484ebd549b30a09b94ebff12d8cfc5e2cf8f24cb161c382e9960ef5697669080413ce23e1ea881377971e31bcd8139ad5088951400bbf49315c1a43d9350596072b45ba", 0xae}, {&(0x7f0000000240)="adf59e40f5abba0d3bfe15678abfffdc907b126184f953b92a74034cfb5a54603a54f6103a0ce3e1449d9fcd11c1bd61934644e019505c4eb218155d784d471b24618247280c3abba5194c23341f0946295051425064871a529fc9ebcff0622ea4d898067a29d0c660361cba4c4e2550d0d804a70982eaf1c0a6d628d16d", 0x7e}, {&(0x7f0000000080)="f7b0264e8e0ef7606c388e40311480d870606b384c55ce47f1274211", 0x1c}, {&(0x7f00000002c0)="be899a2460b38dd8ff17564840ead47fd756a7166bf20e045493a5e7e2902056a521c84fb5ed1a14eb4cff41267d19fe8a52f1358c4f5760ac1ce9f4fc2c8d3a949659f5e1aded366f3b811b4d4a6ff4f3581457e28ecff1771e99c4f12afbd37acd1069df1c66eca561453d", 0x6c}, {&(0x7f0000000340)="bf0754d01f3197b9f427fa7906b6fddbe1945f1b8dae11f10f554345e5f193c19be39c24ef0088751b247496f03500b3d7d3be7de49039e2a3b1a4969b4e1145d5195d0073b8930609", 0x49}, {&(0x7f00000003c0)="4111fe5b870bbf64a88749f997aceae50c0d544c98bd", 0x16}, {&(0x7f0000000400)="2f0f07dffe4527fd40058928802d05f44134c53408c92ccd285573f933b012a801b25b24f8f9ae8e35b2ac120f45cf42a30ef9ec2b7ee876a2", 0x39}], 0x8, 0x0) read$eventfd(r1, &(0x7f00000004c0), 0x8) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000540)={0x100, 0x1, 0x9, 0x745e, 0x0, 0x1}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000680)=0x7) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000580)="0d6881adc478cbab1a36c1d732993ab4ea6aa059c39890c1aaab24b8612a4d1a86f20553795513c14dbd94172120ecc6b718c15eca2b6e11f6247af913681168c7dc1cd5137bbb55abd99b10f02dfde73140c0fd0930d8c1bec63e78aadcea51637290f2cbb79df51e72a0420877daa00010dbeb031d21e9a2db02240bb036e06661b587edb34ec54612f04b7d9e1239befd661c6ec50d1f459d83784c1e26a51b7071985bb6f83ab53b6e013e441ce2ad3ef8d56261871fa62a284c8bf46ab76604ed624e4a6d8d8e3c0aa14d66991c6f6373b38119") read$eventfd(r1, &(0x7f00000000c0), 0x8) 14:23:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xc00e000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x400, 0x105002) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000081000200bd240200ec91cc30ebc8e66ce62cf97083a2a82271c4bcbeb2d37a9e64b4f69304026deee460c9bb99fac0d7d6f8b1ef917085d9221554a406b5256b2d0266db8731c57abafaf9061d0d00cec8047b38d34b0fa2866e2fe210eff65215db"], &(0x7f00000001c0)=0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb3c01003e15631bfb77a0009d515e4b7395c4d157cfccce712ec1231ceca643d0e4f8b98c87ea811cf3453a66f3d4af12d72508c97a143ae351bf"], 0x3c, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2, 0x80, 0xfffffffffffffffc) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400001, 0x0) [ 624.070364] binder: 28540:28559 transaction failed 29189/-22, size 0-0 line 2834 14:23:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x8000a0, 0xe, 0x85, &(0x7f0000000300)="0000007400f000000000000039e4", &(0x7f0000000340)=""/133, 0x429}, 0x28) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xcdc5, 0x2001) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1) [ 624.115658] binder: undelivered TRANSACTION_ERROR: 29189 14:23:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 624.807291] binder: BINDER_SET_CONTEXT_MGR already set [ 624.807322] binder: 28540:28585 transaction failed 29189/-22, size 0-0 line 2834 [ 624.812901] binder: 28540:28559 ioctl 40046207 0 returned -16 [ 624.821216] binder: undelivered TRANSACTION_ERROR: 29189 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x4803}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:32 executing program 5: epoll_create(0x0) r0 = socket$inet6(0xa, 0x4000000000001, 0x4c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) shutdown(r0, 0xffffffffffffffff) 14:23:32 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) bind$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000003c0)) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x10000, 0x68, 0x1ff, 0x1000, 0xa7ae, 0x5, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x4, @remote, 0x5}}, 0x2, 0x6, 0x48, 0x4, 0x81}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) 14:23:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c630000ffd490d505fb91418f4705c5d98d003582fbd7b7860538d1c3c28c9c4b222f0061ca14aec9e4672bf6ee13be19da2c75e9cc8c65616dab70f7b5e08a39f3486202791697a5143fe1f78e5f536d486a61840932a7bdd06db644520632bb6ead3e9b1427e32bbcfe8be5a005cb66882dabdbeb9e6de062b53d1a8ab8a8bc0a142d0d8ddd4212ff3f21601137b52b1646677ccc2fd4d48872e84d07e5c265fe5e0c8c7a334cc01d73c1f039d114"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0xffffffffffffffff, {{0xa, 0x4e21, 0x0, @empty, 0x2}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x4, @mcast2, 0x10000}}, {{0xa, 0x4e22, 0xffffffff7fffffff, @mcast1, 0xffffffff00000000}}, {{0xa, 0x4e24, 0xffffffff, @local, 0x9}}]}, 0x210) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) dup2(r0, r1) 14:23:32 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000300)=0xfffffffffffffffb, 0x4) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="d11ee5c37519b5ed4d986b8ebcdeb630e66dcda5f62db6ada33fe144c2e6efd40e4b7a7be6b58b002b48b371a321df55c6d04fb72409686d8599b9bc92233bc081930e66932af7bb460fe50fa0a9ae2dce825f2c93ec2cf1fb7f3dacb603d8bb74cb15499dd38eeb7fcd14f0cfcbcf55cc3e1c56d0c3da3dadd9") r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000100), 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000740)="7e78390bfeae08cc727295be026a4e5701cc5f1826b30377f0d7a37eabecdab2e6f329a8058a2cde90be507e1b9bc2560e03da4e4a57650e3d915ee9cba72620406361fcd3a6a620bbda06d1581146d303bc0f1a207b0bd3f4d123f67169cb10f7a6fdd74ed5b1612dc3881b5561ae9ceea1f7b207796d0f3bdd2883ff2c3050110435c491bba0aa2877246dd3c949ef2a632b942a02ded5ae61ef544ab39ef60b3210a0030947bc2484ae4c9b3297e729a6fcd4ebee8e4b31ab402b5c010ebe725a64fd6af1e87bbdc3803430a2bc3c15f32ba433b5267cac9a", 0xda) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x9) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5e", 0x59) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r5, 0xd5, "016dce", "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"}}, 0x110) 14:23:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1b, &(0x7f00000001c0), 0x3f3) close(r4) dup3(r1, r2, 0x0) 14:23:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0f21e066baf80cb89ce89b85ef66bafc0cb8329c0000efb9800000c00f3235000400000f300f0766baf80cb88014c580ef66bafc0cb8f7ff0000ef66baf80cb8ff57098cef66bafc0cb076eef30f07f2f3670f01390faf6fb6660f388224a3", 0x5f}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000002001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8000a0ffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 624.985148] binder: release 28602:28612 transaction 505 out, still active [ 624.992277] binder: release 28602:28603 transaction 505 in, still active [ 625.011518] binder: send failed reply for transaction 505, target dead [ 625.023720] binder: undelivered TRANSACTION_COMPLETE 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000080)=""/46, &(0x7f00000000c0)=0x2e) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/28, 0x9}) [ 625.077679] binder: BINDER_SET_CONTEXT_MGR already set [ 625.088708] binder: 28602:28612 ioctl 40046207 0 returned -16 14:23:32 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000001c0)=0x75) timerfd_gettime(r0, &(0x7f0000000080)) getdents(r0, &(0x7f0000000180)=""/24, 0x18) [ 625.143927] binder_alloc: 28602: binder_alloc_buf, no vma 14:23:32 executing program 1: semget$private(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x20000002102, 0x0) semctl$SETALL(r0, 0x0, 0x14, &(0x7f0000000a80)) 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xc00e0000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 625.193764] binder: 28602:28603 transaction failed 29189/-3, size 0-0 line 2973 [ 625.202551] binder: undelivered TRANSACTION_ERROR: 29189 14:23:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20}, 0x0, 0x0, 0x3, 0x3}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:23:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0xffffffffffffffbc, 0x13, r1, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = userfaultfd(0x80800) r2 = signalfd4(0xffffffffffffff9c, &(0x7f0000000500)={0x8d7}, 0x8, 0x80800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000540)='raw\x00', 0xffffffffffffffff}, 0x30) r4 = getuid() r5 = getegid() r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/ptype\x00') r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x200800, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb01001800000000000000fc00000014010000f8ffffffa5b65c28263b79fcdf059d70d63d20b05c27d7bb6f389cec17dc69296eb862479170349bffd7003aae3a694af5a23ef65deb556736dd9b3826f909de58c213513c260ac4ced76651799c67dc18aed9a30245225f612af9b7ba75513dea8021e81f825162263d387ebe54fdce1f42671139b70516ce988e5c49dd49a04055294a532d626b3e567ce95fadd9c6d6ea6af81fb775d5c4375e51f1a04ea1043e840f5db471dd43ed750a996034a81c77507487a6cecb820107f4ce819065ca80450f6ff6b82055b94e1757d24ca51b0cb6e863173e82310f1f590a13962f281a6a07381d361c9706fed98570b502448a00d676e37e34fb1b2ff366c2000000ed7634238164e656aa5f30e0afcaf049f89af0e5a667a7438bb43cf666c9e652900b356b0f9738a629440418d24f37e21576b3abc99c4c06a1a6699b72f9ae8676c6e98b26a921f9f8587607393f5b610e7bdfb4b3aa5e9feaa000a81d83b36413af59e6067a905c3caddaeffc7d09f05f760b4b11bfe9fe67ea75353cddef657283ffbd9b9567e7db21b00c825cec110cbc16f84801b543db4a0b9cf0d5d71a162f0291a4ab32e8be1c50fc399f7b520b6a56b0bc0c64c30924c41d21f7ab6eeb20166f0720ca52b54f9d85543bb72a63a122e688d91ede2b29093f33487cb18d2c12765dd61fd45579deaec5369d3912f5683cd3fee92a25d7f5fdea9a8f19183e14f17462aa774c6a9851c1394734fd68108ab069d3245af9c40632acb050f2f262d2e930944bd757a6d312bcc5cf3bcc2975097f14dcc6e13e3e9205cde14f88bd6ae915cadf8a543967fb78ca8ff40a71f314e152443d532a9d56d5ffb5695f75846b10d285db649ddfaebaf48aa1345fb50edd35ff95d999f2cb66a777a8c1be9dbb455be8d667242370a628e408b0795ca9f1fd9dc47759d7068b3b45d31f0d521e52c6841b429c853957b1efc8f0d204d7c70a9312b8d40a718bdc66d32c5376320d6e8b0042a383721fc6cbb1523150270c3698eb43ace6629ddcf77f8ceb7514eb445d34a81269ec0c0f529cf825322ed3abe30cb3cad04f13d8a1779605c6f144dc2c179be28e5e1f42ab9168b39c98422d2d79545e66d2519f11b443777f81698929dda8101cd97f52cc5da9dbc5e927b2c55bf7b1b0e6a8ebede9a5d46193409cace2c4bac3ae4707126b505e344d6849c6fbb9479f29899db805282ef257fa38fda36d34da67461ef84f59451bec12535e39175a04a9940c8495d7a06f4c47835f449af16c410349bdee5c6c873a074cfc8f3f03971c1e2c9eabf23ca005caeaf5f53b7f931661ed49c0b3d3c1fd7cf2b0251beab909ecbbc49f22d7d87e67244740eda7d1877b7b3bdcdf7864351b0cd6757678e0606185384fb010cde58ef312b99c4f2f424faee8b396853376ca2f20a84044033ec32726819e8acade60bb6a005cb0046fcb66e30ccd46c1d25508e651dbb904860a8d2dcba7d8babc6295e27d16d9b3a28a7b03b3d7290058a047b552e7e844645531e0f87020389c08fc083e3aa576e783e1fde352e2a7607c6ac284d7c2a55e3e6120508041d396f8df9630930a09d971bd9a2016b3de5c2b1f92f668746787189711ebb12b2e4c805e2ab6dfea6cc06f644851be4da9ef61234a4182d883710fe49946acc6569d05e7d651c8a7fe10e7ad20a91ce55081580e284820d8d569161656a936383fd1d002cd15c2fb9974fd765df9fed8e5b6b466b920dae073372ff324fc9b7d33aa9104e23e9a99e88689468de9c80cb9bee22cb88a137356ba7d958207c1e9a4863c4e4a6244c57e5bf0b3ef1653a36191e9f4ce22d566228f4c3139105f4378ce41e10929f55e2b234cd63f7ffcf7ffc7f3fb812629fc3c517e82fb909e4c3eeb9dfd7c5d6550d45074a7cdd81da24e0b48ec08bc090af48abf255894e918d3ec3ca9825d666620c4a0e9f289031cda16c32658ea8ffadd5b798371dd97953448e554fc3a07844de6d9e4f4bac6771555ff45b9216790d115ab5d4ded2520e0ea8b0d060efc4687cb792150e9a5e014bee6cbe2909868d187ad9fb349d70e3c4bb955b2967cfb3f1c870e65b0ee522451242f3be46fc6a52d81820c35996e242c3a13aa531146217680ece1806923b73bf78d93214132b607b228f18026681284a9d822f309a78ab7a8c65536db83e62178ed73664dfece6a16b45212ed2c22c8b53034bccaa6ee9d0b880e1988c47994da18577fa1d5bf8da88525ef90c9dd8ebb05b51d76583e8b0066359115d2c3081bbda6bca2698e98789a296b62e781aec7b2ed646c0e7abff0a23226daaaeb29f423fb5e176aec2b52528d5ad34a3f5bf2dd8863e9cdb59a61bed83daba6a46fc3429c67d77d36490797eed5909aa7e3224be9a318b9dc65dbff131e520784f3c7de7755f7a9409fd0cd805d554e91ded0a1a4c52c9971d02b78760d9e7cfb769ba242424548c0c9fcb66a676a4b4c1b0ae38257b399fa17dc1c9ea5af4fe51bcfdc861491c9d3ca82425d865084552d2c95b8315a19328d47c0c0bc23cede5cc940439db4d3d10e6576e96a93d12042cbdf10a0cdfe708c6f1a54b72346023662e673cce174ae51ead3e3d62f6f510f9c3dde1d903085a996bb6f0a98bc57f2198a5c48d4366feefc4a88bfba748fc891cc13bc21836ef77ab9580057651feb8220c47e4b68b17d0fc4796aa396d4c2cb8f9ec6f12ab3926a53782d0afe4cf1bc438e3901914db2926185cb392cccce6cff941bead20dd59645838bd30df80d33f79c5e4be592fa08290b5b0b5bc38dfdbc68367a503d29b8a4b9bd07d7acf844f16644af1f2275ed058e3933f7678b7079fdbbc6b625575f31ff50bc6786549f58ca5c3ba854c18ef1729eea69714daba0f23271dfb7f9ea622de99457935174b4603152ab03d76d5b7fa787065e77c49ac8f03d671ca91da2c2a3c046679d3d0bfb98af33ae5ede936c79e65e2a72fc0714f44eeda947bf0f001dead9c36356bdb35e0972b1eecc4ef766982bde9924cf920e70c5b695560ece3197dc6799701b83bb8376b9497b61dad1eecacb6dea518bdb339e7a9fa9318c2f9bd7529e69b92ca94fff433b56e4e75346617eeec77cd036bf2781dd7c6ff041d1ee4a4227aa8b9481206423a7594e9e4979ca9b76c28f15f87451f5e289d8d30ef8c0309b787b58d9ad7718d4a3cdaee00235c362311db81265b98433c5433ae0d8662acd0de1d538fc002def4d0790eb634aa8a089fce215180d2fc0a210c4a56e5c382b22f5eadbb27f87c66bc08237263563f218798ccac47c2e50e4681d23837cfa1a07dd0d38fd301960880a2dee0d617281c062af31a94a8b7a7d391cc9cc79f94f831ca6be21b82c891c9551a24007f0f80eef0e783c00f8af8d0a1a347788a7d9676d46e242d41b0c40796203b81f337880bb51baf3032964d018fd17f0002e535d1d6d4fe1ef64728c08bb9eede7eedc47d6bddad4a9daf7c6ef80109d53987923c5a46d2e157d27042faab561b6db0e3a67ac17f017dedc005aa50468644cbc3a41db7da9f160b95bf47b69e3bb8bbf393f6d838d3fe16b4dd1d8ad2df4f206f06b1f4a5f174ce6b9917c66aca6d22a6228cba746d2967273d9da9de3717ea03de747c8a8121558ccfe1b2069fc5af49359703a19dc372b8028c75ae31e7a55585d29acec3a6934de1e9c158b0eed7318c3a3c45e55904b5fd8c694746101cb4b1c9e58856bd97cec1b23853a19259942b68d85751ba38eb70629a835917ba4584042b97b146e542e34922093ef4c42a158aaaefeecf1becee439a86a555d3e74186b846951e1bdd049ff5c4263fd3567526b5af929af7373aaf39562503eac8fa6e02f8bc37628ef2c87abee3678670b32366a23c36c8cf635c7871dfa27f791f6ea23d1399240b7d14870d0d54f9d47167579f7489b92458a9053bb822445ece38e6cc7c996c653a0173a2b1bbb6fd7272a46cb3d93bbd6fa636ab1eecd7db6f6aaeb0c6979f0c0112253677fe7402f52e0bc199df49f319f0c14e09997d270ec331db131b0dbf92e09ca90a780ac7211708e66716e2f7718fe757cb5dcfa54edfb9fc48b44dd52efc32ade1d028bc72e32b666b42c7b8cb1c192e27245488f2c914004fde10f4f393d4fdd9983931ee50b0636aa6452bd4c58169d8d09531fae91a7de184c79c8fcd2470addd61da1234915cff4cc5ff6ed12ccd63bb381510e118d1325b2cc09c44d339c52484c9b9d1e1c30837203330961ff33960fe0d45114783e3fd0ad0559387fa65072a7b3e3b1de26fa9e6259b5e83970fe29adbbb46657695bbb289a01297d3aaa5e6c1ba9bd6215a1c05cb5d3b0b48ec394de347c94585c496598eb81b0c4218dfd08e5620e9a02ea46794a66158bb8b43b22820bcf8aae7a564f93ac08f0d06c59d112dd70c05c939dfdacd1db36be82ae7117925cd0a5b25728c1f47fab1b4ee03e231f9542715afeb7b72c8da79b5dbd3f730ff7dac87c0df879a8d12a8e3c66d9a1ff66ab1c3c2861371693216d58efdcf14791f7419fde42705a61e3248a012116c272effd6e64ac528f9047a80ca922393f7ccf80a871b97b19724ce5fbd5f537df9386a8b7b46ad2336c82c417f7a18ddd579a319ed8a038c52af4ee80d8b1387fff136430fd9f913f02a3d5038fe6bf1e671a3008b76eac58122a9d6e3391ff270f5f8018cf2ed38e968ccd7856ee12fcd948258bc9b0893d7f9fea062ba0106ae6b81cc9d55ccdb208cdbe48848ffecf86dfd4952afd4a93d6e66108518338f885c6d3490d9cda2300c472f5b145b4a0493789f359f09ec30b075279f2859942d9270d396e2d23245e309ae9cc9635cd0aa1abeb4abfc9da80f427829ded9253cb1177bd1b3e9786bcb2c4260fd7c6d51c18dccd18229041e023c8ee0562ee61d6f868afcf555b6fcfdd990185550e1262367b414cb69b15b96f65ab9770516bf5e283ac23fe6b3cab54bf2a436421c91f98838ac603a30f824a1b48ab158698e48d4495f095ed90dbc782f8d4f860c927de2bb1a9c69b64860c81ac21300a0933360ffc68ad5bbf24e86650ef859f10b5238533e4d9f220c233df16c5f28c301909cc988ffcb9ea3cb336fae600f125e325f7ed76dbb50632af1d31f03772b0aeadda72f884b333cd47e48ab50d389f4fef228e71a89d04a13a6ed161ccef72035fd84a500fc44f789acbe65826012d9b357073d159aed3e880be97f1b1f843670d8cf1649425df6639a863a520f861dd798bce0dafeaa0768c1e1df721b4369679ac79cbc4f46b779fa676601cf44a317caabfd7904ada1aea2c793fa875a455d4917af904e328bd55cc22ea0a7f4845bd5e91a49da63d6739912604e56488743cd4acecfe1a3731f0a30b259d5d1890252d23d861f04f7400518419ebbbd2b9244d8f5dfb552cac2f192acf5a6f86d8b4df80b5e3c6ce0c0ae33c45266532975dda399db70c5fa2864ad6b753cfe3cb4aa8a539c7c2e3df2b330fac1f7ff1384855f58c081ab7aa08b3ac18b056d9cadeb591e0a5dcc55e6ab5181bb53448fed007f1bd453634906fb3c4bf73c8c8bb29eba2fad94c43ef63a0f6866991e8e5b7fe46cf9f0cb7a0a7c94326f0817f233ba3b7efaf28fcc5c741fae6de187e28b0c2996ae7d3ea64e981d063acc2fe6d1f6d056a69880073c91899fcf95fcd723fb519edfab5a90bb4d3f90f7475804500bfdb39c2df641de5d86a107c5e4b5abd7a7acf3c2462ef2b5fa1fdcaba80a05009eccf7c3ffa5bf9dfa86d13fe3311f9d5fd7833d1bf2c969ed8b228fd1d0934659a46f9110f9b11dab09b21c564695c60037e211f7223cb3527a167f085cb1be8a13d41c78fa9becff6ec3eebb47110df993a26589eab622308070ce9a7d064f9ffbc286ca1c42bb5d4dc23b98a10dada1d3f3c6401aec4bba59dbac5e96b8403eccaaf65f8676f8579b64ba4e1d288c17a9fb4c488f6255e87f6788e740edda5752185a53f67bdd9b97b99a02f2cfdad9c3ba3e3f543a952f7071f7d686d4a3f344108eb7425d2bae29c521ec65e466abd152eb9009a3eb070c0fe27fa03e2b287739ccd9d29c94cc5ab08b8dd8ed1f224705fa1459ec5487d8a09de3cc4e68c872abadd9aef"], &(0x7f0000000640)=""/232, 0x1116, 0xe8}, 0x20) r10 = fanotify_init(0x72, 0xc0400) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x2800, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r16 = socket$nl_crypto(0x10, 0x3, 0x15) r17 = timerfd_create(0x5, 0x800) r18 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/snapshot\x00', 0x2081, 0x0) r19 = gettid() r20 = getuid() stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001040)={0xffffffffffffff9c}) r23 = syz_open_dev$sndmidi(&(0x7f0000001080)='/dev/snd/midiC#D#\x00', 0x5, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004700)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004740)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000004840)=0xe8) stat(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000004940)={0x0}, &(0x7f0000004980)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000049c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000004ac0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000006300)=0x0) stat(&(0x7f0000006340)='./file0\x00', &(0x7f0000006380)={0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getgid() r33 = gettid() fstat(0xffffffffffffff9c, &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000006480)='./file0\x00', &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000006540)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000006580)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000006680)=0xe8) r38 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000066c0)=0x0) r40 = getuid() lstat(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000007940)=0x0) r43 = geteuid() getgroups(0x1, &(0x7f0000007980)=[0xee00]) r45 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000079c0)='cgroup.type\x00', 0x2, 0x0) r46 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000007a40)={&(0x7f0000007a00)=',usersystemproc\x00'}, 0x10) r47 = openat$urandom(0xffffffffffffff9c, &(0x7f0000007a80)='/dev/urandom\x00', 0x600100, 0x0) r48 = socket$netlink(0x10, 0x3, 0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000007ac0)={0x7fff, 0x1d, 0x1, 0xffffffffffffff9c}) r50 = openat$vnet(0xffffffffffffff9c, &(0x7f0000007b00)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000007b40)={0x0, 0x80000, 0xffffffffffffffff}) r52 = syz_open_dev$usb(&(0x7f0000007b80)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x400) r53 = socket(0xa, 0x5, 0x1) r54 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000007bc0)) sendmmsg$unix(r0, &(0x7f0000007f80)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="03da9565afde387206a38afdfbf86ff584adf1666e837a2b91a3c4718271869c7712e08bc820f3ec7d8a6aa1cdab1569dc3a4cb3e915af068ce5179b6e540a11928fda1cd5d76a91c834e49587f9d3edd4a552fdac693edc59b286d6d35bdb446302dd140e2709a11c5100abec5a5c258c21ef88e8294735a95f3abb9ab930a1f5758dfec179b95d0490fd1014de674e28e9cb1e42bdfbc188f96fde6ab3ad686497a0ea1107341d", 0xa8}, {&(0x7f00000001c0)="1142935149236efe4d474ef4863ebcf4c922b7b1adea6bc5cd856d5167d9c23a8a5eed9fcaaf8de199a8f8ae21d78815fab9eea75429b5c3d165bf41ea19b01b734324febfa067e62466da1940bb06460afb", 0x52}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="6ed5cb7be5375b78ec08fa49810bdcd205a7929b384b731c2cd1474d304b35a49022986c011861582f221ca1616e389425d22941cb0a16fc3697ab0c63774a3add4bb0f545c3949f218c8a2929a067ad05c338fdbd1e9b68a363bc568a5bb0e1c553187e25130fc76b7cc1cffead88e1700bb51f06752a4150581726ac8b7a72e958189ee8adda046966182bacafaf522ce1d6a8175e4a3943039e1f92982384eacc9b7d606d369afdd6a2a1796a28250bd350f11bf0a964e71105bf74720896d348cf8e6b2c8aa2e3cd4ed2cbc6", 0xce}, {&(0x7f0000000440)="3feeff11141e6416", 0x8}], 0x5, &(0x7f0000008180)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="20000000000000000100000001000000e3fd0c2f399d50b26783e34ff2edb11ed82e1a303ffdbf5bee", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x1}, {&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="78783671af5b70cd4cb5bd6b32e1287100f1b1c542bca69ba5f90b51d4f87906d23cf9b9c672ff01a33ae819560f7489e6b34d19a3f38c82f92515672cd3b134ac8d5528f406a65e88c4200188d1e81440c6dd9d1ea277e67861f89003f54ec3cbf79ad16a1dea921c74b91e0dae8839273bb0ee29e9c0022ff93b8342b4564212439fb2661b10e6eeb8bb3aef6b4d7e69857718759987fd4d2c0b4706d85e444be718299cfdc40cc720b085797548fad4d4d4966c5b23b6117b0ff800e987e61befee4c78ae060a416af389f786a57ad3d15bb16849a004516fd39c030f226889b32e54cc1d728f73fd16071cac0e7eb50dce3cfce1df8b3c023e370452a5bf1f4cad1fb7ad812a2cc471ec006ff5335285a23fdeea6b317f037673fbf7a385909187f6deca791bd726de058118c15b2749642d591a6a8bc645afd9568e9793b15e8bf088e3903c7697c259dbde9f4c4f394682c3052ce97c74686a83cfe6f87f4affed5fdc5726e56a9ace32c723aa17de63c052a7d6fa7a54d9a264c2b64f60f95aba747dee984fb51c97a44b6779ddfac6730905ba131cfd3c7379dd290ef43a9032037d5f771bb3493e905dd5a1485ef2c059b2806370769650f649d3f306c5f603e966d4876db51188a0b52cd3286ac098dfa0cecf0a16641adc8ab9e1efc1e250bb8805ebc4b4e2243145dff170e7f5e078c3823630a8ab56d6716401b8b2212338bcf8d70f28a9179c6f39d4287dc52e0218691cec006ece15f636d34da73614e498154f3c98c470d15c2df063914730de28f1f416bfc8da7710c6ba32d0a676360522eab534cefdb88a83fc9278029c283f3370bfe7b23bbf7ab717c486aaf5de33d3799f39df9b4bac40e6ea300f41a90577fc1ff1bc6ec7abcdf5e61198293351a87935636e2fb2d94c9c02ad12fead00ffe7be641c486a557f13073222ba7ab06342d83cfec44561f269d5d1d7afd47a64d8d914444d34de20a198e32f5cde44459dd72994a3fe7f82fa2eb7b320eda9680380a939533df6f73e17c71d27b4ef86bc88c65153862a09226667d957e942865217d0fce8fc908a2ad8891191de3cd04a57e12e24cb1f6c38d58d488e7f5c7309521f21aa00245655c316ca3edd0922ab87e0896554ba700aa5a8589f5e859d67bf0f35c87ff4c4b7a392e5134e50b765f22cc7e586858e7bc7000ca25816905fecf36cd34f5d49a2494097b94aa9695f3530d3b3aab5ae0a9d67c689e04964527c16addb92ee31d1787126ed0b23214f23fef73e878806f53e4b3ff1439edd6fbfe43dc4bd496dfdfb8e9d9ae13e3d757f81bef8260aa2cf4d4db5e6c0a699e0b741a682932c5971b3d4bf368b2ca14a4273e2761457893880fba38204b43ec0f1b0ccf966b5cee2f38972279ddb42b8b89c41dd9fa470d539dd3a272d6e03a3bac43aca31af38fd5cf79adcd548baa205610f8c45d231d289cb4a6a445e9f41c1ed31256d9f1272fdcc9131f553e3e0bf63a7c15f2df87ebf84afa9deabd92dc1ebfa66f00e9c60cb87f813286370621ba134660d5fe5359f99735ed7d187e80e9d829d57ea86472de923455e50eda088960b08428931711f0f6e9ad2b3c6565fa4ffe9aae188fbb1d37cab22f599a0eb40867e38c0df9562bfa20516fd18370fecd86e4e4d4238c6e5c175f6668893a48de2f54f40460076fd2bc5da15affc5c32bc7e72de226755f8439319931f391a97ddf12ed41244a1c316683c0329c13bffe2a922e24d6f491825d6d3ad2e742460df7ed3b251d18f06881f289cc3001dd5e4ac331eb877085c98b5d791b1dcdfb9897f2c23190ecf34a66e57392093b649ae436b6673cab6b82828af89fb776a55902fa4ef9a412ab1ec7eda5e56638af8b7e5b8576b0f45dcac6399656861f4123e8190f93003c8a5dee255aeb58833178a30f6988abebeb02b519aa71cdeca3cc24ebdc3235cd47677a3a1d15a40bfa9400b2d99dff588e94d4ba3f55e4d36e90a54a31bec2da30973da30c05c58b020080673fc77832848d3f155ce620b64d7d15ff4dcc90a39d2871a8b87c675861060325398e28f400db7756f4374e52d2fe5673320e8bfcf1c8223dd7de69c4fc77370e060a58bb6c8b1228c5e534cbf333d693229d78cbb880a6974b11ced5861259dc740b04d5f2da16a5e66114381dbcd0bb6d6ee06c5bd42595b7071691d863b1dac8694cde38e6a329bf883630699c0c39bf59ef3c6593a2cdded49ed27374ff7e573d28dca9cd989591d160f00cbd6568a282ca5ed8003d9d29d0822262edd7031c9f78dfa6281b42b1050bbe942a4d003286b1389081a6faf3ae8ddcbfb612fedcf36212865a76cf685b21aa4676aa03925179e7937932cf67c222038314ffa62407bb8b49c1d9b3ea12278fae58716655832171c9ba6aac2ddb670a9e774294a7b23f7f35d18e66b79274e0b9219a3bc840a019faea88929369ad48a2c189049bb1b99934cc7a419761ed2ddd546ab30bff6084b58cdc71fa595633998a28bb775629d717dfe00d0fd44c07a3a5674dd0d40264a8af37b7f0e626d753e5940e9d93e44fe08515bec7ba98b00fb786af1beca3590f9f7a735c4b9bf63e842e3a5e865e70ceb300ed90b616d4d07b522aa3744629452bc02251d1d34e4e4780975439f34018535db6a8379e7dcafae0a934ad7c6c1a1d1d8ed4ca306059886103676f221ccb131c9f9aab153325c2b061f871061d215e482ca4de93d135b4c22f7a5355d7b269b2c915ede163377b3e0f49244435d937e734af429558f84157eaeef16f0c747ec4152debb80ad6b3531ec6ed7f86e6a00bab8c5b9e6f74c9e463c9b7a92ebecf94c7e8883d1bd9480bcab35e9bfa30627f86476cecff2e5dbb9a7a8431e511e49239582b0fa3a0bf89668817f9b70f99789889672cbd1db6ca90cc09d8134020062bff3f4909d5ba68d61d1980d60802c2ed9d318f852736b58cb974a80fd411c8305881179f3a052750c7c7520701655a5c0f5f8bace72a47c635a84a48f36bc1b6837609f10b2f02ee0634965f143de914bdbed976e18cd5a902717bb552cd36cd071b0aa9fc65b2205d46ab87b06dd0eb74297d98a82531079f115dafdac9e3d9fe15de909e9b2d74a234a22de7fff6dca9981054510e7e4aaeb203ea6df47a9839ab01397345419a71a029ff8e1b69b7c3abb877c0f9b2301238f005e16d7f73f6bdf5d4e62ecd76c5439f4ca7e19f0c9a1a8bc030d8ee2fc27ed9e5bc0a2659987eec8b47afc4011dabf5fb9f7c90c004cf359e1ae3442118c7872f989e00202afe57e5deb7f282e17c23c2fdd8b2a985ac77ebdb5ebef497d6b2c5a282545a4f7a5f5ce981e9c18c19f95d9cb093c289bec4b12952c09ea6e1ae69d6e1625a205b673f525e6828aa381cf2e82b23b2acba5d5de6af3da081ea7486e439ecb0df567ed93e682be195b5da8b54cd408308a301393e2a9010a6abc76a4ab15b61a19b0e5e03fa4fd47bd53aa2dbaaec45abd1542ce81f3271bea584ba7145a6af143815db4f41b7a2e82b2e2e077b735f626a1b6ac1e448b909a3bce512aabaf462e8deee3a715bbab118462164298a24428a9f2b99a84e47ca2b1b51a65abaa4fa7b8dc34b6ed8375406b4b31da33ec59c3dc7e4dcaf8ab2f28ca86a6a6391bebbccda0c517e021b0e984e7ddf94399c8bc96ddcafc32bcc4a8aaad2929290ab21c2b85123d729625323c0e3381208abc73c798daa952c6445bdff0b423ee9ebed99526560a2c948a690a8ae035f89ebc14d0884f61cef3422825b6d12fe5712f1e5c423184f754aca02c07c99a71789e25eeb961fe3f4d5563dc5bead1d0da91420323b4e558b67d808a2d8cf950d5ac12d37f5785bc0758cb61e3e0ead516fcbb5d25f4beb0d38a644f4a8e86a5a645dedbef75824eaba2463d070eb3e388a6a6d1417c08404a60fa52b6d52e3863f2de07177037b88eacc1ec810eb4803883a212b2dc6b72cf08c6c4903419d27543d0acfded1b9a986e967f112a7984b7870ad774b2a2e39fc532c7c3685d42b656a64349af603ae14440eae2fdb5f18304a81ae43fb7d39e10fe9c742c421af2ac5bd82f92a1206fbe13d098cfd5e6b911aa3b7b12d7e963a004bb99e87e30efebb23376d58a4d3e2103dc0313c038fa4ea1932e73cf8afd0b046455935c597ecbf79c19f81c7340d117cd8630eee0166f441bbc52809a580ef5f9b526f30df9757e8d15b9e0ee42249866289ba31ff3da6286c8a43e0746abd99a90659226ffe2a1913b8fe899b8f232adbe8d2d51b39badcc6ed6f8406807ffeef253e3bc1413d6b9642426094bb41c71f762ebe4527da3c3e8571534ff4c006c193bbc79daf699e4e033cf938dba60126ca48e83c4b8c42d61f20896c91a21786088e2ae7add28c08392f72d733a000118ed140d89e4e39526f1c51be6f3c8a20024965735acad9bd37fc49c4f41c2b3b6dad7ec699a64370ce5802496af295e027202c1407dee2889460b82198b6b8b624021991babb852f88eb5abfe27a5eab9fd575901b7e47f5e2aa58b4fa5b5b28e7ebc670b9af77daf576ab398730e26000750799c8a36dcf666a446dfb3eee5add91592ccd20ba4e320e57579ac2f22475e9342dc08abead62a7331496ed18f6cbf4b04551d3ee4c2bf873c45591e3a7658ffa5f0d98a672d6d154596cce35bd8c423bd4e5717f96d497ddc87cb3f49fdf1b2c1906550231b6d131d8dcbade34d0311d3759653bfd99fe3a31ef20aaaa1f24a35c9a294b4a3e440b43910572887136c6b5420af6a3c8bd2418d6e8cb7d74726780067ecfb055daa53c8a7df4ab0b5a4cfdbd7be60773ff194a4160552e7d0ad4c3039476224288018932c2f3a897bf6ba484b5462db2b2aab474c532ef4bf82d8f0c1ee020259c897f03e1287e76eeeda5ea9d1c8be15fe439c4d422aded198af13677326105177d971ab43a6f5d5ee0a8b47c6b2eecd5008e7e46f88cd2c09047d7e0582796e6d23967c89323607968e917d9bda5da5b5703c4ed32622c819c9d04dba57dcdf33c70e5c26a46a6439151534f447baad076d548cc59981ccd11c32cce42cb34e38c0001f3268e5a110a59cf3ec19c759755ac966663e49e02910b517278f4fc1389c95509fc837ce44fdd1776e028a9b24a9bb39ff497b6ad0807e2ada138f62941df6aadf8419c32c78f5a32bd5531b92aa9fc914f9866d2f7fc574bc9f9347d37f4e042872f776547105f567a9542cbf4a33b4a58fc26b297098710bd8f5d3589ee5484e6c1c09cd0bbcd35714f4c775af8bb8e112ac7ec624860c44a54783b24e855f00f904b5be0249789e800c91750e899a0a4518f8972f87796f4ff9fa4f6a93536fd1c8efc624b036d1fe102f1a6c4b3c67422f8e61974675fdf90502300416f20062a4df302564c7ca6aae4792cc3a1c8327acbaded5a04c10eaad5ef4e72143717372975e9eef3d71c84d98c4b26c304279c679e4ecad47ddc2443b8bbec99af6d2fe95e47f2ef4fbe94ed6fd7ef5b48a1521367434d75bde9c6fa0e1bb759e94d70d9f271fd79524475d0c3f1be935f4dd75cc84bcde46c6474266381f754dac61fd9741a4151934953f77ebf17159aec96541ac1e1499a90a8d95e0f85a8adc2ca32ed67d9047db4763c815e60c72ff26b34281cd73a9cf5c729e1b3d576a0392c7504da1fc456cbce4391756658ab2e8cab102ee3b90dbc2a88daa093bb9d593c00eb2df7adcdc4b7a23a596b6e78164914ac7b6e69e38d357d9c70aab5dc34eb1", 0x1000}, {&(0x7f0000000c80)="41173ebc0f0346cd51591ddf333d8e448cd7eedabb262104777ec378fd9ac4691d66ffffb7fd67dccb90cb3f9f7c9cdb1cf5bfea36bbbb5a2ff66279815c07756a49213b67f9acc80d9dc0199b175eb5cde94bd8c8829e0cdb1c58f57a5a4c8a69cba39849770d35483b3816a4dfbc5aebbcc2d79696cc403b1b9dd97f867220b0ca5f8ea0b7c10186dc8bf64127a8f6bc3ca88356781481421122e698a93e7d95829c34a6b23e9c3259d4589774af54a76b5a6baaf8e60b90ecf619e9dfba76", 0xc0}, {&(0x7f0000000d40)="22770448bb066b648900f6d01216b8e40003b7b8665a8dfda95f1e2307e3a3392fef68d7ddbee04998feea7f4a5185b4d11ed3c18adf05539d6d5e56848a3db32c9bcc8852c38c6f70cd7842efcd85bc863fc152cb2c52532295f140d7bc2a57fb6b3134aa9f82c4dc7094c94ce38cb5f8f90767fb2f3b62932f66a04c11", 0x7e}, {&(0x7f0000000dc0)="1a5127069696399207e3f44eeb6742273e98fec3ba0eff65f8cc3cc37c9753fa1f5b4ed9285e4304af5930ecd77ab650f73e5e2f78b9afabad027dac975c840f6f5a4839707d946352637320688e8ca3ca2c768b9b7caf898b26a7d7eab826f65a53f60935cd26431d0dde16d9731f0cd4876db43bc631e2f8be9386e9ccb2b778e914cf4184ca6ce56d9c98bc38e6c189b024be08b3cc6121419be62b4a4d2478eea92ac0095762ea0b3c37a08daec6c5d06132679b0dedc6d56710912dcd179934b9cefcdf2b07dfee2cca2d599a", 0xcf}, {&(0x7f0000000ec0)="0adfbdc61f37c11a193e353a41a1bf5717b756de3a1ed397e07b6898ed0088163a7064741585ea22744428c0d82f1b9f9e1ee2b09ff3def71c87ea4ac14aa8e15bd2635ae5eab070a435652924512a8565501dd8ed32a28710c99a6b720e204060c658ecd6409f74c24d53d6796e4e5e1a2ac044f94e2749de9aa15747bbca2bb5772fd2f716c05ad9de698ac9f39d76f484285b954aa1eadb74c03690ee79f95fd1258ec2a19e6a9748e27c0b6883e2bcb5f073dcd6", 0xb6}, {&(0x7f0000000f80)="7f42aba3494e44294feadf5e49f2588d4d621cc787794bb1", 0x18}], 0x7, &(0x7f00000010c0)=[@rights={0x18, 0x1, 0x1, [r22, r23]}], 0x18, 0x10}, {&(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000001180)="eb98781080404abaf3f814e79a659d69ab7c122b1371114a214f1f2e912d2ff71a3b455878be72445387993cf79ec41fa2c7dd6960f3f950ad0d146f6a6dc5c9dc92f702dc297d24364e0c51357ca6c59e765c1731341f5fd3cab262f36071bb22b063137c5191a270fa8324e25fcdf4f266de4055ebff481cc846", 0x7b}, {&(0x7f0000001200)="a6da08ce7375b659496622d729b5c895ef889427620cf2324c0d6865fef9b5a8c446abb1088c9c3aaf9227c08e17dead580b1331b04ac7d3882f699372face576ec298cd03a6e211356f9f1e89d84061b0dbc7bb13a4967e99cd7f43b0ad6578f5dbefc091b3efd64c27491d353330a0221049ca28f79296a5b862260dfdea3f6245d94897dbe6b8a759be1eec63f4fd13db2ea31061244f81cf845fde82843322d6506d06c24fd17ac516827160c9775979443eb33402a27e7c9cb572a5792f", 0xc0}, {&(0x7f0000004480)="688dadca935a945e9bd4e9d77afef297f42c2bbcab265c4f3d2efb7dffa9005fc441132110f1e57e0a8bcc7c3295abfdc36fbb2b33a770dc8ece1a045ec765e2f3eff47bc550745da2b36949ade966b238ea1213d53cfa0515b621d14f803a49dfd04468c596a7f353166e9dea0eee6afddb8df1ec5787805a631627a748c37e2251f1aa8d2b7405aa32e6bd1caa453c071c61c00dd17969ee46d3b6da02072382863f590ead6cc496040b8643e17fa5e35e08a873fea8bc94bf200ea46159a03743215763bc347b04c4779532", 0xcd}, {&(0x7f0000004580)="42cc79989ca81b3594e0a27b7340bf7f77f1558b733a612dce51360fd1963e9dd7e65173f96b0e6f240b3a98219a2d47e8da40a4edde616c8bc19b2e4be97b1421e1911a5d20968803fc4a12e6f5ea8a0f", 0x51}, {&(0x7f0000004600)="066519556325c8601b68557c71ef5585335a12359d381df9ab29b0e6421ce8799e78fbf876cbc5b8c87d6a2dbf5c50e77416fe8172111dd60e76c6f9aa3bc73c91f972481267eb9d77151eb1a6f6017887246972a5b60acf0fa6309ecd1058de838ec881037f4675f59c3b", 0x6b}], 0x5, &(0x7f0000004b80)=[@cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}], 0x40, 0x4}, {&(0x7f0000004bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004c40)="4f077a931b88d32541baa4de7bb7ae05ad85ff2f8bd528c020b52ca5583bdbba32e3f870e06dd74aa6418779", 0x2c}], 0x1, 0x0, 0x0, 0x4004814}, {&(0x7f0000004cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004d40)="7129fbedd5ea7834e5aafb83f2b9c282343e26fff87195a6fd029552256eef9a771e8bf81a14b06b1c45f4f71a4bd2ba6c27e342097599565be897d5010ebb25d6f77262ee49b0770ee5eb467774e3f3ba1811696da374fe72323c65baa3f40e893c8c86f46b574f1d83a53d5a7e2e1a50de6c2d1f33eaf0b6c94990cba9eafec290a8f705790908b4745ee9e0ad76ffc9f83e074d0e69e8312da4", 0x9b}, {&(0x7f0000004e00)="8a0c3b60e69bdf8680cc61d345152a2d97dc422c981f5599cffad3bcaf784931c1c9b6a9bc5d477536809223fb0633738a01d2759681920550a8e902fb908552685d3834492669dd4aebc567df3c14d21b3b9137d1937e21454cf01edffd70e10591259564f3ddec739517e26587e5419b80f0fc9d354e03b8ca6bf57c91c19091a8d4a838920e6896a1e1952430806d56c9db1b0c6a5a86a072074a90de732e6cb34b878403d9917896a06ecf8cbf8c1dc0d141fdd77c44add63f6f00539cf4e6d2483f4c6c7ca340ad1b6cde6615a1e511f602da0581ece12315d64c23a7873d8b6a3853832ba1a6fc0d8dd8c056c45425c6", 0xf3}, {&(0x7f0000004f00)="6a4e8c70f451ec730791536d0042806371bfb420f3003c4af3d7c19a6519e47464608a0012d7c8e151558afb831fd76e6892e64e967a20a62b5de23e9c71b42f519908d98ffbc95e9d62f91a7a441bb29764c8e0629d4d851cb600d7577b8b4f4dd229f68993ce8fb19e239d47861764b8450e43dfbf22d4b81c35ee40b063703b18ace0b61b0eb58f60d5b608c422def0f3e133821afb2916c0c01c7efc6959473a", 0xa2}, {&(0x7f0000004fc0)="bd50561478dd3637b265b3abe2002a1fe2db20a138da697b95493be28e07de87e79491b04e278ee9cd2fd3c1f47893803bf2f30c5f771a116e3f44de11493eafb1be04d4043c5d3082fbf41a3257fe6809ce666e7a41aab24d7a5cf8c5f701e5a462d9ce11e92a1d386110eb1ac59a55df9864e8eb840e8512abed06e6bd26522f66f7ede8e54ad7f2a0d8dfbbb0a883b715235f7f6fdbd9f04cf6a252829c17df0bec50155ca5cf4569b9a85aa2bd4eeee4a90b1362c312b84b68c1014dfa0e06608679a6c33c383e166ad6ce9e8bc9cea9f8bd497b65cae0a66cfe", 0xdc}, {&(0x7f00000050c0)="008f376b067ae6ec98fc0daae571983e04b22141281961a72b9e45b4e4409bca357daa817c7f1ef851c823d2379226d355bcfa64282fb46f6e0845e4d4f02ef048fee04c02a6c9fffedf88272856241ec0ec6f79d34bce188b87037ed67abfe489fcccb4839e074cc24a004dac74b22bd4d4e13e712bce18783dec557bbba45e49f9e74295da2e8d31375154ee705b976fb4312265ebd2bb6c1b10de5498f0040956333558cebdcc4dd17f28904793d89230957b99d3f9dc4db1f721c5c1dfc57ecfdabcaa9c0bd9132d747898484f902aef9f61b0a43b22a4f1e8d30734cb960e3a", 0xe2}], 0x5, 0x0, 0x0, 0x40890}, {&(0x7f0000005240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000062c0)=[{&(0x7f00000052c0)="6392b0fa4d4844fe84a14e0effe4d6d65d213662c9e8b8825d4c2c5f44ee4a283ace10bfa42234dbeb4750dd19ac21fd688203c7387d567674dc1770a46188af66234cac034ccdfbf5866dfe2ae3340eaf6ad3986838950ab0614fc43fd436da3acea1fed9a801d6dcad66f371b7ad41fe8425e37543ba86482ba34888ba638fe9242af5b74f6105cbdef097377be5c341241a897b7043a9237b7333e2f54fe27f0445e1708d79bc889beed2d3cd2c7140fc4a4094d0e8cf3b8d165d39da85438a51356a80d6302a5e49a611531dc047ce4d364837ec47be278e896c3d8f4a34348cc96d739acf585a0602d3eecccf2175a79e4ad7bf6d0675b18022a3e59b747061423e3b4286181bf6f592367b08516878b50f7abc231eefd098f1618281eeb5680d8778258d88c7c606d5bae6ac99161e771cd306e5479437af11df67a62f04c8087c6efcb98fb48a47ee3e42ec517e0f1c0af57eb197db9cf36b856ac5349ee7d6d9124e242d07be0c3535d8133b8c5b10ca183b502d7522614a340d82e3bfa806a263933c0b4e6cfedbdaaf8db84ce38953256bbfd00e10c2c487666c2dc221711c30456f4189aca29b8a06130fcfef7e192c3fa505438b1ac54c92b1b56d0cb0cdde9b1cab193cdbc3d2ec065a176b90a7954feea9674a9f21ccf87b0941b690cb23657a78f578e277dd9827bae866af2e5846553b746be4576cdfd1d977a9dcf718958cbbd8f4d9116937be2da506dddc12351fd3ca1317ba5415408721433560ac8596374b6349303ab012abde55cabe2cb347327ab09a0d0a857dbbd3780ab37c5469ebdab0f5d78701a7a17a551b66b7af250fac6705134f0cf34fe42f096a523a7d36392aaaf24f5c402355d5499fc2cbd1817a331d502480004d099d1bb5ec4d163c75c6007bf7550aeb66c26f3e1fba09b0e866dca23c625ff4dc988f8d9ff266b5567b0eeca8bb751c9795bad955c54f20a3d970e170c0e14dde71ee58c12e1582b2aa7f8b7df9d4b03993f02511992265d7bc84647e357bef7f426147f7f654b98757e1d69db1bbbd2e5b400b3b670f9df368acc56c2c7ba7be2e4720bbd202ded7623db725985011d5c1e970c80164c749ef5213ecef7a487fda705db2435f7d1d70246ad7145d0fd5578c6c4cf343bdc6d5cf86c085e44738a7c23e58fb0ca2387d8388dad9a6f36272c3e272e95bdf9c5bd299bc22751803bc9457a93dc84105a1fa3c8e575e5cc8993e832775586c07d11b0b74d04af68b625cc2c44f5399488009d837d119166c81baeebbd194ab7424d7e0e29e840fb36e3fdd3bd849be3b30541be528b4de03f9a2850c518a415149e694576eef13036e6ecd2879f356deaf0fa5b983fc6ea9ee3b0693115c8aa414f4b39800dd9458403553b94ea470d1d5975f130beec7d2089586b2b6c762ca4a1c693d09df7ddf9f777050aba89849960436cb803c4a963d47745f61d7466af128894ad64dbd1e868fc70ce4ad7d0324b22400f24991b40f8105aca0ecc7c7bc91f162531e9ec66523afd1c66c3936a84cad1ee83fcdade8d61b84ae37800d1cd4f067acb31e9c3e6adb77ffa533d4766c3cd07a501b1ee098a68dc81192541c5c4f52cfdf7f9ffdf9eb09bdada4cf500256bc867c284b552089760c81ce49e28e135db48ced8f7734364325bc6e5b69fc5ee28a40fe64cfd5f68d60e8f5254143a328d978980d0d63f5bf8988c36bfc3b36f0989145e94d0d3098fafb6d8afc003426bad1050cc5a32854aa4dd150a58fec08a3eb4357c87f550dc3fe8dd6ae77d4c272ffcb6062963579186c1dddd937c424b22677129979cc369fcc4c72ba7874f7adce1abb849509a275e38af0e97ca5831f8687510faca1602e49843a8889305a7ce2c8d3155678fc015a741ea9932ea31e104cf907705f16e06460a1e26db9da998ffefbf50891ee868c0ee34ad4f989b7bd89e085af32dddbc6ee22268a592c4ac3cff58f3e4ae9ed452f0379873464b0dfb4d72b6946df4d7a73799fd6c3dba0cdb4d00e93798582afba4bcd6b69ed04a8ee5f5259a7209e0559c92e02b98157a243bbf8277e3456a2ed96207dd2fb863540324b918a6a18f68f958708af063b8e1ca8460fd280ec9344ee93d4370540d13e86c6b45ff9e855c1f62885728a8db29eb296a6ba2e57813abe2ac95dfc765003c403e7a287045abe66c46d8f3214c629e58167a24629f6aafb815f32f8f31b7809f78b281afeff879ee49c14a560b3dfc7876365f0059e1b59d2e79c3c4844b4d1699c092fc36425bf3b13d038839cf0eb7177c00abf79aef6a519393916e3263b436968f2c6ccf7ff0cd41fd0d775dc0f704cbb178a58c913d54b8a4b76dc77df7694eaebd6b40deb956bea87824fa61afadb3a0d4b86b01bc64cf4ab1b6d7b9ca6291727bc03bdd720bdd215a023442dca2ed1a6c5d2d9d0366bd234d272c124549fb44646e9f60af36fd0a2da06d53e2b379a4718bdc6df97dec4368263da72c9cf86df02bbdd277da732ec912d60b5bafcf785b656b02bf28767fcca8c166e878d341b164ca67b01cef136750f5d1028f8a72c0fc7c6baa2fa5e27c35aaf77f2b2ff9c419781a7fbb686eccaf9273dad1fdfd368d0502d2ed1a5b891a30ba847dd7128ee9374c9d1a6a90f3c14a417679e16219be042fef6ff37835efaaf8a643eae60d60beb686f1a11e608319faad14c0cddd550bde07cb1573e575ec7ebbb11adea610e93529c06a6062d3fb08c36ee90ec464bd3b77ec30e0898ce49ad8a59f11b71ab28938980268e3b1a6970a437179eb4cbe708ab19478ad32a03cadcfd0bac6cb3f5005a8f971df7a26850629f89a18b75ec709227d380828fdd01a77116e7c28b3765b65ab965043733e8064354098ebc06aa92e7943794808db30f621c958a1020df2eac09bf9f0e480f9505c28abd04e3c7f9d4c9786bb641a9a1b263bf229e5c4ec252019ab6e002f587c532ec308586147c33bbc6be087fedf10c19c7282ac679b3a05b326a2f55a14f010bc8a929519f932ea2206040d8a7fe0a261a7c5946066c86324c4a88df30f10684d75781076dc8a1120502803a9736f9670bdd5defa27d9157b8f137264e4e2101b2887c6865393943ee4ae21119293f1e53506b0a0eca4ffc92a588b9ba254b64b1941fa2ceacc3ba3d726156acda0d2ade6babcaf3dccaea1effaf3973179814960536c7ca4ce5db0ef96e81dee54d8b5f56996081db7cae55cf28a9d7dce27f616e73a7fdb2aa06d5d280d3da121e6a110c4c93266864fc355ad9ad57e1e008e26864e0564a00e0db3261329cae4a4b0874b40fd636ca76a47e40f46de13cfa7b7ce87ef42c878884fe9053ccc50da434a70eac04bcaf1f4df41ebe3aeae992d01ed955b8011b9c25bf809edc2f831c221450a5536d85641830be50019fa63635e14213e800cbadf6a7fa00d2e2f0a3c56fd82902234e8edcfe29bde7b616cdcfdb2e8b1d732249e85bfddf6d2bbf49f045fd46390be3487f02effa78b83f61b934926a010d02d35a8c54121ef8d3ac3abd7f8711e8beaac26e110c27f8e7ea002e288c47a53408417dc69af585c48376a5988863d1f2eb094da9fbb8cd7539d1aa2950df45ea85472318d63331cefdf00d9606317ed93941ef3bf178122abd1fdcf4543f40b0efcf5f5ea38a54ed8d75965d653be6e21ed77e9ab1943b37ebd77d6024a2fe094af8335b419bdff723bd06b34e344fe6ec8dbb32795a0f1a1633f1aeb93feb51e6b4cd81d2ce9c077e1ce03fb883650adb3c34079033e2f10eda27f8179f2736fdcfce7168f2b3026558d33e91d63a026563d6aaf0879715ddd34bf6eda535df154ce57d17aff4d0def5f9a1a73ebdce55b318b19e2e6f3787f31a979dd968ae04a9c0db96f983de59dd127b99d6873f4e1de36b8403247cab03bcc4ed50b3fbc3ac42a9a843215ff2c75e1dca09d8fdecfa79a315e91687770cf30dfdc29d14e136ec5ec224f7ebc98a3db4371a2e417c2ad0ddd3fb7f957f9110b065b3f43817aba345e8cb853c0828cba6e831092aceee7f99d2ba22698492ac5d28b220c2f01746ff7996e1c6974170dee2ff1fac5f1a21dc331e7d5e599230adb101de55bbbf0d8f0c8b787a2b237f84d421a4e786418d7bd9b4afa5e9e781c195038445e60d9d66a33e7e2df9828f36cf4e699ddb7b10c2de492eae7ee2415133bd5dc38663f32a76b5953b4a85e1f8faa955552d096ba4b8029886a0fccf4f5aa8595af41534b78ecdb28c599c44bfea0a5eccc6346710dc369fb9133b2026639aa13435f617e33d67f4c7421bdbe5c6119e41d8c1d600905f59ee2fcdf5e93a3d2c21e648f7591141a86078bd09394708a6e694e425e6d77b6459a5fd1da7b6451c019c087ee3fbcbcf2bd03c1198c24e719ffa85bdaf6ce1b2703d365058ee8d65126c4bb5198f577fa5df292b34c1f9a40bcb3ec041b8470c1b98426bc0bd27eaa4f48333f71065ec7b4f672837df2fdb1896abfbfe071eb5359a0718d4c315d293b7e69f31052ea23c1a8044e7fd7ce5a21d64a84ffadf766a0477e2b3d8cd57b4960ed7525ebd41526b8496908682a34a5041956c8486cfac6f3b339a37e5fa3c0afb8b3d72540a17a3813b87d3bfb33497281cc4eb70bfc06680955b5f11415c9c94a6cf0390390512e77ab2fd9e9c07970ca0086bd57cd29b8e11c98bfcf0b48dbd3feeaf852f37e3296f9d28f80b82d5fff99688807830549254a613afb6ab8f54c0bbe05a59be37b778b67d3d856b1f807403e720487a2e8d01fee87549344c3c2f66f28d40a5379c541a61c68a520de5efcb03a6def6b2d23728f75e0d8642b89c8366af32d5a6d6f7a2dbec6966cfc46106f290fb6c0c5f178eead368f2c33af0e3ca8d5bbd5e66ae0005cd3fa081368071ec289826cfc6dd6c991d3ed6ba646421e6dca60eac7555c5b3f77ab7ceb7eb0b70dc1c9be49c32489165d85f095ed0a1f8fd00fad0eebf08bcdbcd817d987664f221faf4fe2442d18b58059942348ec003699db842f6b764aac8af1cd7ad578519323fb7e75439ad6f5a62226a8b3716bd0110c6577c860b72e1521ebdf862f7f1480bcf33b279c9458153009709b688643a0dd1cd98523eb1727c7cdff6659cf27f146df958dedc501f71bb613664b26adbe88b950a73c70f87b621f6233dc0c54b7c70722d868f588ee8719a053f010cab0756b3bb0c7e319d44a26a679f74ffca08d7d3c37dade8f7ed066f4ea85cd2c1bbcba91df8dadc5c73627880e95dc47dfd99f3aebe9c8e6adfacec37500fc96bce774ffafb9f653e290a147ba61c69f2f83f50173513ed9d9c6e3a01aefc715d576b020dd311776d7d6f0a045dd8c0ad339b02e9c2831d8e6e85681dc97c93945e1474420b404e70fb22fdeb8489a079d3a23025a99031027c462bafffb5435a84ab3c7de4bf3013a5b36400f8bc9d8dae7f018a17bdf16d1d5c194936d44cfb5fae516f3a4c89f8b6ea28b4cea1f823fa735262f4b150f3ce181186c6682d2b842755740adb7bed2609c7023fd087e7ae8319a7d3fec4003b44df3511ed45f5825f99e1caae876310bd70949bc78284dc5be90862202ee748d4f62a237fcf5888408f4b79fbea6d630c87e3528f7d1b3cea59aa1ce04f2590bf9fa7e6dceb0522353548c9206219bcec92dc0353b6a861804a8622f2fe73c46bc3b1fe0ccc9bc89e1547ba10ff57046c339b07a18c6cc964ca1a9bbde5e05f40a9fbe727661b6b9101b0e9c7505c2ff0bce88fb5a4", 0x1000}], 0x1, &(0x7f00000067c0)=[@cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}], 0x80, 0x4040}, {&(0x7f0000006840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007900)=[{&(0x7f00000068c0)}, {&(0x7f0000006900)="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", 0x1000}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r42, @ANYRES32=r43, @ANYRES32=r44, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r45, @ANYBLOB="d81ec7833f47239ab6289c1ec40000000038000000000000000100000801008000", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r50, @ANYRES32=r51, @ANYRES32=r52, @ANYRES32=r53, @ANYRES32=r54, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x20004004}, {&(0x7f0000007c80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007e00)=[{&(0x7f0000007d00)="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", 0xfe}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000007e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007f40)=[{&(0x7f0000007ec0)="a5a89ffb99b09f39913209babf4f39d72938d054134c1ed1e655b4d0eb9228bd201a4001bc413708d3fa8910472e12503d674391b09a3df0de300607cc7794bd1eeb784b028908c1844b8d05cbf0059093b8e43aaa5b2ee6a6dd26", 0x5b}], 0x1, 0x0, 0x0, 0x20040080}], 0x9, 0x4000) r55 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r55, 0x0, 0x40, &(0x7f00000012c0)={'raw\x00'}, &(0x7f0000000040)=0x54) 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffffffa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:32 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000879ff8), &(0x7f0000106ff8)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f000063bffe)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000380)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000200)=""/43, 0x2b, 0x4, 0xfffffffffffffffc, 0x4, 0xa9c, 0x8}, 0x11c) r1 = memfd_create(&(0x7f0000000280)='syz1\x00', 0x2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=0x0, &(0x7f0000000500)=0x4) write$binfmt_elf32(r0, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x4, 0x8, 0x9, 0x3, 0x3, 0x3, 0x256, 0x38, 0x27f, 0x3, 0x9, 0x20, 0x2, 0x10000, 0x2, 0x2}, [{0x4, 0x9, 0x32, 0x9, 0x7f, 0x7fff, 0xfffffffffffffffa, 0xadbc}, {0x60000000, 0x20, 0x7fff, 0x359, 0x886b, 0x401, 0x401, 0xe97}], "be0e81d0ecf2d494f670cfe25bc2c4bd9210931472ea0b32b58781f14fac79b9db314d7e6c82cf93045f420803decb1bddba1b27e947851eed48f0e638418163d6870e2bc56680455e99e8b728209acd7ddee0c94d663051c909cd2b44fa45eba2337cf83d9aad98143d86dbede4de4d7d9cfcb86a73905d045f88a55e2adb2656bba401834c5548377c4a1f9da6d627218f3a630f21b0f10e4e517842", [[], [], [], [], [], [], []]}, 0x815) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000005c0)=0x9, 0x4) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000780)=""/140) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000600)={r2, 0xfc, "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"}, &(0x7f0000000000)=0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='syz1\x00', 0xffffffffffffff9c}, 0xffffffffffffff94) futex(&(0x7f00000001c0)=0x1, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000740), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000840)={0x0, 0x0, 'client1\x00', 0x2, "fd2f9414d8324a8a", "b14b267d8a08a82f4aea20bced80630e699e60d78068e75ac992a496e421f4e2", 0x819d, 0xffffffffffffffef}) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="5a374d32bd5e5d8e7cf8a63ca5bc863cb606692e628c25a8ff0f60ba5bc688590e96d5b51079e0b667143bffffffffffffe300000000000000"], &(0x7f000039cff8)='./file0\x00', &(0x7f0000ff6000)='9p\x00', 0x1001, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000080)) 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 625.450437] binder_alloc: 28656: binder_alloc_buf, no vma [ 625.459037] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.464248] binder: 28656:28657 transaction failed 29189/-3, size 0-0 line 2973 [ 625.479385] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.499690] binder: undelivered TRANSACTION_ERROR: 29189 14:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 625.526421] binder: BINDER_SET_CONTEXT_MGR already set [ 625.527871] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.548346] binder: 28656:28664 ioctl 40046207 0 returned -16 [ 625.551242] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.561666] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.568824] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 14:23:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[0xc85, 0x5, 0x0]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x60, &(0x7f0000000140)={0x0, 'veth1\x00', 0x3}, 0x18) [ 625.575990] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.583152] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.590299] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.597606] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.605591] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.612829] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.620050] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.627391] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.628178] binder_alloc: 28656: binder_alloc_buf, no vma [ 625.634690] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.634710] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.634736] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.663981] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 14:23:32 executing program 3: r0 = socket$inet6(0xa, 0x6aec060e74f14f3b, 0x2) setsockopt$inet6_mtu(r0, 0x29, 0x12, &(0x7f0000000080)=0x7, 0x3c7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x14931aae3900a70e, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x200, 0x4, 0x7, 0x3, 0x10000, 0x8, 0x1ff, 0x8517, 0x1}) [ 625.671726] binder: 28656:28657 transaction failed 29189/-3, size 0-0 line 2973 [ 625.679776] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.687325] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.698091] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.715342] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.727079] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.734257] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.748913] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.749521] audit: type=1804 audit(1538749412.930:232): pid=28688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="dsp" dev="sda1" ino=16558 res=1 [ 625.759645] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.790150] audit: type=1804 audit(1538749412.970:233): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="dsp" dev="sda1" ino=16558 res=1 [ 625.797196] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.818967] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.826915] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.834108] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.841270] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.848597] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.855814] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.862971] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.870069] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.877218] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.884360] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.891583] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.898870] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.906002] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.913261] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.920462] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.927755] hid-generic 0004:FFFFFFFC:0004.0008: unknown main item tag 0x0 [ 625.936013] hid-generic 0004:FFFFFFFC:0004.0008: hidraw0: HID va.9c Device [syz0] on syz0 [ 625.945763] binder: undelivered TRANSACTION_ERROR: 29189 14:23:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86e866bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x0, &(0x7f00000000c0)=[@dstype3={0x7, 0xf}, @cr0={0x0, 0x80000002}], 0x2) 14:23:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="ffffff7f000005003749a91127ae5d32b76d7a5f05d92cd53322f60f5fbeb3e4964e20f316129002bccd23d1007dae39191098a0497c11c4d1d5855d462a0d6d7b4e710194357b025e2c00b6230b53ab3a363702adbdf265ca06fd638c5c3b5a1aa875b32a2ee45e604720f10484b5b26eba43e4ff670580f781923f31252c9f99c79d0e3fbb5e0ac9348fb433e50a958875538c00da5cbfc8fe9599c501d15e4a0c12e4aee557f4644c2f281a732484509f9c1f000000"], 0x35, 0x0, &(0x7f0000000000)="ac088e7ad93009a6dc9875201e992e1ecd9f66b37e841b373752d8cdaa412a220d7d21db3329bb57dbda13c39083dd6a3f347266b9"}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) ioperm(0x2, 0xfffffffffffffff9, 0x100) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/205, 0xcd}], 0x9, 0x0, 0x0, 0x7}, 0x10141) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000ac0)=0x1e) r3 = dup2(r1, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r3, 0x10e, 0x4, &(0x7f0000000240), &(0x7f0000000080)=0x1) 14:23:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1004000002802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0fa3027cc7ac8f5a9a95900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080"], 0x119) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, 0xffffffffffffff0b}, 0x6) 14:23:33 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) syncfs(r1) read(r1, &(0x7f00000000c0)=""/94, 0xfffffe1f) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x84240) dup3(r2, r1, 0x0) write(r1, &(0x7f0000000140)="8084076225ab04018e6184b37314ec5b79485b46013a02552abbef25867eb04b55f1889f7f5e99637446e1f8b224148ce0d24da221dee353bca6e1668cd216498aeddcba872119c981d88a4de8e387d01ed26e0ad72857c94dae4c708bab3864e3c8aea8e75170f979999db12d9b114a06b4499a0648ba83f56cc1c92ab136da4c22eac5a6be02fab5040001fae00cb1317f04d4145711266521f8ca0274be7b4553cd4768118f4a32db49530cd40e60a1ab88a56f", 0x38833a16) 14:23:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x3ff, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0}, 0xa0) 14:23:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffffffa0018000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:33 executing program 5: pipe(&(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa3}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2, 0xf, "937c32d413d26281f8106970e9ec9e"}, &(0x7f0000000240)=0x17) fcntl$setpipe(r1, 0x407, 0xdb45aa1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x5, 0xa5ec, 0x3, 0x4000000000, 0x1020000000, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)) pipe2(&(0x7f0000000000), 0x0) 14:23:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xff00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 626.178133] binder: 28701:28718 transaction failed 29201/-22, size -1967019296731815373-184667474499751574 line 2973 [ 626.218046] binder: undelivered TRANSACTION_ERROR: 29201 14:23:33 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="100000d4fa00000002000000000000000000000000000000000000000000b2f4f733269ed4710000f1000000b8ddb308e446758291f58b5a2b5aaf6508e6d809f3520a817003f45252f1cc3eb13690f7ee97b52364f49cce3387f29a5eaf33217105553eee285db57c31faf037d3afacd557844501e2eef862826ed6"]}) 14:23:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@loopback, @in=@remote}}, {{@in=@dev}}}, &(0x7f0000000a40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"393b0000000004000000000000110400"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000440)={0x3, r3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) msgget(0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x3ff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2000, 0x100000001, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000340)={0x0, r2}) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000300)=""/38) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 14:23:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x40, 0x12) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5a00bafc19d2d378c4c478b072"], 0xd) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) keyctl$join(0x1, &(0x7f00000005c0)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x880) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xec3cb9ac915778ed, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x0, 0x7, 0x0, 0x7}, 0xb) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x2}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fb000000ffffff7f0000000009000000000000000100000000000000abd6b72400000000000000000000000000000000000000000000000000000000ff00000005000000ba0d0000000000004400000000000000040000000000000075e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000"]) close(0xffffffffffffffff) [ 626.493854] *** Guest State *** [ 626.497353] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 626.507584] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 626.517128] CR3 = 0x0000000000000000 [ 626.521292] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 626.527559] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 626.534344] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 626.542217] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 626.550380] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.559127] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 626.568041] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.576434] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.585101] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.593381] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 626.602244] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 626.610583] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 626.618897] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 626.627293] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 626.634153] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 626.641962] Interruptibility = 00000000 ActivityState = 00000000 [ 626.648535] *** Host State *** [ 626.652107] RIP = 0xffffffff811f2607 RSP = 0xffff880184bc7350 [ 626.658448] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 626.665243] FSBase=00007f3736168700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 626.673572] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 626.679805] CR0=0000000080050033 CR3=00000001185cc000 CR4=00000000001426f0 [ 626.687273] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 626.694302] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 626.700796] *** Control State *** [ 626.704653] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000cb [ 626.711838] EntryControls=0000d1ff ExitControls=002fefff [ 626.717609] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 626.724829] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 626.732365] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 626.739220] reason=80000021 qualification=0000000000000000 [ 626.745899] IDTVectoring: info=00000000 errcode=00000000 [ 626.745957] TSC Offset = 0xfffffeae1e07ca07 [ 626.745996] TPR Threshold = 0x00 [ 626.746055] EPT pointer = 0x000000011745f01e [ 626.904185] binder: BINDER_SET_CONTEXT_MGR already set [ 626.909763] binder: 28701:28757 ioctl 40046207 0 returned -16 [ 626.916091] binder_alloc: 28701: binder_alloc_buf, no vma [ 626.922169] binder: 28701:28718 transaction failed 29189/-3, size -1967019296731815373-184667474499751574 line 2973 [ 626.933553] binder: undelivered TRANSACTION_ERROR: 29189 14:23:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000062b9492f38783c84b5df22f7e53f5346094bb4d2bae61d8b1553d7c0ea0a3dd9d28ca4ac60a0f4d7e0b893ea1326d67c45be240d0015"], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:34 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x80800) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f00000006c0)={[{@fmask={'fmask', 0x2c}}]}) 14:23:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:34 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x4e21, 0x0, @empty, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x5c) r0 = socket(0x10, 0x800, 0x3ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x3, 0x0, 0x9}, 0x14) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0)=0x800, 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0xf9, 0x0, 0x7f, 0x5, 0x8, 0x4}, {0x800, 0x3, 0x1000, 0xbb, 0x3f}], [[]]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 14:23:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") getsockname$unix(r1, &(0x7f0000000040), &(0x7f0000000100)=0x6e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0) 14:23:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0xff, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0xa}]}]}, 0x16c}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) [ 627.042304] ntfs: (device loop3): parse_options(): The fmask option requires an argument. 14:23:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xb804000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:34 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0xffffffffffffffc1, 0x40b4, 0x1, 0x7, 0x48000, 0x9}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) unshare(0x400) dup2(r0, r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0\x00', 0x400}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/107) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="638dad17b50bfe42e67235861d8eb306a074d6e6e223cd091e1d8576ed01b6346906e91c1cbd00000000000000000000", 0x30) timerfd_gettime(r0, &(0x7f00000000c0)) 14:23:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000ce5000)=""/68, &(0x7f000099fffc)=0x44) socket$nl_route(0x10, 0x3, 0x0) 14:23:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x40, 0x12) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5a00bafc19d2d378c4c478b072"], 0xd) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) keyctl$join(0x1, &(0x7f00000005c0)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x880) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xec3cb9ac915778ed, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x0, 0x7, 0x0, 0x7}, 0xb) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x2}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fb000000ffffff7f0000000009000000000000000100000000000000abd6b72400000000000000000000000000000000000000000000000000000000ff00000005000000ba0d0000000000004400000000000000040000000000000075e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000"]) close(0xffffffffffffffff) [ 627.147328] ntfs: (device loop3): parse_options(): The fmask option requires an argument. [ 627.147610] binder_alloc: 28770: binder_alloc_buf size -6103664491165621152 failed, no address space 14:23:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x2]}, &(0x7f0000000180)=0x6) 14:23:34 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) shutdown(r1, 0x1) ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x349) r2 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000de9000/0x1000)=nil, 0x1000}, &(0x7f0000000a80)=0x10) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000b40)={{0xbf, @broadcast, 0x4e24, 0x0, 'none\x00', 0x9, 0xff80000000000000, 0x4c}, {@empty, 0x4e22, 0x2000, 0x1ff, 0xfe9a}}, 0x44) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x7ce) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="8d9c98"], 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/full\x00', 0x2000, 0x0) name_to_handle_at(r1, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0xb7, 0x10000, "b8c2e8c8179d9f7d6c108e69780fc9248891865e086265e4514163de02782522bf2785e0d3ed441c6156e59716dbb2c97789c4b67bfd72b4c4be9c3a2fb0336b4f670b414bacabac999c6b1ce6aa4c09dcf916e4fa83cb0216abe051b4fda87705c2851bd90eb6983bc457f882ff9789a224e79c9806b7c2cb8b9d8f31eade99c00a95daafd9a4e8d0d75ead16236009eb714214ab003bcc476e2a30fc7015a9c93e86fc924f7383ba63ef75e701c5"}, &(0x7f0000000a00), 0x1000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) syz_open_dev$adsp(&(0x7f0000000bc0)='/dev/adsp#\x00', 0x9, 0x40801) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000ac0)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d, 0x200000}, 0x1}) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) iopl(0x1) socket$inet6_dccp(0xa, 0x6, 0x0) dup3(r3, r0, 0x80000000000) [ 627.262397] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 627.277943] binder: 28770:28787 transaction failed 29201/-28, size 786653115973995293--6890317607139616451 line 2973 [ 627.308028] binder: undelivered TRANSACTION_ERROR: 29201 [ 627.835900] binder: BINDER_SET_CONTEXT_MGR already set [ 627.842237] binder: 28770:28818 ioctl 40046207 0 returned -16 [ 627.848389] binder_alloc: 28770: binder_alloc_buf, no vma [ 627.854208] binder: 28770:28787 transaction failed 29189/-3, size 786653115973995293--6890317607139616451 line 2973 14:23:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x80000000000000, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") prctl$setmm(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000200)={0x4, 0x3ff, {0x5f74a60f1554ff15, 0x6, 0x0, {0x1}, {0x80a}, @rumble={0x8001, 0xfffffffffffffff8}}, {0x51, 0x156, 0x7, {0x80000000, 0x4}, {0x5b7, 0x1ff}, @period={0x58, 0xfffffffffffffffc, 0x1, 0x9300, 0x0, {0x2, 0x9, 0x8, 0x6}, 0x1, &(0x7f00000001c0)=[0x3bf5d850]}}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000100)={0x100}) dup2(r0, r0) 14:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8001a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:35 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000e640)={&(0x7f0000000000), 0xc, &(0x7f000000e600)={&(0x7f0000000380)=ANY=[]}}, 0x0) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = accept4(r0, &(0x7f0000000280)=@nl=@proc, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000340)={@local, r1}, 0x14) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000080)=@canfd={{}, 0xffffff7f, 0x0, 0x0, 0x0, "2654b09c99a723e44390a93e355f1a0f40d6371722dbb06567155029d3477ebf58a12e4f09a67d1c3cd6415bdc50c20d98762bc5023e9cb4cbfe3ff985c2223b"}, 0x48}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000240)) 14:23:35 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000e7fffc), 0x0) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x144) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000012c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @mcast1, 0x9}, {0xa, 0x4e22, 0x3d8, @mcast1}, r1, 0x1}}, 0x48) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80800) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}], 0x1, &(0x7f00000001c0)=""/226, 0xe2, 0x3}, 0x100000000}, {{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/156, 0x9c}], 0x6, &(0x7f0000000700)=""/71, 0x47}, 0x783c0252}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x8}, 0x2}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/142, 0x8e}], 0x3, &(0x7f0000000b80)=""/159, 0x9f, 0x8}, 0xa22}, {{&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/239, 0xef}], 0x1, 0x0, 0x0, 0x3}, 0x675}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/100, 0x64}, {&(0x7f0000000e80)=""/228, 0xe4}], 0x2, &(0x7f0000000fc0)=""/162, 0xa2, 0xfffffffffffffffd}, 0x81}], 0x6, 0x0, &(0x7f0000001200)={0x77359400}) getsockname$netlink(r0, &(0x7f0000001340), &(0x7f0000001380)=0xc) 14:23:35 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='.\x00') mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x0, &(0x7f0000000740)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0x3, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff0000000000, 0x101000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) getdents(r1, &(0x7f0000000080)=""/11, 0xb) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}}) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x2}, {0xa, 0x4e24, 0x72, @mcast1, 0x20}, 0x9, [0xfffffffffffffffc, 0x80000001, 0x4, 0x3ff, 0xfffffffffffffff7, 0x6, 0x6601, 0x2f18bae9]}, 0x5c) [ 627.909273] binder: undelivered TRANSACTION_ERROR: 29189 14:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:35 executing program 0: keyctl$read(0x9, 0xfffffffffffffffd, &(0x7f0000000040)=""/4, 0x4) 14:23:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x8}, 0xf) recvfrom(r0, &(0x7f0000000080)=""/101, 0xfffffffffffffd89, 0x0, 0x0, 0xb8) readv(r0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/122, 0x7a}], 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 14:23:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd2, 0x800) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, 0x59, "9e6b11a3a3237008b4c0dcd1c5228b663e03e723dff1c5d04953bf881fb4254bcd499b507564d07e5f02121562714e66e5989fefd3cd22410ca05dbf815042262d971f90e29f385e2dce0db7297a937f02c839edaa1c253540"}, 0x5f) [ 628.018730] binder: release 28835:28836 transaction 517 in, still active [ 628.025942] binder: release 28835:28846 transaction 517 out, still active [ 628.041195] binder: send failed reply for transaction 517, target dead [ 628.041343] binder: undelivered TRANSACTION_COMPLETE 14:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xff00}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 628.069794] binder: BINDER_SET_CONTEXT_MGR already set 14:23:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') rt_sigreturn() preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000140)=""/25, 0xffc9}], 0x2, 0xfffffffffffffffd) [ 628.118143] binder: 28835:28852 ioctl 40046207 0 returned -16 [ 628.120107] binder_alloc: 28835: binder_alloc_buf, no vma [ 628.139333] binder: 28835:28836 transaction failed 29189/-3, size 0-0 line 2973 14:23:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634805958bfafa33ac4156ffec9d1ea12ebaf7dd62c7cd2eb3067c02c2f0055840b45903e1db4616d9bb47081a5d3072b6216b51aaa2bdbf9127fb42f9e41291bbe3000000000000005e3824e7c689a97a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 628.196667] binder: undelivered TRANSACTION_ERROR: 29189 [ 628.308082] binder: 28872:28885 unknown command 88630033 [ 628.319312] binder: 28872:28885 ioctl c0306201 20000180 returned -22 14:23:35 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0xfffffdfe}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x3) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/227) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x2c58, 0x4) ioctl(r2, 0x3, &(0x7f0000000280)="b41a192dbae93b02f78359c400408b75fa98a49937a8deec4ec3cf3e2ebbfe282a4ff0c7c2a0c18a2644bc320161cb99701e701ff73fc2ed8ce00f848c632ccf932cc98b82e23ce6bf0c54351280485979e54a425e4afdf42099f0a9a33454b33065f3131151cc4494903b1a4f9622421956230747654f00dae57543a88f84210c8e3ba3a7c0d1dcc1a87bb6d449cb32acd8b005da069ff2fce9af3f50f2804968e62206d4f51aa5ea7e2aca2d7f837f10ae8fc5051a8e956dbdb69b5d56f208") epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2008}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) 14:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:35 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xf, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000002c0)=0xfff, &(0x7f00000003c0)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x80000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6e65742f73797a3002", 0x1ff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000) 14:23:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair(0x1, 0x0, 0x9, &(0x7f0000000100)) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000040)={0x700, 0x0, 'client1\x00', 0x0, "6a61009e6d558526", "996612c5ac5c8cb078011a9807dc07c70ae22ac1535c44ed484aca3b8bfe4fca"}) 14:23:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read(r2, &(0x7f0000000040)=""/41, 0x29) dup2(r0, r2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x7) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000013ff4)={@empty, @empty, @rand_addr}, 0xc) 14:23:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) signalfd(r0, &(0x7f0000000000)={0x80000000}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800) 14:23:36 executing program 5: r0 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='nfs\x00', 0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x80000) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) mount(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs\x00', 0x0, 0x0) 14:23:36 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77020000003d", @ANYRESHEX=r0, @ANYBLOB="2c0052032998bb61485cab9679872f5bac3661e7e1234986e82fc1a56ad232db8e12bed6ef612323c80ca54b0183ee78a71259ab2a2b20ef1d000000"]) 14:23:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x242000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3f, 0x7fff, 0x8148, 0x96fa}, &(0x7f00000003c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x9}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) keyctl$get_security(0x11, r3, &(0x7f0000000040)=""/54, 0x36) r4 = memfd_create(&(0x7f0000000000)='md5sumcpusetppp1+\x00', 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000180)={0x20000000000001b2, &(0x7f00000001c0)=[{}, {0x0}, {}, {}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0x2c5}, &(0x7f0000000200)=0x8) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x4e23}}, 0x9, 0x9, 0x3, 0x0, 0x9}, &(0x7f0000000300)=0x98) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000140)={r5, 0x3}) [ 629.038616] binder: BINDER_SET_CONTEXT_MGR already set [ 629.044689] binder: 28872:28938 ioctl 40046207 0 returned -16 [ 629.050805] binder: 28872:28885 unknown command 88630033 [ 629.057135] binder: 28872:28885 ioctl c0306201 20000180 returned -22 14:23:36 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x274, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYRESDEC=r3, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYRES32=0x0, @ANYPTR, @ANYPTR64, @ANYRES32=r1, @ANYPTR, @ANYRESHEX], @ANYRESHEX=r2, @ANYRESHEX], @ANYPTR64, @ANYRESHEX=r3, @ANYRESHEX=r1], 0x1, 0x0, &(0x7f00000004c0)='\x00'}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000400)=""/171, &(0x7f0000000040)=0xab) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r3, r2, 0x0) sync_file_range(r1, 0x3f, 0x5, 0x1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14:23:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f06000000005d766070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0xffffff86, 0x8, 0x0, 0x0, 0x0, [{}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0xffffffffffff2410}}}, 0x88) [ 629.095829] 9pnet: Insufficient options for proto=fd 14:23:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x169241, 0x0) utimensat(r5, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = memfd_create(&(0x7f0000000100)='GPLeth1lo/\x00', 0x6) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000004c0)) recvfrom$inet(r6, &(0x7f0000000140)=""/14, 0xe, 0x40010162, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xfffffffffffffff8) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3407a, 0x200000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) 14:23:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) 14:23:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) clock_settime(0x5cc69a6159651ee, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500080a000000000000000000000003000600000000000207000000000000000000000000000002000100000000000000000000000000030005000000000002000000e000e9053f53c6bb0157dcd647ee36f3689ad17ffa4fc9326d0af20ba331ace044f382d4f867a6fa90ccb429327ec5d2dced0d11555209ead163b73bca839afa2465ac34a67dbd84d4348d63756213e2c3b58c4ef4792f681c54b3603a8504467ec0131aca128e1dcad40c0fda3ba4680931ef107aecf749634dabc24446d6595ba169c436095a86"], 0x50}}, 0x0) 14:23:36 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x101, 0x0, 0x10003, 0x4}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x17, 0x4) unlink(&(0x7f0000000140)='./file0\x00') renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000200)=""/202) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000300)=0x400) sendfile(r0, r0, &(0x7f0000000340), 0xff) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000380)={0x3, 0xfedb, 0x0, 0x8a7, 0x1, 0x1fc0000000000000}) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x7ff, 0x101000, 0x0, 0x4104, 0x70e, 0xada, 0x8fcb, 0x2, 0x4, 0x1}, 0x10) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000400)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000440)={0xe, 0x4, 0xf996, 0x1, 0x78, "ae7d85b1c2845ca4f5808a3524bcfad17d83171609c0b0b08eea929aed05de06353658435def3ae763b7af0273503c5f0da111469891e7782c1f7a8a818db20e028294393e26ccba5ada8c39b44fdb6f7419b4169e6a46691a1f35308032e2c969e48029af20fae2f3b353c1db02b0e52b4a88af1c90da9d"}, 0x84) r1 = semget$private(0x0, 0x0, 0x284) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000500)=""/17) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) lgetxattr(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)=@random={'osx.', '\x00'}, &(0x7f00000005c0)=""/62, 0x3e) getpeername$llc(r0, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000640)=0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000680)={0x0, 0x0}) r3 = getpgrp(0xffffffffffffffff) kcmp(r2, r3, 0x3, r0, r0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @empty, 0xbd8f}}}, &(0x7f00000007c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000800)={r4}, &(0x7f0000000840)=0x8) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000880)={0x3, 0x4, 0x0, 0x5d1, 0x0, 0x200}) syz_mount_image$nfs4(&(0x7f00000008c0)='nfs4\x00', &(0x7f0000000900)='./file0\x00', 0xffffffffffffffda, 0x3, &(0x7f0000001a40)=[{&(0x7f0000000940)="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", 0x1000, 0xf97f}, {&(0x7f0000001940)="5d6eee28b528ca11e24eed543295f195ebb7f16c957f129dbe63a6912a633273d2bf62a7a568336f814a4ae01695f285b837525e00e6eb6895234c7a8e847d28c49c018052795179d76bbf07756f6859802f739b7563263d7b576531f66f3573ad15ef61c09daadc27abc04444b61d77518b4e293a793b5295c7d344784afb09290678d38b944ca31852303a7a5be41c09a8e196abfae392b0efc563d2", 0x9d, 0x3bd}, {&(0x7f0000001a00), 0x0, 0x4}], 0x802800, &(0x7f0000001ac0)='\x00') fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001b00)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001b40)={r4, @in6={{0xa, 0x4e22, 0x5, @local, 0x80}}, 0x6, 0x9, 0x37, 0x3d0, 0x40}, &(0x7f0000001c00)=0x98) getpeername$netlink(r0, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001cc0), 0x4) 14:23:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x8000a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 629.214150] binder: 28964:28965 unknown command 536871552 [ 629.219753] binder: 28964:28965 ioctl c0306201 20000500 returned -22 [ 629.234590] netlink: get zone limit has 4 unknown bytes 14:23:36 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000440)=0x80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x61) read(r2, &(0x7f0000000040)=""/11, 0x155) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001040)={0x0, 0x5, 0x9, 0x580, 0x3f, 0x2, 0x8cb6, 0x1ff, 0x0, 0x90fa, 0x3, 0x80}) r3 = socket$inet6(0xa, 0x3, 0x3c) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/133, 0x85}, {&(0x7f0000000f00)=""/155, 0x9b}], 0x4, 0x0, 0x0, 0x2}, 0x10060) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) ioctl$sock_SIOCBRADDBR(r3, 0x89a1, &(0x7f0000000040)="62632b683004fffe140501df000400") r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8922, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000040)=ANY=[]}) process_vm_writev(0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/35, 0x23}, {&(0x7f0000002c00)=""/26, 0x1a}], 0x2, &(0x7f0000002e80), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)="62726964676530000000008000", 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) recvmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000000880)=""/13, 0xd}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x9, &(0x7f0000000c40)=""/102, 0x66, 0x3}, 0x40010000) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000240)=0x1, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000280)="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") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000380)={0x6, 0x1, 0x1000, 0xff, 0x9, 0xffff, 0xb02, 0x88, 0x34, 0x7, 0xfffffffffffffffb, 0x4}) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="2c4ad71efb9ce525a9f3ffa3f06136e5f4a6f132703c83f03e245566f388dc7e9306135ff660fcfeb07cbb89ed3982c20f81c092ae3badd0342f34fa0dd66bdcde8078ea469321062dab", &(0x7f0000000180)="9a305c99b738ed0d4388e5fac42fe5477fa0b957dc07a4527463237eb5d14eff2bc7381ed30721c0063ff8fd30367fc7ab8aab5b6fc5165c6a9fcdf76cabce2912e4d6941a5bfd24feb725311fb1814e1093cd3712286c4f10192052073dce532817ad6d15e560e53e0f2f66847a15737397490bbe993d989d3b869e982362c15fe0c6a2db3b3d25b5e9e9629c4e0b9678e9b1dddab6feee2d8d9a02dffa"}}) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000500)=""/3) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = syz_open_pts(r2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001100)=0x1, 0x4) ioctl$TCXONC(r6, 0x540a, 0x2) [ 629.293514] binder: release 28964:28965 transaction 521 out, still active [ 629.305046] binder: undelivered TRANSACTION_COMPLETE [ 629.310775] binder_alloc: binder_alloc_mmap_handler: 28964 20010000-20013000 already mapped failed -16 14:23:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001140)="2f64658b2ef70229e9c3aa05a5fc8aafa916c7131760ad869b36821d6c2ccaff7fa5d3c87afb8545f3e9618c78cdd5f7ee04b49cc7c4c276016e1c8f5a2aae65161d2a7cb3c95bdbfd4b7d8205e559319235e22f8f79a9ebbaa9b0e77668dc3f52c348e60d3be46e8a1c24c304811ea7e79a45f91fdd521c9fc8f5b2e32a1c8cd2c4a5063da1ed716d338eb9309456571d5f766ae6402137f9f07ad87d59f106baf4d551387ec50a56a600c1d2675eebdd444fd64b7b9d99be45000000000000000000000000000000", 0x3) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)='-!eth0\x00', 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r4 = socket$inet6(0xa, 0x4000007fffd, 0x1f9) ioctl(r4, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$unix(r3, &(0x7f0000001000)="5a3c71c7c14fa688f79ee3ffd591ed13b7beaa93b46aed8dec7a7246bde3cfcf47a6a407556814eca844c11897797e75fab7489a344f636d3d26ede7f1895f3ec4af7badf1b1030355de1e2bf000b48876de0db81316d0d9e28d531fc680f9d836ca44da5acd3803a208a012ba402a2b30724ef7f6f231e9a6082f4b60ce4bdb83b06d69cc5918f0f24ea067be5c017522151768cead3b11ca3695d9ecf30943821418ee816a8dcd3e98a0d050a44c53fe6d20324494af9eb3feb0165394837c0c117493d92685c3f688177619b5ce44ac7f7df0d3886442a9ba8cf5ff0570c9c47811ebfd0b0c532de5", 0xea, 0x4, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000e00)=0x4) sync_file_range(r0, 0xfffffffffffffffd, 0x400, 0x5) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0xffffffffffffffff, 0x0) socket(0x8, 0x0, 0x0) prctl$getreaper(0x1b, &(0x7f0000000080)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000000480)=0xe8) iopl(0xcf) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000580)=0x8) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r7, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/89, 0x59}], 0x2, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}, 0x9}], 0x2, 0x10040, &(0x7f0000000dc0)) 14:23:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xc00e}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 629.382835] binder: 28964:28988 unknown command 536871552 [ 629.420369] binder: 28964:28988 ioctl c0306201 20000500 returned -22 14:23:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0xfd0}}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/4096) write(r0, &(0x7f0000001080)="103f1a142bae58e7d9f1108144edac008b117d2ea4ff31fdb66a14849a791d8cbefe7901b4e1fd6a2bd6c3304fe1ec4cf005b0e51025b568a9cf655b78ae65e87805b1e28836125ae29d0e9352b21d01abe5a93fd8b6bf6328f7b5596719cc19b24580a9bab7901078b7b095b31db7b22a9b3b84ef0ad3ac625182229f0f36a72e1ea74328bf40530ba43b004f5b1de17390ba58464bd685af0ea9fb7a4537c401c685907610aebd13730ac1989e44ec5216e6616dfb090b55cdd40dbffba0160eed8983a6ae6e43e6b66582accee1f426dcd0305d1ec48dfd7fdcc4872c2ffbf1510025cd2ede960956fb7aac1d59893543447f78605f7eacb702", 0xfb) [ 629.465468] bridge0: mtu greater than device maximum [ 629.487624] binder: BINDER_SET_CONTEXT_MGR already set [ 629.516164] rtc_cmos 00:00: Alarms can be up to one day in the future [ 629.534033] binder: 28964:28975 ioctl 40046207 0 returned -16 [ 629.535050] binder_alloc: 28964: binder_alloc_buf, no vma [ 629.564707] rtc_cmos 00:00: Alarms can be up to one day in the future [ 629.571615] bridge0: mtu greater than device maximum [ 629.598341] binder: 28964:28965 transaction failed 29189/-3, size 0-0 line 2973 [ 629.616331] binder: send failed reply for transaction 521, target dead 14:23:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="01040000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) r2 = open(&(0x7f0000000400)='./file0\x00', 0x12d003, 0xa8) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000540)=""/69) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac400000", @ANYRES16=r5, @ANYBLOB="200026bd7000fddbdf250c00000008000400e80200005c00030008000300000000000800030001000000080001000200000008000500ac1414bb080007004e2200001400060000000000000000000000000000000000080003000100000014000600fe8000000000000000000000000000bb2c000200080008000300000008000700feffffff080009000200000008000700ffffff7f08000900030000000800040005000000"], 0xac}, 0x1, 0x0, 0x0, 0x4040084}, 0x40000) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x2, 0x0) 14:23:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:36 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000440)=0x80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x61) read(r2, &(0x7f0000000040)=""/11, 0x155) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001040)={0x0, 0x5, 0x9, 0x580, 0x3f, 0x2, 0x8cb6, 0x1ff, 0x0, 0x90fa, 0x3, 0x80}) r3 = socket$inet6(0xa, 0x3, 0x3c) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/133, 0x85}, {&(0x7f0000000f00)=""/155, 0x9b}], 0x4, 0x0, 0x0, 0x2}, 0x10060) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) ioctl$sock_SIOCBRADDBR(r3, 0x89a1, &(0x7f0000000040)="62632b683004fffe140501df000400") r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8922, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000040)=ANY=[]}) process_vm_writev(0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/35, 0x23}, {&(0x7f0000002c00)=""/26, 0x1a}], 0x2, &(0x7f0000002e80), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)="62726964676530000000008000", 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) recvmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000000880)=""/13, 0xd}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x9, &(0x7f0000000c40)=""/102, 0x66, 0x3}, 0x40010000) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000240)=0x1, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000280)="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") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000380)={0x6, 0x1, 0x1000, 0xff, 0x9, 0xffff, 0xb02, 0x88, 0x34, 0x7, 0xfffffffffffffffb, 0x4}) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="2c4ad71efb9ce525a9f3ffa3f06136e5f4a6f132703c83f03e245566f388dc7e9306135ff660fcfeb07cbb89ed3982c20f81c092ae3badd0342f34fa0dd66bdcde8078ea469321062dab", &(0x7f0000000180)="9a305c99b738ed0d4388e5fac42fe5477fa0b957dc07a4527463237eb5d14eff2bc7381ed30721c0063ff8fd30367fc7ab8aab5b6fc5165c6a9fcdf76cabce2912e4d6941a5bfd24feb725311fb1814e1093cd3712286c4f10192052073dce532817ad6d15e560e53e0f2f66847a15737397490bbe993d989d3b869e982362c15fe0c6a2db3b3d25b5e9e9629c4e0b9678e9b1dddab6feee2d8d9a02dffa"}}) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000500)=""/3) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = syz_open_pts(r2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001100)=0x1, 0x4) ioctl$TCXONC(r6, 0x540a, 0x2) 14:23:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001140)="2f64658b2ef70229e9c3aa05a5fc8aafa916c7131760ad869b36821d6c2ccaff7fa5d3c87afb8545f3e9618c78cdd5f7ee04b49cc7c4c276016e1c8f5a2aae65161d2a7cb3c95bdbfd4b7d8205e559319235e22f8f79a9ebbaa9b0e77668dc3f52c348e60d3be46e8a1c24c304811ea7e79a45f91fdd521c9fc8f5b2e32a1c8cd2c4a5063da1ed716d338eb9309456571d5f766ae6402137f9f07ad87d59f106baf4d551387ec50a56a600c1d2675eebdd444fd64b7b9d99be45000000000000000000000000000000", 0x3) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)='-!eth0\x00', 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r4 = socket$inet6(0xa, 0x4000007fffd, 0x1f9) ioctl(r4, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$unix(r3, &(0x7f0000001000)="5a3c71c7c14fa688f79ee3ffd591ed13b7beaa93b46aed8dec7a7246bde3cfcf47a6a407556814eca844c11897797e75fab7489a344f636d3d26ede7f1895f3ec4af7badf1b1030355de1e2bf000b48876de0db81316d0d9e28d531fc680f9d836ca44da5acd3803a208a012ba402a2b30724ef7f6f231e9a6082f4b60ce4bdb83b06d69cc5918f0f24ea067be5c017522151768cead3b11ca3695d9ecf30943821418ee816a8dcd3e98a0d050a44c53fe6d20324494af9eb3feb0165394837c0c117493d92685c3f688177619b5ce44ac7f7df0d3886442a9ba8cf5ff0570c9c47811ebfd0b0c532de5", 0xea, 0x4, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000e00)=0x4) sync_file_range(r0, 0xfffffffffffffffd, 0x400, 0x5) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0xffffffffffffffff, 0x0) socket(0x8, 0x0, 0x0) prctl$getreaper(0x1b, &(0x7f0000000080)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000000480)=0xe8) iopl(0xcf) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000580)=0x8) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r7, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/89, 0x59}], 0x2, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}, 0x9}], 0x2, 0x10040, &(0x7f0000000dc0)) [ 629.671056] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.800258] bridge0: mtu greater than device maximum [ 629.837790] binder: 29018:29024 unknown command 1025 [ 629.847052] binder: 29018:29024 ioctl c0306201 20000180 returned -22 14:23:37 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x60, 0x80000) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000380)) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0x37e) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xc1, @tick, 0x0, {}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x4000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000001c0)={0x0, 0xfffffffffffffffa, 0x0, 0xffffffff}) r4 = dup(r1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0xffffffffffffffc2) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0xc21e0100]}, @empty, @loopback}) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000003c0)={0xa, 0x2, 0x2, 0x3}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3"}, 0x60) socket$xdp(0x2c, 0x3, 0x0) listen(r5, 0x0) mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0x0) r6 = semget$private(0x0, 0x1, 0x10) semctl$GETNCNT(r6, 0x5, 0xe, &(0x7f0000000380)) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40a85321, &(0x7f0000000080)={0x0, 0x2}) 14:23:37 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000440)=0x80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x61) read(r2, &(0x7f0000000040)=""/11, 0x155) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001040)={0x0, 0x5, 0x9, 0x580, 0x3f, 0x2, 0x8cb6, 0x1ff, 0x0, 0x90fa, 0x3, 0x80}) r3 = socket$inet6(0xa, 0x3, 0x3c) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/133, 0x85}, {&(0x7f0000000f00)=""/155, 0x9b}], 0x4, 0x0, 0x0, 0x2}, 0x10060) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) ioctl$sock_SIOCBRADDBR(r3, 0x89a1, &(0x7f0000000040)="62632b683004fffe140501df000400") r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8922, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000040)=ANY=[]}) process_vm_writev(0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/35, 0x23}, {&(0x7f0000002c00)=""/26, 0x1a}], 0x2, &(0x7f0000002e80), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)="62726964676530000000008000", 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) recvmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000000880)=""/13, 0xd}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x9, &(0x7f0000000c40)=""/102, 0x66, 0x3}, 0x40010000) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000240)=0x1, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000280)="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") ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000380)={0x6, 0x1, 0x1000, 0xff, 0x9, 0xffff, 0xb02, 0x88, 0x34, 0x7, 0xfffffffffffffffb, 0x4}) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="2c4ad71efb9ce525a9f3ffa3f06136e5f4a6f132703c83f03e245566f388dc7e9306135ff660fcfeb07cbb89ed3982c20f81c092ae3badd0342f34fa0dd66bdcde8078ea469321062dab", &(0x7f0000000180)="9a305c99b738ed0d4388e5fac42fe5477fa0b957dc07a4527463237eb5d14eff2bc7381ed30721c0063ff8fd30367fc7ab8aab5b6fc5165c6a9fcdf76cabce2912e4d6941a5bfd24feb725311fb1814e1093cd3712286c4f10192052073dce532817ad6d15e560e53e0f2f66847a15737397490bbe993d989d3b869e982362c15fe0c6a2db3b3d25b5e9e9629c4e0b9678e9b1dddab6feee2d8d9a02dffa"}}) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000500)=""/3) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = syz_open_pts(r2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001100)=0x1, 0x4) ioctl$TCXONC(r6, 0x540a, 0x2) 14:23:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/149, 0x95}], 0x2, &(0x7f0000000300)=""/103, 0x67, 0x2}, 0x60) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0xa01, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{}, {}]}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000400)={0x1, 0x1, 0x101, 0x7}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000440)={0x0, 0x8, 0x5, 0x40, &(0x7f0000ffc000/0x2000)=nil, 0xc79}) 14:23:37 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x34002, 0xc1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x300200}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x30c, 0x8, 0x7, 0x910, 0x70bd2d, 0x25dfdbfb, {0xa}, [@nested={0x40, 0x5, [@typed={0x3c, 0x12, @binary="22de8f430f8a1e89685394204ca43fa46b9c91338f9bb06584a75ac121611548ca53377471bee0509956ccf966c4fc84f87f543c160725"}]}, @nested={0xbc, 0x8e, [@generic="853824256068113740d54e8b19b3336e725c0d1d88cb7852a4d01a69ca0089f7c216d32752c0fee0552375309500c8cf02b1a94786261af2496d459206b4655591b97f9df4bb82adc2cd0a7326a285b1013d3b314ed809dcabc2f772460de55d83c90659628d104bfcf7f48120057d368200112cb2b3aa2d797d7ed0a6f7f0e1bc87844254b9a9df59b90529e48d8679b09fa2ca31b55450f5e6c8b9077eb070ced0f9aa779ac2dbfa357c6ca0c3", @generic="2d4fda7cc8660173e0"]}, @typed={0x8, 0x8b, @u32=0x7fffffff}, @generic="699340bf02d4cae265d43fd8432ef5a0b9e9a36193fa152b277632646e352b22ade60e408a8a581f4e4ba26221c73bd2bb809896622aa08bcb81f51b55be3484b902e0df668a5569824424f60fb61c99d5b848af25bf7281da4b676282a8a04ac687248abf3a06964c88b13eaa975873204f2fd90cec3566dc946a29957cac62507221b2d9dd410fe529695a7abceade67b7f202a595e62e7f94342064319aa5dc5a1cbdd12c068663956a", @typed={0x10, 0x2a, @str='/dev/amidi#\x00'}, @typed={0x8, 0x1c, @uid=r2}, @nested={0x11c, 0x6c, [@typed={0x8, 0x1b, @binary='\x00ur'}, @generic="97c0f69f2c74969de64095ff25bb4c1b00737f24cbd739b0c75621e78284dafaf17988be99a11bee610bb565c645d956fd3d09b381e35351a72cb1e3e9d535d9d976e955edaf2e418e7d335574ca1508", @generic="a7d08a3b5f98425552add40955c2134f00d76ca6989223eef1a9dfd1d5d84443b4f5c005724a7c3ec070d80681a52983e3bee9141abf99fc7d1a5730a354aaa56f94dc6ba0a36cf0131109edb40371f8978ae0613ab3cf381201676f4e3aa09a500a75f81aea607401a303b64a0d86c5344c0470dde4147fe8002ed824934abb1bf4c9e3e2696e52e9bff8ed4622dc95ce0a2f1a239f41da49cbcbc2a260d54d3373fc199e34bc7e84c26f3d22e034a1c4ba40f9c5f90487ca7cccb31661e2bd"]}, @typed={0x14, 0xe, @ipv6=@ipv4={[], [], @multicast1}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0xc88) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x400) sendfile(r0, r1, &(0x7f00000004c0), 0x8000fffffffe) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x7, 0x2, 0x3, 0x400, &(0x7f00000001c0)=[{}, {}]}) 14:23:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x81000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000fa00000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(r2, 0x9, &(0x7f0000000080)=0x200, &(0x7f0000000300)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r2, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000140)='sit0\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) 14:23:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 630.405303] bridge0: mtu greater than device maximum [ 630.545066] binder: 29018:29024 unknown command 1025 [ 630.550194] binder: 29018:29024 ioctl c0306201 20000180 returned -22 14:23:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c149c84c4a2a8b20000"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 14:23:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xff000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:37 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x7f) sendfile(r0, r0, &(0x7f00000000c0), 0xfe9) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000002000/0x4000)=nil, 0x4000}) sendfile(r0, r0, &(0x7f0000000100), 0x6) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) dup(r0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000003c0)) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB='metacopy=on,upperdir=./file0,index=off,metacopy=on,redirect_dir=./file0,metacopy=off,smackfstransmute=#vmnet1nodevem1\x00,fsname=trusted,fowner>', @ANYRESDEC=r1, @ANYBLOB="3711dab30ba0d95264b34104714345653c6a969a1581ca308e50df611d7c5862563c754d33eb533373fc3159574b26f38a1012d6697930f4417752a1011f093a5b34bf71d025bb61f9445268ce85ad1100a2344e91d5038d6ed266e4e38f92549d9267f736321d"]) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 14:23:37 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x44000001, 0x4, 0x33}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000020000002500000000000099ba9afc6e27aaaf1b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) sendto$inet(r3, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r3, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r3, &(0x7f0000000380)=""/172, 0xffffff88) 14:23:37 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x109080) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setgroups(0x0, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") getgroups(0x1, &(0x7f0000000a00)=[0xee01]) 14:23:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000fa00000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(r2, 0x9, &(0x7f0000000080)=0x200, &(0x7f0000000300)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r2, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000140)='sit0\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) 14:23:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xb8040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 630.749826] binder: 29070:29071 unknown command -2070146036 [ 630.788864] binder: 29070:29071 ioctl c0306201 20000500 returned -22 [ 630.791774] QAT: Invalid ioctl [ 630.874257] binder: BINDER_SET_CONTEXT_MGR already set 14:23:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 630.906472] binder: 29070:29082 ioctl 40046207 0 returned -16 [ 630.933426] binder: BINDER_SET_CONTEXT_MGR already set [ 630.996771] binder: 29070:29071 unknown command -2070146036 [ 631.018841] binder: BINDER_SET_CONTEXT_MGR already set [ 631.026151] binder: 29070:29082 ioctl 40046207 0 returned -16 [ 631.032408] binder: 29070:29071 ioctl c0306201 20000500 returned -22 14:23:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0fc71d66b9530a000066b80000010066ba000000000f300f767308ba4300b80080ef36260f14f966b877a600000f23d00f21f86635300000040f23f866b9af0a00000f3266b80c0000000f23c80f21f86635080080000f23f8b80b008ec03e0f30", 0x61}], 0x1, 0x0, &(0x7f0000000140), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x6, 0x5, 0x3, 0x2, 0x7}) dup3(r3, r1, 0x0) 14:23:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x4b8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 631.052519] binder: 29070:29088 ioctl 40046207 0 returned -16 14:23:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000fa00000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(r2, 0x9, &(0x7f0000000080)=0x200, &(0x7f0000000300)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r2, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000140)='sit0\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) 14:23:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x8, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000ed558e73cd83ee16ca8e5815f84369140000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe2(&(0x7f00000000c0), 0x0) 14:23:38 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x7f) sendfile(r0, r0, &(0x7f00000000c0), 0xfe9) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000002000/0x4000)=nil, 0x4000}) sendfile(r0, r0, &(0x7f0000000100), 0x6) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) dup(r0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000003c0)) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB='metacopy=on,upperdir=./file0,index=off,metacopy=on,redirect_dir=./file0,metacopy=off,smackfstransmute=#vmnet1nodevem1\x00,fsname=trusted,fowner>', @ANYRESDEC=r1, @ANYBLOB="3711dab30ba0d95264b34104714345653c6a969a1581ca308e50df611d7c5862563c754d33eb533373fc3159574b26f38a1012d6697930f4417752a1011f093a5b34bf71d025bb61f9445268ce85ad1100a2344e91d5038d6ed266e4e38f92549d9267f736321d"]) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 14:23:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0xc}, 0x2c) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f00002ae000), &(0x7f0000000140)="996202571bda533e8f8e525ea24dc0090a3a7d19b9aee360af19f343103850f86440b38dd7aa479f578ca793fcf8fa39ff00d355", 0x400000000000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000100)='|', &(0x7f0000000180)=""/221}, 0x18) socketpair(0x9, 0x1, 0x400, &(0x7f00000002c0)) [ 631.316405] binder: 29110:29111 unknown command 1441595392 [ 631.331132] binder: 29110:29111 ioctl c0306201 20000180 returned -22 [ 631.364911] binder: BINDER_SET_CONTEXT_MGR already set [ 631.370325] binder: 29110:29120 ioctl 40046207 0 returned -16 [ 631.377055] binder: 29110:29111 unknown command 1441595392 [ 631.383292] binder: 29110:29111 ioctl c0306201 20000180 returned -22 [ 631.582048] QAT: Invalid ioctl 14:23:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200418cf, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0xfffffffffffffce5) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000200)) 14:23:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000fa00000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(r2, 0x9, &(0x7f0000000080)=0x200, &(0x7f0000000300)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r2, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000140)='sit0\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) 14:23:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mq_open(&(0x7f0000000040)='/dev/binder#\x00', 0x3, 0xddeecae17d0f6c4, &(0x7f00000000c0)={0x6, 0x0, 0x16ead06e, 0x6, 0xfffffffffffffffb, 0x7, 0x7, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="2a110000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup3(r2, r2, 0x3) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:38 executing program 5: rename(&(0x7f0000000080)='.\x00', &(0x7f0000000140)='./file0\x00') timer_create(0x6, &(0x7f0000000000)={0x0, 0x1e}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f00000000c0)) 14:23:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x0) bind$bt_hci(r0, &(0x7f00000000c0), 0xc) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x220002) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close(r0) 14:23:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000040)={0x6e7e}, 0x8, 0x80000) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x2}) dup3(r2, r3, 0x0) dup3(r2, r1, 0x0) [ 631.751408] binder: 29131:29146 unknown command 4394 14:23:38 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x20000, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000e80)}], 0x0, &(0x7f0000000940)) readlinkat(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/45, 0x2d) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000008c0)=@abs={0x1}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)}], 0x1}, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x360d, &(0x7f0000000600)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000006c0)="f9ef332e70ef5de6e4de7d82fd5468f616fdfa7ef5eb7fb1fa046d6f79311a7f960bb9ed645979602803624b1996dd41f3b1756ba746d37c28102444accd89cc841bf2ce4b1c36f5ff5137b6adc45877d9c94244629b8b800c5b80ad5c5b04791ec4fe49e631bd239a9843e19f4c256bcd5ee044227116c5b1384ce042679667e9bced02eef06f86fa0724f591b2bcf2074c1794f3ccc3a3eaaeca0feb3de8400fe7844c5b3ca406b0d79e4e47d23d76ca581f0fac8ab363ffe7f61c6b42bc1a7264eadfd3c1c0f75a3db1ebd3dd1d28b8a412cbb285f54e3cafc73a7be48c13d2ea58cfdc8bd3b2468e450784fcc3c029", 0xf1, 0xffffffff00000001}], 0x1001000, &(0x7f0000000440)={[{@case_sensitive_yes='case_sensitive=yes'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) 14:23:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x4) r1 = socket$netlink(0x10, 0x3, 0x14) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clock_gettime(0x0, &(0x7f00000066c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006500), 0x2c7, 0x40010000, &(0x7f0000006700)={0x0, r3+30000000}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80800, 0x0) [ 631.798277] binder: 29131:29146 ioctl c0306201 20000180 returned -22 14:23:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 631.875733] ntfs: (device loop1): parse_options(): Unrecognized mount option ./file1. 14:23:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:39 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000180)=0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000240)=""/63) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8001, 0x3, 0x4, 0x7cdde2bc, 0x77f, 0x5770aecd, 0x8000, 0x11, 0x4000000, 0x2}, 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop'}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='mslos\x00', 0x80031, &(0x7f0000000240)) 14:23:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}}], 0x1, 0x0, &(0x7f0000003fc0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="14080000000000000246d1bc11bcbf6c00db1335a8dbb4bf3b9a1bd80ac5671e56ff67a7039cfbca52947d7de9f80a51210c743e4a8ba6caae93ce0152bde270884fc4be1b1815dba14faeca443531b2cbe9517237d289e55c401a72be5a208d633b2a17a13ab619a8cc6b40dea1623497"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x6, {0x200}}, 0x18) io_setup(0x80000001, &(0x7f0000000600)=0x0) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000840)=""/185, 0xb9}, 0x7fff}], 0x1, 0x100, &(0x7f0000000900)={0x77359400}) io_cancel(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, &(0x7f0000000540)="6542fa1385447404cde70fe816df66dcf3fc84a508612a82965df43b0d763955df1e1e33303d09136cea090debb41469454981a353fc8ff56cdfcab1347b358e3d06c0ad87e0b5a57c7488b3de595267bbd199fbd97c56b6", 0x58, 0xedca, 0x0, 0x0, r4}, &(0x7f00000005c0)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) [ 632.133182] overlayfs: filesystem on './file0' not supported as upperdir [ 632.477056] binder: BINDER_SET_CONTEXT_MGR already set [ 632.482473] binder: 29131:29205 ioctl 40046207 0 returned -16 [ 632.488529] binder: 29131:29205 unknown command 4394 [ 632.493718] binder: 29131:29205 ioctl c0306201 20000180 returned -22 14:23:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000040)=0x80) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:39 executing program 3: r0 = socket(0x10000000000001e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) getrlimit(0x6, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000080)=0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x142, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1e6}], 0x1) close(r0) 14:23:39 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x20000, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000e80)}], 0x0, &(0x7f0000000940)) readlinkat(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/45, 0x2d) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000008c0)=@abs={0x1}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)}], 0x1}, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x360d, &(0x7f0000000600)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000006c0)="f9ef332e70ef5de6e4de7d82fd5468f616fdfa7ef5eb7fb1fa046d6f79311a7f960bb9ed645979602803624b1996dd41f3b1756ba746d37c28102444accd89cc841bf2ce4b1c36f5ff5137b6adc45877d9c94244629b8b800c5b80ad5c5b04791ec4fe49e631bd239a9843e19f4c256bcd5ee044227116c5b1384ce042679667e9bced02eef06f86fa0724f591b2bcf2074c1794f3ccc3a3eaaeca0feb3de8400fe7844c5b3ca406b0d79e4e47d23d76ca581f0fac8ab363ffe7f61c6b42bc1a7264eadfd3c1c0f75a3db1ebd3dd1d28b8a412cbb285f54e3cafc73a7be48c13d2ea58cfdc8bd3b2468e450784fcc3c029", 0xf1, 0xffffffff00000001}], 0x1001000, &(0x7f0000000440)={[{@case_sensitive_yes='case_sensitive=yes'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) 14:23:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5d, 0x200007fe, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_dev$usb(&(0x7f0000000c80)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000cc0)={0x0, 0x3ff}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000d40)={r2}, &(0x7f0000000d80)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 14:23:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 632.642726] binder: release 29213:29221 transaction 527 in, still active [ 632.651057] binder: release 29213:29232 transaction 527 out, still active [ 632.652186] ntfs: (device loop1): parse_options(): Unrecognized mount option ./file1. [ 632.658005] binder: undelivered TRANSACTION_COMPLETE [ 632.684437] binder: send failed reply for transaction 527, target dead [ 632.707616] binder: BINDER_SET_CONTEXT_MGR already set [ 632.713101] binder: 29213:29238 ioctl 40046207 0 returned -16 [ 632.720540] binder_alloc: 29213: binder_alloc_buf, no vma [ 632.726822] binder: 29213:29221 transaction failed 29189/-3, size 0-0 line 2973 [ 632.735015] binder: undelivered TRANSACTION_ERROR: 29189 14:23:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:40 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000400)) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000440)=""/201, &(0x7f0000000540)=0xc9) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x7fffd, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r4, 0x2) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x9, 0xbbf8, 0x4, 0x2}, {0x2, 0x800, 0x4, 0x6}, {0x7, 0x1, 0x81, 0x2}]}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000002c0)=0x8, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000380)) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000280)={'ipddp0\x00', @ifru_hwaddr=@remote}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {0xffffffffffffffff, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) epoll_create1(0x80000) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) 14:23:40 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/133, 0x85}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) mprotect(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x5) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) 14:23:40 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa0041, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="2d1fe2b75b3230453613de249eee5f9085e15c24d8642e5396f22442d136bc54e9cff8fb0c6fa782a387f95412e281465088210a9b6346f94158ac1fad0302d503fc123402bd24cad1f7b60435d3f253c2826b0448ea70a45684521dd68888f1696e8d910b1cd438fda35c46fb8c5528cf905e402016928c1d302dd495a5a1f4cd62a848e1748dd23f138b5dc938bab7b5439ccb1ad91ed98a575261b468") ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2000001ffffe, 0x40a3c) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000800)={@empty, @multicast2, 0x0}, &(0x7f0000000840)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x1d, r3}, 0x10, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x1, 0x6, {}, {r4, r5/1000+10000}, {0x4, 0x1, 0x3, 0x4}, 0x1, @can={{0x4, 0x101, 0xfffffffffffffffe, 0x5}, 0x8, 0x0, 0x0, 0x0, "bc8c637b67975e86"}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0xc1, 0x20, 0x77}) ioctl$KVM_SET_CPUID(r2, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230317"]) 14:23:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x3) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0xe3351be3f41e54c2) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c63c0de"], 0xd3, 0x0, &(0x7f00000002c0)="8546cb3f94dff5aa97e4d0348f8d1b556706dd8c3f1311cf24f5e3d02544305f0e6b044b16cf76ea01db0f87eb8be6e96d1a3f6d4f20cb8c6021a1ee7e0989bccc14c42d7d6078c83777d3c78917ccabb68306778a518fd6b7ecdde22c067d0c1b29667b2c9a4f59ae4d48f7f353f3c0daeba7d926719bb1b7a9cac0a4992c41d42529799a0c4c356cfaed56003776214d45dc7b6acb8e3c33f6337c506fbab144029913c153e750f9232e33893d55e67701e7de876d2012ca5d7cde9422ee3a0c8dc5dd4c68d69c08b0489f76533ce81984f9"}) shmget$private(0x0, 0x4000, 0x54000105, &(0x7f0000ffb000/0x4000)=nil) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="dbbe03000000003da72935"], 0x0, 0x0, &(0x7f0000000680)}) dup3(r2, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 14:23:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0x34000}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x192) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x9}, r2}}, 0x38) 14:23:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffffffa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = shmget(0x0, 0x2000, 0x510, &(0x7f0000ffb000/0x2000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getresuid(&(0x7f0000000080), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)='#%nodev#*^security%selinux!\'@ppp0+proc!vmnet0\x00'}, 0x30) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x81, 0x6, &(0x7f0000000880)=[{&(0x7f00000004c0)="54eb37beb110eb3deba68ec459d5d16badb694719e357fb2f83a89173865d858c4bf1f91eea60df73433d89ee03bcd2a162d7a5a959dadf5b1cb7de980eb244cf546c9529131b55eee433cb39cd4d5446e2727688f4c1dc6bdac115178f79b8eea32b5d6e7a98dec6de822122a2cc4af0c6cd4f23df20e4b3a013e3fae9cfdbf2a0926e21c3e8bc1f9dcd985fb2f95453cb581cdceee4a6792aa9aff4283161d7ad4f36636036b1757a8a798eb82e7413dbe46ae902753b0375cc6e9af2f99", 0xbf, 0x7}, {&(0x7f0000000580)="df9ed1c9a3c3ff00610e4f4b74df8f1c9de4e1c35b910223265f9cf1f7e2a5078f5ab4c4dde92f561c93a5cd27c387b7e26711469f8003c06c289c38c0da9cc1", 0x40, 0xff}, {&(0x7f00000005c0)="eb159e88caf77678ac2f830402a25035029516b9f82c2fc9c1674bfe71800e74ceebf17ed8a1509bf676fcc835841ad663c84b1e4640646a4d835d3865afec2c03ee587b606b9ed4cbfc712fb91fc58879539a51581a5a356f39f47e9a37d437b5a51af6d84d81e985b8958f08003623bef929f85e334799ccdc706ec11eb111a035810a622a9b621dc93242201d39dd0fe6c48f296e1f2342998acf2adffed34ef9d565e60fd91d62ce847efd1928fb9aa968739ded40ce0ae6d9ab78d04bdcca7a8ba481fac9879ba7b39faf99c4fa220efcedeeb13406824b18ea7a8bd9cc3e4147688d4de14b0159", 0xea, 0x4bd57519}, {&(0x7f00000006c0)="c1388698295dfa03c71dd12846afd1ae982f1d29815545ac3d70a4340d364a34df8b937deba86f4c87b33d5cb5424802", 0x30, 0x3}, {&(0x7f0000000700)="16dd5b5d91fa8edad664e5647e39be331d011cfa18c2cf589e12eb56cbbc86f7b6b63cab81ee25162d7157dcbf728b35898ff131352fe70bf08e990d2ea9c20cb7ff0f2dfb75c4abe57f5b791eb890337043cd6039ec74838efbe03c4b98595aefad42fe06e7fed39c93e0fa516006e5dff5f27d4c370d2c1e758be6e1efabdc48217a8dbe80aeab4d909cc68a4af197a829ded807067d5bb08ffc8b090c25185915cd0a07d3a06dc0c0868a", 0xac, 0xda8e}, {&(0x7f00000007c0)="c9bbdcfb9b982de5182dfda2f6471334ad9e90b8f9a3aa00755036ecdb7e5d543e875714e9bef4f046aa3360cb5f5a4ebb73ee78cdeef2241945ac9f7ef4808115da517d6f744146397170ae13da4dac25ee0abcc00aef400fdc6cfaee035f2252628e474c75c5d83e36dd6e44965182a9f560b01473b832109d4ea127c11f77f00da4ea030c42768ed7dac4f4c74be9", 0x90, 0x1ff}], 0x210004, &(0x7f0000000940)={[{@nodots='nodots'}], [{@uid_eq={'uid', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x3, r1, r2, r3, r5, 0x0, 0xd6e9}, 0x401, 0x8, 0x800, 0x8000, r6, r7, 0x7f}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)='bpf\x00', 0x2001001, &(0x7f0000000500)=ANY=[]) syz_mount_image$ext4(&(0x7f00000009c0)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x20, &(0x7f0000000a40)) 14:23:40 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) r3 = accept4$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x2b1, 0x800) pwritev(r0, &(0x7f0000000800)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000005c0)="fc8796a664c55c319b35fdd93beac59ceb0c63be5c868d3d8b9f8d784bc3f9c84de98f0cb95f66539900c42902d4f1606e4003d81635645d4be8459f2a69f3ac76df1c62e3bc388a18d17e9b15f29d836b079887e302529f31ea1733f6baf9c51c2a5c34230930c0d943464e2c3fb0f2cfe59068c5bfaad1c2a2770e4d4983b798b2f75d46937c31b5", 0x89}, {&(0x7f0000000680)="b83237b148a1626d87c53208d00252503784c4cfab21ff0b3e3f15ad7819a20aa9f07d32fe983bf726680bd4486fd2347f886ee647013214636f3fac7fa159fa6fd63dc3f608fee1afcfa04524ffa436ba51f476c0b2c9757dc89c30bd9b8b8ffff16577e6a979d1f7f6bb8594fe0a98148cba44176ee6265b0d144fc3f72b1ca74b49459aed0cd1143d151591220eeeb61ea049dff7884b94f6ffab16cbe0ba584874bb5d6ced3420733dfde6762c7ef94fc9f011f41e45b7", 0xb9}, {&(0x7f0000000740)="cfac96352436edc9450f3cb51fe136253ea692064ec51363c4c9a0cbb7219cfe813946e896d3316729cb0427abc3e492e1458fbb332960b5", 0x38}, {&(0x7f0000000780)="235f1621bb601d65d620b0677dbe908e6d250101855fbf8772bb9e6400baee1fe23473283c7df0c126730228597e75677c5075f1f39c374e327ae75b8c9511d66247582fccc47c712781aeb7a0c41c7db5c44d", 0x53}], 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r4}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) pwrite64(r0, &(0x7f0000000240)="5af6ae4f22181c7db8b222427af9538baebc4715313164af97c058329ead3b4e722cb85cfd405fa825fa5d70429331b6ab20a96be59525f49cbca18d821d8127b22972fd07be159638a339a33d3a7aaadf2f8628a407a515d4238aca12cf87cb401fa3ec50a2c039836edd88a494ce414779340cc4e8ae9db71362a0256cd525035da9e47bc01538d7b4c960535f73d18a8cadf586901bc83513b6bca238f53c37124ad3ecfed3c6a1c4f688a6031468c49c74471c1e3dd827ed20a22835f4d8f1e3601027a123a1604db500224c74b7efb11e4f3ec0476bf328b06e96590c939637e99b9e538a946b", 0xe9, 0x47) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') getsockopt$packet_buf(r3, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000008c0)) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000880)) preadv(r5, &(0x7f0000000480), 0x100000000000027e, 0x0) [ 632.943111] binder: 29246:29248 unknown command -557817076 [ 632.965814] binder: 29246:29248 ioctl c0306201 20000500 returned -22 [ 633.010757] binder_alloc: 29246: binder_alloc_buf size 2554215420696027696 failed, no address space [ 633.041129] FAT-fs (loop3): Unrecognized mount option "rootcontext=root" or missing value 14:23:40 executing program 0: r0 = getpgrp(0x0) ptrace$setregs(0xd, r0, 0x5, &(0x7f0000000000)="145dde5cdaf271295d8c1a56dd5b9d655822d007537503e5861259279524b8e06cc74583daaa8a868035cb37e3857b722ad92b7225799c22f22af16f3c8abe71") r1 = getpid() ioprio_set$pid(0x200000000000002, r1, 0x0) [ 633.066260] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 14:23:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000004c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x4e24, 0x0, 0x4e22}, {0xffffffff}, {0x3f, 0x80}, 0x800, 0x6e6bba, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d6}, 0x0, @in=@multicast1, 0x3500, 0x2, 0x0, 0x9}}, 0xe8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x40, 0x0) write$apparmor_current(r2, &(0x7f0000000280)=@profile={'stack ', 'wlan1trusted:\x00'}, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="3819c3b57c3715d7940261bd0f99873bdaa2c49e488aa6336976fa91397f40c19fda68b796a86dad01e843e7b82d4e35f6de8fe072c209d0bf8566f2f109a1f30f8553aadd8c93a9b7f3a42a155e51e8d1ede0aabd3329300972aa753aea189807fb703a35cb47918efad726d13de08296237785461c", 0x76}, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 14:23:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x608000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)={0x0, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000380)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x86000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000b1c64470f3d5d21100fcdb58afc9b00000", @ANYRES32=r3, @ANYBLOB="0d000b000f00f8e2f3fffdff08000b009af2000008000b000500000008000b00206c000008000b000600000008000b00ff7f000008000b000400000008000b0040000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) listen(r2, 0x80000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="e566f6aaa7e369be8fba48f68b2d7d57a4595c680cfca92b2b11e2"], 0x17) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) listen(r2, 0xea) dup3(r0, r5, 0x80000) [ 633.107878] binder: 29246:29248 transaction failed 29201/-28, size 0-0 line 2973 [ 633.131896] binder: undelivered TRANSACTION_ERROR: 29201 [ 633.151746] binder: 29246:29289 unknown command -557817076 [ 633.181348] binder: 29246:29289 ioctl c0306201 20000500 returned -22 [ 633.193941] FAT-fs (loop3): Unrecognized mount option "rootcontext=root" or missing value [ 633.196610] binder: BINDER_SET_CONTEXT_MGR already set [ 633.208303] binder: 29246:29265 ioctl 40046207 0 returned -16 [ 633.214910] binder_alloc: 29246: binder_alloc_buf, no vma [ 633.237775] binder: 29246:29248 transaction failed 29189/-3, size 0-0 line 2973 [ 633.265184] binder: undelivered TRANSACTION_ERROR: 29189 14:23:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) bind(r0, &(0x7f00000000c0)=@un=@abs={0x1}, 0x80) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$P9_RWALK(r2, &(0x7f0000000080)={0x271, 0x6f, 0x0, {0x9d}}, 0x9) 14:23:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c6300a1ba34f833786f6c4fdcc26b0700"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000004c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x4e24, 0x0, 0x4e22}, {0xffffffff}, {0x3f, 0x80}, 0x800, 0x6e6bba, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d6}, 0x0, @in=@multicast1, 0x3500, 0x2, 0x0, 0x9}}, 0xe8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x40, 0x0) write$apparmor_current(r2, &(0x7f0000000280)=@profile={'stack ', 'wlan1trusted:\x00'}, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="3819c3b57c3715d7940261bd0f99873bdaa2c49e488aa6336976fa91397f40c19fda68b796a86dad01e843e7b82d4e35f6de8fe072c209d0bf8566f2f109a1f30f8553aadd8c93a9b7f3a42a155e51e8d1ede0aabd3329300972aa753aea189807fb703a35cb47918efad726d13de08296237785461c", 0x76}, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 14:23:40 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff82b3f8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000020000006a0a5500fe00000000850000000b000000b70000000000000095000400000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x1f, &(0x7f00000000c0)}, 0x5) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x404001) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000480)={{0x33, @remote, 0x839c, 0x2, 'sh\x00', 0x10, 0x5, 0x30}, {@local, 0x4e22, 0x10000, 0x1, 0xac, 0x200}}, 0x44) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in=@multicast2}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x800) 14:23:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x500, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000140)={0xa3, ""/163}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg(r1, &(0x7f0000001ac0)={&(0x7f0000000240)=@hci={0x1f, r2, 0x3}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)="a276955f9da6a855b843c1be1081497f7d984f07f740d904d85880a032bd81a29ce4595320d30b3652ade1ce8ad3def7e3038b249ddc8b3df1e9b0222a3b3ccd77f89b41051dbf8d78d2abc07041ddfbfd", 0x51}, {&(0x7f0000000340)="169485df9a3773b671f040ad077d571735ead66f430f1aba9fe8526d76434279195aa3cf7b68153e4400302e02793ab87b6b0953feb237cb7971c706ce5408c8801cbbe973acce6b1415be8cf3189d3e42e168e16d7fe66fe0bf3cfc21f5b4c1b56756cbdf8a0951836f45b9efb2741a7be9f19c6f32348a090352587fa9c5135a95715df27eecc0081aa4b7d65adb7fc5f7a847ed8f0a30127fc4deb54ffb2da37ad5981ad3141f4d68", 0xaa}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)}], 0x5, &(0x7f00000006c0)=[{0x1010, 0x10b, 0x4, "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"}, {0x20, 0x117, 0x4, "693523293de48d2ac5a8352a75bf2577"}, {0x30, 0x18d, 0x0, "841debdc93bba9a9f550155331e72c5773ce7be447a0d5f54e7dd726cc"}, {0xd8, 0x11f, 0x9, "6cdca71c6371a2f59f0faa71e4f105a0081d411f709ab0efa3f1ff98a84ea33b8cd65c6d2426e8733d2570b6bc8047227aaa16c220468f18e7d5b6631824c974b654d5fbb244f1f76491dec1b3e76db26f68ef55f0958a119003dfec2c16e92d3cbea9e56ee5950e1e9794f15c2784dbad983f7de49dba15a83f4d894902ec93d075c96431d454d9c39c852b506b063670b59c2e24d559a141819d6667d0e074fbf96a05e70d79bcd79480bd9c7b66dfb495a2f1c41de61aec2083e08f5ed1c0e1878ca32937"}, {0x38, 0x118, 0xf4e, "4020b39711e86eec850e12a9959bf91d8eaf4c6d80029b193d8c526a8ad7578e16d6"}, {0x20, 0x108, 0xfb, "42e0eccc8edf4ad95101c8"}, {0xc0, 0x1, 0xfc, "49644e488945a37fa8d09284120076fae3dae58e92590237139248f0e7bb0a978ac1c0cef13cf5790319e30b7707e22c2d8a1226f4dfc3d5fe328bf37d322de5a458255b99c00f913bc9515da2429917f8ba1c9c78f9e62d9a1e94e4edb4bc279010eece2a64ebe10e163535bcb8f21910c2e6882c232dd8aecbc30a2c56742ad5bef0c17471cd4952d4ea8e409151d747c6ca13fb89b9662ec1eb76ef55807713a81c05a3e94b19f3a06819a5a646"}, {0xb8, 0x116, 0xe14a, "93863284b6a60b32036097f8deed76d1879f18655b405273499868b1e99a28624ae509f377e7797e011db6431db55b9a1c3074f2991a16ce078cf28d20f17a16e6a56419b29beaba36eb6e5a2175e3db245e312b6e6fdb2bf960093b50bb128c1bbc4a937f00c6c2214e02ac2d63a89b22cfe7620b583ca5169212ebc880f00ad75b03c809fcb28ca316dfea98c49e679a99969f8799f735050ba40097dbd16e9ec2b333c7"}, {0xe8, 0x108, 0x8, "ab6a415ad8e210034d143ee0216c283191df4b7fd839a929aabc3e903c52a1238117e02708b91ccd2381a03524b5b70543537e9682e7625957cdf2e8b5cf4f5cfda91fd4c3660c22c6b49a9545729dcf4d0158238be4565d11a52af2030fc008c03b6ff8b807d99069a7b82eb103ff145e2b6eb6c4edbffc81d411af0039925d9521cc50cd176c34be0effbeba31a9fd6af03d0ef591d8b3063752e81c515ee0d301a38acf9c7a7c0b07e04664dd208054051c4512c93d56dec8b00873b2d0ebb42f1bca08b814829ce0ffaea16c3605ba36b1f96d"}], 0x13f0, 0x4000}, 0x20000000) 14:23:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 633.847109] binder: 29325:29326 unknown command -1593810164 [ 633.861269] binder: 29325:29326 ioctl c0306201 20000500 returned -22 14:23:41 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x17, 0xa, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x8001, 0x1, 0x9, 0x0, 0xe36407b4dcaafdca, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x40}, @call={0x85, 0x0, 0x0, 0x49}, @jmp={0x5, 0x1, 0xc, 0x6, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000140)=""/4096, 0x41f00, 0x1, [], 0x0, 0xe9e3f53d7820d09}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(r1, 0x0, 0x0) 14:23:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x40002) getdents(r0, &(0x7f0000000000)=""/48, 0x30) [ 633.888345] binder: 29325:29326 transaction failed 29201/-22, size -7876675851837809024--5212089855448160325 line 2973 [ 633.924407] binder: undelivered TRANSACTION_ERROR: 29201 14:23:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c4, 0x0) pkey_alloc(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/196, &(0x7f0000000100)=0xc4) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x100000001, 0x10000) 14:23:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(r0, &(0x7f0000000080)=@random={'os2.', 'GPL\x00'}, &(0x7f00000000c0)='-@{mime_type\x00', 0xd, 0x1) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70014, 0x0, 0x0, 0x0, 0xffffff6c, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200102, 0x0) 14:23:41 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x10000000) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) recvfrom$inet6(r0, &(0x7f0000000180)=""/181, 0xb5, 0x10000, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @ipv4={[], [], @multicast2}, 0x5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfb, {0x2, 0x34, 0x94, 0x200, 0xfd, 0x6, 0xff, 0x8, 0x3800}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) dup3(r0, r1, 0x0) set_robust_list(&(0x7f0000000480)={&(0x7f0000000340)={&(0x7f0000000300)}, 0xffff, &(0x7f00000003c0)={&(0x7f0000000380)}}, 0x18) 14:23:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xff00000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 633.970551] binder: 29325:29350 unknown command -1593810164 [ 633.987798] binder_alloc: binder_alloc_mmap_handler: 29325 20010000-20013000 already mapped failed -16 14:23:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x4000000000000000, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x2e, 0x119, 0x0, 0x0, {0x1801}, [@nested={0x4}]}, 0x18}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000140)=""/15) [ 634.068965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 634.081366] binder: BINDER_SET_CONTEXT_MGR already set [ 634.105639] binder: 29325:29350 ioctl c0306201 20000500 returned -22 [ 634.110116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 634.131049] binder: 29325:29351 ioctl 40046207 0 returned -16 14:23:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x680e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r0, r0, 0x80000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x337, 0xffffffff, 0x1, 0xffffffff, 0x7fff, @broadcast}, 0x10) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x133}, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffc}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x17a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80000) write(r1, &(0x7f0000000400)="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", 0x200) sendfile(r1, r2, 0x0, 0x10000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 14:23:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4803000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() r2 = dup3(r0, r0, 0x80000) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) bind(r0, &(0x7f00000000c0)=@un=@abs={0x1}, 0x80) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)={0x9}, 0x9) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000080)=0x4) [ 634.187505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 14:23:41 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffff, 0x0, 0x19, 0xfffffffffffffffd, 0x401}, 0x342) kexec_load(0x1, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000000)="50f075f37fca0ad91f4bf9eb3eedf732c410fdf4bf2368e159169bc3143e8bd11cfc42193bdce2c52ddea2ed999011526082cbc0e9e3a96378bce699a81e2c24818594936d7dbb8b12d3f0108802564e6a131710c69eb9a4d2e0ce27c649d9b243ad8b0fd413ab6fd98225dfe1289fc54ac6def6000b8a842096d64791232b1016104fca2e9ca0a59eabc6936308f78b6e2556bd75019357fc3fcdad7533d5d97372875ac189e190c5ac74b9e738a59e3606d5cbba17489e28ffbf9e62b841cb66e86c864b4c7e5155f4c41d927b49be572e67a549cff46293f50376bab49a5da57606ba0952de5550ef7c50b54fec694c5e49", 0xf3, 0x2, 0x3}, {&(0x7f0000000100), 0x0, 0x401, 0x401}, {&(0x7f0000000140)="78f727cb3783a450835301d2d6aa276257c7e82c6ed2a56b2def4f4db3397dc21e9e514aec9dbced3bdfe986", 0x2c, 0x100000000, 0xfff}, {&(0x7f0000000180)="c5782b0e21a56f7183a924a445fe284b279124a9e847896866e8a6bd7f592ede2ea1d5c7fb30a29d25b15231cc6354c0ccb7dfffd25352fc51651dbb529e70e3a6f09d2abc9408b1236f37e4eee77c0d6ce32fa13dee8e77c1395c3943f173be3027b1f2271155c70365e1c4e480fae6f714002f33ab81e61d6d7f6e9aa0d2deba8171ff95ffa6159c4054e1b4eec1d19a72ef4fc4a8f77b78de5435beb96fa7993094d4043af83f2083c6681aeb60eb06ed5aff310505102401ebd714", 0xbd, 0xec58, 0x9}], 0x140000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000240)={@local}, &(0x7f0000000380)=0x14) bind$llc(r1, &(0x7f0000001840)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, @random="1a406ed1ac21"}, 0x10) connect$llc(r2, &(0x7f0000000280)={0x1a, 0x33f, 0x0, 0x5, 0x0, 0x0, @local}, 0x1000002ff) socket$nl_xfrm(0x10, 0x3, 0x6) [ 634.229590] audit: type=1800 audit(1538749421.410:234): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16591 res=0 [ 634.256964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 634.286844] binder: BINDER_SET_CONTEXT_MGR already set [ 634.306378] audit: type=1804 audit(1538749421.440:235): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="file0" dev="sda1" ino=16591 res=1 [ 634.310033] binder: 29380:29386 ioctl 40046207 0 returned -16 14:23:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) r3 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='em0md5sum@}\x00', 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)='/dev/kvm\x00', 0xffffffffffffffff) keyctl$reject(0x13, r3, 0x9, 0x4, r4) dup3(r2, r1, 0x0) [ 634.331348] audit: type=1800 audit(1538749421.440:236): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16591 res=0 14:23:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e0000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x44) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="65515921ccb2bcd0b05e7baef20bb8b4ffaaacfe94bd7d91321bf18c28602c720b67f07ea91f6e686d13d686115adedb0389c905805b10e5581c034a0e3fac3fcb577bcdc9d0988d8e1d4b99a8eb6fb216fcccb6d9381b596fc36e210c6ebadf8b43e151a424fb54b0d59dbbd0233e185ac02f0c3432801e310ee4994559b4bf5e9beea653cd736463d550f881806b5d61f360f92b7e76f5cfc779a9be92739482597e50a454037aa2f271c1e9e8b67a4199279278de79e7ef6a4b7302a09adfbbe5b60dbd1e67cd6775e2a40a17f6db", 0xd0, 0x840, &(0x7f0000000300)={0x11, 0x1f, r1, 0x1, 0x8, 0x6, @dev={[], 0x1f}}, 0x14) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10, 0x1000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockname(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYRES32], 0x4}}, 0x4004) r3 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000004c0)=0x3, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000500)={{0x2, 0x8}, {0x5, 0x4}, 0x3f, 0x2}) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) 14:23:41 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="70ccadfb64807a2524f37491c80223c010bd25eb0a837d55935f7c60065357bb3365a0cf9bca3752106be666de0a07d9136cb1a8dd87f1fb7c25987ba64237d7a43b16facca6ef5d5b4db83c1c3f27fbf7aef082929cf0cd3d3360f34de78b709c1947c9070471570f0c39722af137c12e0dd365751ff1c54d7866f721319272868370afb23e77dc04f0be14fb1978b73a7d0b67673741836e5300ec009b9c796564f7e59dee26c151aa1e4147e0ba5ec9a6bd4b094893d137883a2d472709a4d94bab3725b8c9ee97b099ceee46b39a720c", 0xd2, 0x9}, {&(0x7f00000000c0)="c661cb9babebb75a3d345a5c48a38af49a200506dcfe2efca3e13196ca7c06dac4e874c74aa8de9dea4ac7c040192b4fbc8b481cc736abcfc231cab6b61eea09cbe412bb84972b71342c5cd0f86bfa620043ac024341e532f59ffd09dfbbaa1141939859051c5da016d2936cc208ece2733a98abdaedb9bec1a996696746c13b16ce2a3cb23fce1094ee4563468ab29ed7a65043118f82eb15f79bffc6bee1fea93ccd462e2b30014e919ace900a52b15366c1f753379783", 0xb8, 0xa3}, {&(0x7f0000000340)="6e9c83b546c1c050895c0bb62320ef9d8355fc27795e92c8c6b187019b9f05c05e56c56eb122bb2861d2eaf03fbb47b359b670cd4440b63fd25fa17822501bce91885b1bb3ce36911609a357dc64dbd3cdd1ef1de98377bb36d1fdca987bd28bba9d689cbd777d7506be9677b2b78dcf8f4d5fcdd2a99c38531555ceef43adee2b", 0x81, 0x7ff}]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000200)='selinuxvboxnet1\x00', 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) close(r1) [ 634.416902] binder: release 29380:29382 transaction 535 in, still active [ 634.469433] binder: send failed reply for transaction 535 to 29380:29386 [ 634.488322] binder: undelivered TRANSACTION_COMPLETE [ 634.497274] binder: undelivered TRANSACTION_ERROR: 29189 14:23:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0xa43c0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000003c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r3, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14:23:41 executing program 1: socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x802, 0x80000003) socketpair(0x11, 0x80000, 0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000480)={{0x2, 0x0, 0x0, 0xa1ce, 'syz1\x00', 0x3}, 0x5, 0x200, 0x1, r2, 0xa, 0x7ff, 'syz1\x00', &(0x7f00000003c0)=['/dev/vcs\x00', '/dev/net/tun\x00', "5b6b657972696e675e2bf100", ']\x00', '/dev/snd/pcmC#D#p\x00', '\\selinux,em1\'\x00', '/dev/input/event#\x00', 'ppp1\x00', '#posix_acl_accessmd5sumvmnet0md5sum%md5sum(mime_type-\x00', '/dev/net/tun\x00'], 0x9e, [], [0x4, 0x15, 0x3f80000000000000, 0x4c7]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x380) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000780)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000240)={{0xd0}, {0x2c9}, 0x6, 0x7, 0x200}) r6 = gettid() ioctl$RTC_PIE_OFF(r5, 0x7006) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r7 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) fcntl$setown(r4, 0x8, r6) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r6}, &(0x7f0000000100)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r9, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r9, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) timerfd_gettime(r7, &(0x7f0000000140)) sendto$inet(r9, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) [ 634.641587] Dev loop0: unable to read RDB block 7 [ 634.646611] loop0: unable to read partition table 14:23:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x44) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="65515921ccb2bcd0b05e7baef20bb8b4ffaaacfe94bd7d91321bf18c28602c720b67f07ea91f6e686d13d686115adedb0389c905805b10e5581c034a0e3fac3fcb577bcdc9d0988d8e1d4b99a8eb6fb216fcccb6d9381b596fc36e210c6ebadf8b43e151a424fb54b0d59dbbd0233e185ac02f0c3432801e310ee4994559b4bf5e9beea653cd736463d550f881806b5d61f360f92b7e76f5cfc779a9be92739482597e50a454037aa2f271c1e9e8b67a4199279278de79e7ef6a4b7302a09adfbbe5b60dbd1e67cd6775e2a40a17f6db", 0xd0, 0x840, &(0x7f0000000300)={0x11, 0x1f, r1, 0x1, 0x8, 0x6, @dev={[], 0x1f}}, 0x14) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10, 0x1000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockname(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYRES32], 0x4}}, 0x4004) r3 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000004c0)=0x3, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000500)={{0x2, 0x8}, {0x5, 0x4}, 0x3f, 0x2}) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) [ 634.698934] loop0: partition table beyond EOD, truncated [ 634.758601] binder: release 29421:29422 transaction 537 in, still active [ 634.766338] binder: release 29421:29427 transaction 537 out, still active [ 634.776291] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 634.784907] binder: undelivered TRANSACTION_COMPLETE [ 634.825472] binder: send failed reply for transaction 537, target dead [ 634.858273] binder_alloc: binder_alloc_mmap_handler: 29421 20010000-20013000 already mapped failed -16 [ 634.870522] binder: BINDER_SET_CONTEXT_MGR already set [ 634.877968] binder: 29421:29427 ioctl 40046207 0 returned -16 [ 634.887082] binder_alloc: 29421: binder_alloc_buf, no vma [ 634.894757] binder: 29421:29422 transaction failed 29189/-3, size 0-0 line 2973 [ 634.905585] binder: undelivered TRANSACTION_ERROR: 29189 [ 634.952174] Dev loop0: unable to read RDB block 7 [ 634.957275] loop0: unable to read partition table [ 634.971301] loop0: partition table beyond EOD, truncated [ 634.977760] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 635.100673] audit: type=1804 audit(1538749422.280:237): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="file0" dev="sda1" ino=16591 res=1 [ 635.121348] audit: type=1800 audit(1538749422.290:238): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16591 res=0 14:23:43 executing program 3: socketpair$unix(0x1, 0x202062bdae1ad4c5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x3}]}, 0xfdfd) fstatfs(r0, &(0x7f0000000040)=""/83) 14:23:43 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$get_persistent(0x7, r2, 0x0) keyctl$link(0x8, r0, r0) 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r0, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x200000) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000001c0)=""/82) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x20000000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0xfffffffffffffff9, 0x0, 0x3, 0xfffffffffffffffb, 0x8}) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 14:23:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r2, 0x200739) rt_sigpending(&(0x7f00000001c0), 0x2e5) sendfile(r1, r2, &(0x7f0000000240), 0xa00004000000002) 14:23:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') readv(r3, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/142, 0x8e}], 0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/249, 0xf9}], 0x26a) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 14:23:43 executing program 5: r0 = socket$kcm(0xa, 0x201002, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1400000000000000290000004300000004000000"], 0x14}, 0x0) 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 635.901560] binder: BINDER_SET_CONTEXT_MGR already set [ 635.907020] binder: 29445:29461 ioctl 40046207 0 returned -16 14:23:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0xfdffffff, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000211000000000000000000000005000600000000000a000000000000000200000000000000000000000000000000000000fcffffff020008000200400002000000e000000200000000000000000200010000000000000003000000000005000500000000000a00000000000000fe8000000000000000000000000000ff00000000000000004ff6d6b39bb8f279f5e087d9a3e1e2"], 0x88}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 635.944352] binder_alloc: 29445: binder_alloc_buf, no vma 14:23:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)) r4 = dup3(r3, r3, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000080)={r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235000100000f3067470ffb2556000000262e2e4e0fc72d000000002e66470f1670aff967430fe74b4726410f01cf3e662e6766440f38815ee0460f01d10fc7af2e86663f", 0x4b}], 0x1, 0x0, &(0x7f0000000200), 0x0) 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 635.986655] binder: release 29445:29461 transaction 540 out, still active [ 635.994157] binder: 29445:29452 transaction failed 29189/-3, size 0-0 line 2973 [ 636.001926] binder: undelivered TRANSACTION_COMPLETE [ 636.018952] binder: release 29445:29452 transaction 540 in, still active 14:23:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x100) eventfd2(0x4, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x800) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x201, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x8001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0xabdb, @loopback}}, 0x800, 0x9, 0xffffffff80000000, 0xffffffffffff28c9, 0x81}, &(0x7f0000000280)=0x98) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r4, 0x6}, 0x14) dup2(r0, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'yam0\x00', 0x1}, 0x18) fsync(r2) [ 636.038427] binder: send failed reply for transaction 540, target dead 14:23:43 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) name_to_handle_at(r0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a80)={0xd8, 0xfff, "f313ea9dfe849829994d3bfc534b156feab90163419893d09221a638b25cd50bd65897670d9402797f3d9ef51c3381df456dbff68cba9e9bb5fd254d38931a9d3f13b423effe656f00dbbee0b99b2712628aa1eb68e827c295257cbc593fb456b07409246b8dded17aaaf2bda9a7dce604a553419fdce9f21bb4e01ba9479732016f2006d801d7f2044d01df132ab09c858f5832a178a58ccc794592219116eb1d5e89d614c641fea7cf48546b73cf32601f9265faf0a8b8d395cf67105d8e964e33ae19d8c425d553544dc338d5f7b4"}, &(0x7f0000000940), 0x1400) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x208, 0x2e0, 0x208, 0x110, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000280), {[{{@ip={@broadcast, @loopback, 0xffffffff, 0xffffffff, 'gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0xa8667ffecf54c5c9, 0x2, 0x60}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x54, 0x100}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7fff, 0x400, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1dea92884d3d3661a6a0f671f0ef1d901951fbaf26dcbbae3448cec8ce7"}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x7, @local, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) symlink(&(0x7f0000000980)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000009c0), 0x24, 0x0) 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000a0ffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c63dc00"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 636.091150] binder: undelivered TRANSACTION_ERROR: 29189 [ 636.170665] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 636.239606] binder: 29503:29515 unknown command 14443276 14:23:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x202000, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000cf00000000000000950000000100000046a872bcbd33b56f450100000000000000cf2b49cae3ab094404d5152d0653ec7a9e389810"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 14:23:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6db, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1b, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x92, @local, 0x4}, {0xa, 0x4e20, 0x10001, @empty, 0x3}, r2, 0x900000000000000}}, 0x174) 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb804000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 636.283803] binder: 29503:29515 ioctl c0306201 20000500 returned -22 [ 636.308494] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. 14:23:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[]}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="62f33c4f4a47180a57697c3032c1b7b58e49c60ac46752aeb431d3a8214fc33ef0c99dda0e708734a035d85b5abc69ce8ee2be996e9032ba3756fe0e4b3800aa9ab57f", 0x43, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0xf}]}, 0x20}}, 0x0) [ 636.330434] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 636.337906] binder: release 29503:29504 transaction 543 out, still active [ 636.356284] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. [ 636.365955] binder: 29503:29504 unknown command 14443276 [ 636.365987] binder: BINDER_SET_CONTEXT_MGR already set 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0018000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 636.379627] binder: 29503:29515 ioctl 40046207 0 returned -16 [ 636.402386] binder: undelivered TRANSACTION_COMPLETE [ 636.413601] binder: 29503:29504 ioctl c0306201 20000500 returned -22 [ 636.426109] binder: send failed reply for transaction 543, target dead 14:23:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000200)="ad360fc7f3260f00d5d8163200baf80c66b8348be98b66efbafc0c66b8ea1de44666ef660f3adf80c0003566b94c06000066b80000000066ba008000000f30660f3a6350ee052e0f01c9670f00905a3b0000", 0x52}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x7b, 0x0, [0x48a]}) 14:23:43 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x29, @mcast2, 0x2}, 0x1c) r1 = getpid() ptrace$poke(0x4, r1, &(0x7f00000000c0), 0xffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @loopback}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x47d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r3 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x83, 0x200000) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000340)='veth0_to_bridge\x00') setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x6}, 0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8400, 0x0) syz_mount_image$ceph(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)='./file0\x00', 0x6, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="89143f8d72e79482921265417c8d2ae1c8635fbd8572abcf4d74d3da52c28d0025d5a3befbb68fa783216dba8be05c7d934f6e56588c46f346b4ee101550a559b16d04f75257bf17fda2c03c71a8446fb08ef30e1001dcc9ac43273c6502e4c7beb1cbe4262f4c1d", 0x68, 0x1ff}], 0x8, &(0x7f0000000540)='/dev/bus/usb/00#/00#\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x7a, "0b6c448cfd6303aa7cd6222e066ed0dc0c8f8fa11074463d56fe88b7d2193e47146670e5846b50db4d442b4418b0b2381270ec09178fbfaa7c8d3436e4ac82fe8273f1a852b0a225987a24a0fa467fef35c6d4fc57f78c0b3885af2350953d827c9bec49ab57584c962653f2fe99644cf9f1ca9fc1764f7505ca"}, &(0x7f0000000640)=0x82) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000680)={r5, 0x2, 0x0, 0x0, 0x8001}, &(0x7f00000006c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000700)={r5, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x70}}, [0x1104, 0x8, 0x9, 0x7, 0x9aa, 0x9, 0x3, 0x6c0f, 0x3, 0x6, 0x5, 0x7fff, 0x9, 0x0, 0xae0]}, &(0x7f0000000800)=0x100) umount2(&(0x7f0000000840)='./file0\x00', 0xc) pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001880)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000018c0), &(0x7f0000001900)=0x4) r7 = syz_open_dev$vcsa(&(0x7f0000001940)='/dev/vcsa#\x00', 0x80, 0x100) setxattr(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)=@random={'osx.', '\x00'}, &(0x7f0000001a00)='-!\x00', 0x3, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001a40)={r6, 0x4000}, &(0x7f0000001a80)=0x8) setsockopt$sock_void(r7, 0x1, 0x24, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001ac0)={0x4, 0x1, 0x0, 0x8, r5}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0}, &(0x7f0000001c00)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, 0x0}, &(0x7f0000001c80)=0xc) mount$fuseblk(&(0x7f0000001b00)='/dev/loop0\x00', &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='fuseblk\x00', 0x4000, &(0x7f0000001cc0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@subj_type={'subj_type', 0x3d, 'bridge0\x00'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001e00)={0x0, 0x6, 0x4, 0x0, 0x0, [{r0, 0x0, 0xaddd}, {r7, 0x0, 0x4}, {r4}, {r3, 0x0, 0x20}]}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000001ec0)=0x7) 14:23:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000240)={0x3, 0x3, 0x2, 0x2, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="f0ff4f00adb99d0a00000f320f0666b884000f00d066baf80cb814f4f88bef66bafc0c66b8d04766ef0f01dfb804eb00000f23d80f21f835c00000000f23f866ba2100edb9800000c00f3235008000000f30", 0x52}], 0x1, 0x60, &(0x7f0000000100), 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 14:23:43 executing program 3: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) r0 = semget(0x3, 0x2, 0x200) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000004}], 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x100000, 0x101000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x4266, 0x5}) write$smack_current(r1, &(0x7f0000000180)='/dev/vcsa#\x00', 0xb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) [ 636.434172] binder: 29503:29535 transaction failed 29189/-22, size 0-0 line 2834 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:43 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000540)={@empty, 0x0}, &(0x7f0000000580)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f00)={0x11, 0x0, 0x0}, &(0x7f0000001f40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001f80)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002080)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002100)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002300)={@empty, @dev, 0x0}, &(0x7f0000002340)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000002380)={@broadcast, @loopback, 0x0}, &(0x7f00000023c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000002400)={@loopback, 0x0}, &(0x7f0000002440)=0x14) accept(0xffffffffffffff9c, &(0x7f0000002540)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000025c0)=0x80) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0xffffffffffffffcd) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002780)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000002880)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000005200)={0x11, 0x0, 0x0}, &(0x7f0000005240)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000005280)={0x11, 0x0, 0x0}, &(0x7f00000052c0)=0x14, 0x80800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000005340)={@dev, 0x0}, &(0x7f0000005380)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000053c0)={@mcast1, 0x0}, &(0x7f0000005400)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005540)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000005640)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005680)={0x574, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r9}, {0x158, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x9, 0x8, 0xbc2f, 0x3}, {0xfdc5, 0x9, 0x7f, 0x4}, {0x4, 0x8000, 0x0, 0x7}, {0x3, 0x80000001, 0x9}, {0x1, 0x9, 0xb6, 0x6f}, {0x3, 0x200, 0x8, 0x1e75fb02}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40000000000000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x40000000000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r15}, {0xec, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4375}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffe}}}]}}, {{0x8, 0x1, r17}, {0x80, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x574}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) r20 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r21 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r22 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r22, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r21, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r21, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r21, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0c6304000a43f4cf360f08c5711de8e932f5d402c0c863a34a42f9ea84f49b6094152188c684b5baa4c3880215528d45c38fa6f37968af4846ae933ce246ea4b820974f940476a2726702c4fe7163c00eadae8e1434e71d05834b75069"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r21, 0x40046207, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fdatasync(r0) ioctl$BINDER_WRITE_READ(r21, 0xc0306201, &(0x7f0000000180)={0x12, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r19, @ANYRES64=0x0, @ANYRES16=r23], 0xac, 0x0, &(0x7f0000000680)="0ecd0e2c39f0810dff58a1210e7200115316f19e5dfd3f1766ee7dfd51bc0add766e4b9051268c34a313a120e385c5b29d001801cad4262938546fe849bc65721972a2bf9b3b81b07725f631242eb95576eb4809791a9d1b01de39749e006627f98fbf1e4efd98dc1c16140840bfff176caefac986e14192a83711c084d571cb58be450ab9e993583a4aceeffd7a91a835ca463356a399ac0e25128be57a80b3df43ad5f91072aa1b1000000"}) dup3(r21, r20, 0x0) ioctl$BINDER_THREAD_EXIT(r20, 0x40046208, 0x0) 14:23:43 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = semget$private(0x0, 0x0, 0x214) semctl$SEM_STAT(r2, 0x7, 0x12, &(0x7f0000000500)=""/150) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000200)=""/117, &(0x7f00000000c0)=0x75) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) clone(0x0, &(0x7f00000006c0), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) [ 636.564417] ceph: device name is missing path (no : separator in /dev/loop0) [ 636.599320] binder: undelivered TRANSACTION_ERROR: 29189 14:23:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl(0x6, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)="0385dbeec157634b3a3789bf6709aae9ae6fb11bfc04259c008abceac82c5accb0c4f76723057319dc5dd5c026307892487a1a0d51178b107896f422535cd1fa535894ae291ffc0d185285f2d599367141d01249af95a1178b71010787750aa5b8b273aa60e24aa1045dd42b3e13b590b9fd6c1299bdb737e38da9597a2c5bfb20964cbf07a935197c2773338c1fb92ab614477938246591bad19651eb060eb914a330ff043f9631549d0c42b9b695a5260daa84ec5f0273fc410d44f22349d73705425ce1dc9e68cacbb42472495e37fdd31185fdefec63ac5b89603c713464e6a82925f0ec3a") r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2000000000000, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r4}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000580)={0x0, &(0x7f0000000440)=""/211, &(0x7f0000000540)}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0270}) ioctl(0xffffffffffffffff, 0x40000006, &(0x7f0000000540)='\x00\x00\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f00000006c0)={0x1, {r6, r7+10000000}, 0x10000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x101000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f00000005c0)={0x2, 0x5e}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) rmdir(&(0x7f00000003c0)='./file0\x00') [ 636.721363] binder: 29572:29573 unknown command 287500 14:23:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 636.790131] binder: 29572:29573 ioctl c0306201 20000500 returned -22 [ 636.834744] ceph: device name is missing path (no : separator in /dev/loop0) [ 636.855609] binder: 29572:29579 unknown command -1 [ 636.860675] binder: 29572:29579 ioctl c0306201 20000180 returned -22 [ 636.889895] binder: 29572:29573 unknown command 287500 [ 636.938410] binder: BINDER_SET_CONTEXT_MGR already set [ 636.951297] binder: 29572:29579 unknown command -1 [ 636.960115] binder: 29572:29573 ioctl c0306201 20000500 returned -22 [ 636.967218] binder: 29572:29579 ioctl c0306201 20000180 returned -22 [ 636.976455] binder: 29572:29584 ioctl 40046207 0 returned -16 14:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:44 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x0, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300)}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000004c0)=""/191, 0xfdaa}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "8629e4a6c0f9"}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0xf, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 14:23:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = semget$private(0x0, 0x0, 0x214) semctl$SEM_STAT(r2, 0x7, 0x12, &(0x7f0000000500)=""/150) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000200)=""/117, &(0x7f00000000c0)=0x75) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) clone(0x0, &(0x7f00000006c0), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) [ 637.268474] binder: release 29610:29614 transaction 547 in, still active [ 637.278179] binder: release 29610:29622 transaction 547 out, still active [ 637.291619] binder: undelivered TRANSACTION_COMPLETE [ 637.305914] binder: send failed reply for transaction 547, target dead [ 637.320913] XFS (loop5): Invalid superblock magic number 14:23:44 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x17cd, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x7a00, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="628948cce386d0558f28cef377575b6f9146478229ccbb70be0f3f7f48ac132ca64802abeef3da82cea3b3688c46edb61d5328fac97f802175d6f27808c2a6ec904cca8d66916516c3fcb3eec0944a3566b9add49e1961909bb2034baed94bd403176cba9dfb9ae2d81b801705fb6dba0de9d2476d32dc54a5724b", @ANYBLOB="ca9eb084ae13bb27f6", @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16, @ANYRES32], @ANYRES16=r0]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40286608, &(0x7f0000000080)) 14:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb804}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:44 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = semget$private(0x0, 0x0, 0x214) semctl$SEM_STAT(r2, 0x7, 0x12, &(0x7f0000000500)=""/150) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000200)=""/117, &(0x7f00000000c0)=0x75) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) clone(0x0, &(0x7f00000006c0), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) [ 637.366492] binder: BINDER_SET_CONTEXT_MGR already set [ 637.382220] binder: 29610:29622 ioctl 40046207 0 returned -16 [ 637.429412] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 4294967295 (only 16 groups) [ 637.432543] binder_alloc: 29610: binder_alloc_buf, no vma 14:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl(0x6, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)="0385dbeec157634b3a3789bf6709aae9ae6fb11bfc04259c008abceac82c5accb0c4f76723057319dc5dd5c026307892487a1a0d51178b107896f422535cd1fa535894ae291ffc0d185285f2d599367141d01249af95a1178b71010787750aa5b8b273aa60e24aa1045dd42b3e13b590b9fd6c1299bdb737e38da9597a2c5bfb20964cbf07a935197c2773338c1fb92ab614477938246591bad19651eb060eb914a330ff043f9631549d0c42b9b695a5260daa84ec5f0273fc410d44f22349d73705425ce1dc9e68cacbb42472495e37fdd31185fdefec63ac5b89603c713464e6a82925f0ec3a") r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2000000000000, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r4}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000580)={0x0, &(0x7f0000000440)=""/211, &(0x7f0000000540)}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0270}) ioctl(0xffffffffffffffff, 0x40000006, &(0x7f0000000540)='\x00\x00\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f00000006c0)={0x1, {r6, r7+10000000}, 0x10000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x101000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f00000005c0)={0x2, 0x5e}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) rmdir(&(0x7f00000003c0)='./file0\x00') [ 637.491267] binder: 29610:29614 transaction failed 29189/-3, size 0-0 line 2973 [ 637.528005] binder: undelivered TRANSACTION_ERROR: 29189 14:23:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630000256d6cde0896dae1f6a3050c68c0d010fa563bceab25e41d614de09af72e"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) r2 = dup3(r1, r0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@msize={'msize', 0x3d, 0xda}}, {@mmap='mmap'}, {@uname={'uname', 0x3d, '\'ppp0'}}, {@noextend='noextend'}, {@loose='loose'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@fowner_lt={'fowner<', r3}}]}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 637.539645] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 4294967295 (only 16 groups) 14:23:44 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), 0x4) 14:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb8040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000000008912, &(0x7f0000000000)="159f1c104a8f306b4e3e17d4a0bea0762e936f3060796070") pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3, 0xffffffffffffff9c}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xaf01, &(0x7f0000000040)) [ 637.723604] binder: release 29661:29664 transaction 550 out, still active [ 637.747255] binder: undelivered TRANSACTION_COMPLETE 14:23:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000a0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:45 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x28240, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f00000000c0), 0x800) r1 = socket$inet(0x2, 0x80003, 0xa) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() getsockopt$inet_buf(r1, 0x0, 0x50, &(0x7f0000000080)=""/46, &(0x7f0000000340)=0x2e) [ 637.950823] XFS (loop5): Invalid superblock magic number 14:23:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x1, 0x111, 0x0, 0x9917, 0x10ffff, 0x80000000}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x30, r1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = shmget(0x2, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x2028c0, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000001c0)=""/36) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x9, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000800440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000180)=0x5) r6 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x4, 0x81, 0x400, 0x10000, 0x0, 0x3, 0x10002, 0x6, 0x1, 0xffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffff79, 0x899a, 0x64, 0x9, 0x57, 0x4, 0xfffffffffffffff7, 0x6, 0x6, 0x1f, 0x8, 0x9, 0xfffffffffffffc01, 0x4, 0x6, 0x7, 0x5, 0xa6bccf9, 0x4, 0x80, 0x5c79, 0x0, 0x7c, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x3, 0x7f}, 0x0, 0x8d, 0xfffffffffffffff9, 0x2, 0x10000, 0x17ba, 0xffff}, r6, 0x8, 0xffffffffffffff9c, 0x2) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0x6, @ipv4={[], [], @broadcast}}, {0xa, 0x4e22, 0x4ce4348, @dev={0xfe, 0x80, [], 0x12}}, 0x711cf581, [0x101, 0x0, 0x7, 0x2, 0x80, 0x1f, 0x3, 0x80]}, 0x5c) socket$l2tp(0x18, 0x1, 0x1) 14:23:45 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r0, &(0x7f0000000080)=""/190}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000200)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000180)={0x99a5, 0x7fffffff, 0xff}) connect(r3, &(0x7f0000000240)=@nfc={0x27, 0x0, 0x1}, 0x80) fchmod(0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x0, 0x0) 14:23:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xff000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl(0x6, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)="0385dbeec157634b3a3789bf6709aae9ae6fb11bfc04259c008abceac82c5accb0c4f76723057319dc5dd5c026307892487a1a0d51178b107896f422535cd1fa535894ae291ffc0d185285f2d599367141d01249af95a1178b71010787750aa5b8b273aa60e24aa1045dd42b3e13b590b9fd6c1299bdb737e38da9597a2c5bfb20964cbf07a935197c2773338c1fb92ab614477938246591bad19651eb060eb914a330ff043f9631549d0c42b9b695a5260daa84ec5f0273fc410d44f22349d73705425ce1dc9e68cacbb42472495e37fdd31185fdefec63ac5b89603c713464e6a82925f0ec3a") r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2000000000000, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r4}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000580)={0x0, &(0x7f0000000440)=""/211, &(0x7f0000000540)}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0270}) ioctl(0xffffffffffffffff, 0x40000006, &(0x7f0000000540)='\x00\x00\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f00000006c0)={0x1, {r6, r7+10000000}, 0x10000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x101000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f00000005c0)={0x2, 0x5e}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) rmdir(&(0x7f00000003c0)='./file0\x00') 14:23:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0008000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x4) socketpair(0x3, 0x7, 0xbd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@ax25={0x3, {"c7aabfa6160afc"}, 0x7fffffff}, {&(0x7f0000000040)=""/29, 0x1d}, &(0x7f0000000200), 0xfe5481a32a2a076b}, 0xa0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000000)}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x131}}], 0x2, 0x0) [ 638.422179] binder: BINDER_SET_CONTEXT_MGR already set [ 638.427525] binder: 29661:29720 ioctl 40046207 0 returned -16 [ 638.471092] binder_alloc: 29661: binder_alloc_buf, no vma [ 638.494627] binder: 29661:29727 transaction failed 29189/-3, size 0-0 line 2973 [ 638.524938] binder: undelivered TRANSACTION_ERROR: 29189 [ 638.556577] XFS (loop5): Invalid superblock magic number 14:23:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:23:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:23:45 executing program 0: r0 = socket(0x40000000000001e, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x16c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x18bb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1d}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffe01}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe7}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400010300000000000000001600000012000000"], 0x18}}, 0x0) [ 638.605129] binder: release 29661:29662 transaction 550 in, still active [ 638.655783] binder: send failed reply for transaction 550, target dead [ 638.805538] binder: release 29754:29755 transaction 553 in, still active [ 638.812543] binder: release 29754:29760 transaction 553 out, still active [ 638.819478] binder: undelivered TRANSACTION_COMPLETE [ 638.828295] binder: send failed reply for transaction 553, target dead [ 638.836832] binder: BINDER_SET_CONTEXT_MGR already set [ 638.842294] binder: 29754:29762 ioctl 40046207 0 returned -16 14:23:46 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhci\x00', 0x10000, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0xc0, 0x142) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x69, 0x1}, 0x14) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r5 = getgid() setresgid(r4, r5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000000c0)) prctl$seccomp(0x27, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x5, 0x30}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r7, 0xa0, "8429e5276e651cffbf2812dbe14a7a6dd541511c44f281bfcc18eac682f1c2b9d107aae3d8bf44d23bc99236bde60610ceb9539d19cdb0fc3c77cbeec8ae7f4314e9f964139407009cfebe0efdb0b42b6a1ceb6966c92d0a0a332edc70e7be2e6a0cd25d8794f9906c459190a2e4532a7565768a6efa122129fff4f316b61cb124760c710fa4de504a0c3ba73c381de9beb073f2f978105e7c127b5eaae302b5"}, &(0x7f00000006c0)=0xa8) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000880)='\'):em1\x00') write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000003f40)={@dev, 0x0}, &(0x7f0000003f80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000003fc0)={@empty, 0x39, r9}) r10 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_smack_transmute(r10, &(0x7f0000003e80)='security.SMACK64TRANSMUTE\x00', &(0x7f0000003ec0)='TRUE', 0x4, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/129, 0x81}], 0x1, &(0x7f00000005c0)=""/68, 0x44}}, {{&(0x7f0000002ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000033c0)}}], 0x2, 0x0, &(0x7f0000003e40)={0x77359400}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) rt_sigsuspend(&(0x7f0000000680), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000007c0)={0x0, @speck128, 0x1, "d6c2fd6333e2804d"}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 14:23:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl(0x6, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)="0385dbeec157634b3a3789bf6709aae9ae6fb11bfc04259c008abceac82c5accb0c4f76723057319dc5dd5c026307892487a1a0d51178b107896f422535cd1fa535894ae291ffc0d185285f2d599367141d01249af95a1178b71010787750aa5b8b273aa60e24aa1045dd42b3e13b590b9fd6c1299bdb737e38da9597a2c5bfb20964cbf07a935197c2773338c1fb92ab614477938246591bad19651eb060eb914a330ff043f9631549d0c42b9b695a5260daa84ec5f0273fc410d44f22349d73705425ce1dc9e68cacbb42472495e37fdd31185fdefec63ac5b89603c713464e6a82925f0ec3a") r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2000000000000, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x0, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x264, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8]}, 0x75, r4}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000580)={0x0, &(0x7f0000000440)=""/211, &(0x7f0000000540)}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0270}) ioctl(0xffffffffffffffff, 0x40000006, &(0x7f0000000540)='\x00\x00\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f00000006c0)={0x1, {r6, r7+10000000}, 0x10000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x101000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f00000005c0)={0x2, 0x5e}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x5, 0x4) rmdir(&(0x7f00000003c0)='./file0\x00') 14:23:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4803}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 638.849609] binder: 29754:29755 transaction failed 29189/-22, size 0-0 line 2834 [ 638.910376] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x3 [ 638.922250] binder: undelivered TRANSACTION_ERROR: 29189 [ 639.032079] XFS (loop5): Invalid superblock magic number [ 639.709620] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x3 14:24:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1fb5361d3bf10b833c5059b268cac6d9131989d6a0c915f37a77a49fc0e8929efbd69cc6cc849a37d4d855b5569fa3b9f03b0de071e66ef97d057c1b45e7f7ed5a799cd5d792c084bb7e80f002729e01cf2ad1a2c17d884bd2bfc7477b6ab2cde01c04b0cadecc60e547b8de219089e0e852536bc35092362d75458ee996fcf0a8e74cfa4116b78c68338e31a61451479822c0def205cadd6693cc9ab5ef17048802a2ec9f0e8a0903a3a22a51d8c2eefcaac60f947ccc9dbcc453ea78453cc3858c5d7378a27143f4a5a23288"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:24:45 executing program 3: 14:24:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630000256d6cde0896dae1f6a3050c68c0d010fa563bceab25e41d614de09af72e"], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) r2 = dup3(r1, r0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@msize={'msize', 0x3d, 0xda}}, {@mmap='mmap'}, {@uname={'uname', 0x3d, '\'ppp0'}}, {@noextend='noextend'}, {@loose='loose'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@fowner_lt={'fowner<', r3}}]}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 14:24:45 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x4000, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) r1 = socket(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x12, 0x1e, 0x201}, 0x14}}, 0x0) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f00000006c0)=[{&(0x7f00000004c0)}], 0x0, &(0x7f0000000ac0)={[], [{@dont_measure='dont_measure'}, {@fsmagic={'fsmagic'}}, {@measure='measure'}, {@euid_lt={'euid<'}}, {@obj_role={'obj_role', 0x3d, 'user'}}]}) r3 = dup2(r2, r2) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000140)) 14:24:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:24:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000810009000000000000090000000000000000000000000000000100000000ebe3d347080000000000000080000000000000f104000000000000ffffff7f0000dd54e279728236bd6855e837ca9ae8287800"]) sendto$inet(r0, &(0x7f0000000340)="030002", 0x3, 0x800000000008000, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) getgroups(0x9, &(0x7f0000000580)=[0x0, 0xee01, 0x0, 0x0, 0xee01, 0x0, 0xee00, 0xee01, 0xee01]) fchown(r0, r2, r3) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x8000001f, 0x8001, 0xd86, 0x3, 0x4}]}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendto$inet(r0, &(0x7f0000000040)="0900d13a8e045acfa7bd0000000011000055a6c91fcc70de0a", 0x19, 0x0, &(0x7f0000000080), 0x10) r4 = add_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="78adec39b5ea3e9a7e3a0b591d46d9d5f1a5f3e8094f023f35a67eb2f57996df59ab867cdcd3b134edb7fb0173479c6817ada8788d28", 0x36, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)="14882112d5b18606725b17fb68b6f7cd5b9221cd2fe2ca317b0863d0c57f3125ad5b2007f794db50be9eff787ce3450cf5ad04011a750b1bb28a6c325fdeb87cd7baa4f07f86809141e7886e352106b4a00762a425c51c7b9627ecb1320c39b3fda7833410c2674cf0ec8530d11eca5a1ad74ab1dc3223d00a5c8c2ccfb8152552d3216e97f18cbdab664aebe53b028d143442ae720d0f626c539687da071447e18e9899ae359421c50208c4f6b67cad0c14c8d68f46e2a2faddda7c33425f05f24c4fda65dc3d639e0152b8fbf0cb001953d93b95bc7f2279ee3f4abe", 0xdd, r4) 14:24:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:24:45 executing program 1: 14:24:45 executing program 1: [ 698.617873] hfs: unable to parse mount options 14:24:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) 14:24:45 executing program 1: [ 698.660039] binder: 29801:29825 unknown command 490124575 [ 698.677921] hfs: unable to parse mount options [ 698.679942] binder: 29801:29825 ioctl c0306201 20000500 returned -22 [ 698.703422] binder: release 29801:29825 transaction 556 out, still active 14:24:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1a, 0x400205, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic="6bb7"]}]}, 0x1c}}, 0x0) [ 698.711112] binder: BINDER_SET_CONTEXT_MGR already set [ 698.717559] binder: 29802:29833 ioctl 40046207 0 returned -16 [ 698.730565] binder: undelivered TRANSACTION_COMPLETE [ 698.766175] binder: release 29802:29833 transaction 557 out, still active [ 698.782572] binder: undelivered TRANSACTION_COMPLETE [ 699.451246] binder: 29801:29845 unknown command 490124575 [ 699.456815] binder: 29801:29845 ioctl c0306201 20000500 returned -22 [ 699.457206] binder: BINDER_SET_CONTEXT_MGR already set [ 699.468795] binder: 29801:29846 ioctl 40046207 0 returned -16 [ 699.474915] binder_alloc: 29801: binder_alloc_buf, no vma [ 699.475134] binder: send failed reply for transaction 556, target dead [ 699.480503] binder: 29801:29844 transaction failed 29189/-3, size 0-0 line 2973 [ 699.487515] binder: send failed reply for transaction 557, target dead [ 699.501601] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.166234] IPVS: ftp: loaded support on port[0] = 21 [ 700.815996] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.822470] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.829282] device bridge_slave_0 entered promiscuous mode [ 700.853264] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.859673] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.866785] device bridge_slave_1 entered promiscuous mode [ 700.890466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 700.914173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 700.979438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 701.004808] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 701.104722] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 701.111932] team0: Port device team_slave_0 added [ 701.135148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 701.142246] team0: Port device team_slave_1 added [ 701.165479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 701.190082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 701.216285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.242169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 701.457335] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.463712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.470269] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.476636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.204531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.276612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 702.346475] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 702.352765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 702.359633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.431285] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.802789] device bridge_slave_1 left promiscuous mode [ 737.808359] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.851409] device bridge_slave_0 left promiscuous mode [ 737.856826] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.692756] team0 (unregistering): Port device team_slave_1 removed [ 738.701270] team0 (unregistering): Port device team_slave_0 removed [ 738.711149] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 738.771657] bond0 (unregistering): Released all slaves [ 855.041136] INFO: task syz-executor4:29810 blocked for more than 140 seconds. [ 855.048593] Not tainted 4.19.0-rc6-next-20181005+ #88 [ 855.054427] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.062426] syz-executor4 D24472 29810 6206 0x00000004 [ 855.068104] Call Trace: [ 855.070694] __schedule+0x86c/0x1ed0 [ 855.074458] ? __sched_text_start+0x8/0x8 [ 855.078609] schedule+0xfe/0x460 [ 855.082071] ? __mutex_lock+0xbe2/0x1700 [ 855.086142] ? __schedule+0x1ed0/0x1ed0 [ 855.090102] ? kasan_check_read+0x11/0x20 [ 855.094297] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.098707] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.103339] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 855.108796] ? mutex_destroy+0x200/0x200 [ 855.112890] ? do_raw_spin_lock+0xc1/0x200 [ 855.117134] schedule_preempt_disabled+0x13/0x20 [ 855.121932] __mutex_lock+0xbe7/0x1700 [ 855.125893] ? perf_trace_init+0x58/0x250 [ 855.130043] ? mutex_trylock+0x2b0/0x2b0 [ 855.134145] ? __kernel_text_address+0xd/0x40 [ 855.139431] ? unwind_get_return_address+0x61/0xa0 [ 855.144496] ? __save_stack_trace+0x8d/0xf0 [ 855.148820] ? save_stack+0xa9/0xd0 [ 855.152481] ? save_stack+0x43/0xd0 [ 855.156111] ? kasan_kmalloc+0xc7/0xe0 [ 855.159982] ? kmem_cache_alloc_trace+0x152/0x750 [ 855.166075] ? perf_event_alloc.part.93+0x1d6/0x3590 [ 855.172557] ? __do_sys_perf_event_open+0xa9c/0x2f30 [ 855.179159] ? __x64_sys_perf_event_open+0xbe/0x150 [ 855.185520] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.192476] ? mark_held_locks+0x130/0x130 [ 855.197924] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 855.205254] ? m_show+0x5d0/0x5d0 [ 855.209594] ? lockdep_init_map+0x9/0x10 [ 855.214953] ? perf_event_alloc.part.93+0x1a2e/0x3590 [ 855.221043] ? lock_downgrade+0x900/0x900 [ 855.225185] mutex_lock_nested+0x16/0x20 [ 855.229283] ? mutex_lock_nested+0x16/0x20 [ 855.233584] perf_trace_init+0x58/0x250 [ 855.237635] perf_tp_event_init+0xa6/0x120 [ 855.241915] perf_try_init_event+0x137/0x2f0 [ 855.246441] perf_event_alloc.part.93+0x1b32/0x3590 [ 855.251641] ? perf_try_init_event+0x2f0/0x2f0 [ 855.256841] ? lock_acquire+0x1ed/0x520 [ 855.260799] ? __do_sys_perf_event_open+0x12fe/0x2f30 [ 855.266045] ? mark_held_locks+0x130/0x130 [ 855.270284] ? lock_release+0x970/0x970 [ 855.274295] ? check_same_owner+0x330/0x330 [ 855.278625] ? mark_held_locks+0x130/0x130 [ 855.282906] ? iterate_fd+0x4b0/0x4b0 [ 855.286717] ? __do_sys_perf_event_open+0x12fe/0x2f30 [ 855.291949] ? mutex_trylock+0x2b0/0x2b0 [ 855.296452] ? lock_downgrade+0x900/0x900 [ 855.300586] ? kasan_check_read+0x11/0x20 [ 855.304775] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.309268] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.313905] ? kasan_check_write+0x14/0x20 [ 855.318141] ? do_raw_spin_lock+0xc1/0x200 [ 855.322428] ? _raw_spin_unlock+0x2c/0x50 [ 855.326582] ? __alloc_fd+0x347/0x6e0 [ 855.330381] ? ptrace_may_access+0x38/0x50 [ 855.334658] ? rcu_read_unlock+0x37/0xa0 [ 855.338723] ? kasan_check_read+0x11/0x20 [ 855.343429] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.348535] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.353229] ? ptrace_setsiginfo+0x1a0/0x1a0 [ 855.357643] ? kasan_check_write+0x14/0x20 [ 855.362022] ? do_raw_spin_lock+0xc1/0x200 [ 855.366262] __do_sys_perf_event_open+0xa9c/0x2f30 [ 855.371235] ? lock_release+0x970/0x970 [ 855.375208] ? check_same_owner+0x330/0x330 [ 855.379574] ? posix_ktime_get_ts+0x15/0x20 [ 855.383930] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 855.389490] ? perf_event_set_output+0x650/0x650 [ 855.394309] ? nsecs_to_jiffies+0x30/0x30 [ 855.398545] ? lock_downgrade+0x900/0x900 [ 855.402752] ? trace_hardirqs_on+0xbd/0x310 [ 855.407077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.412667] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.418036] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 855.423529] __x64_sys_perf_event_open+0xbe/0x150 [ 855.428377] do_syscall_64+0x1b9/0x820 [ 855.432310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 855.437686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 855.442655] ? trace_hardirqs_on_caller+0x310/0x310 [ 855.447694] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 855.452774] ? recalc_sigpending_tsk+0x180/0x180 [ 855.457534] ? kasan_check_write+0x14/0x20 [ 855.461797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 855.466655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.471881] RIP: 0033:0x457579 [ 855.475077] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 855.494017] RSP: 002b:00007f4ce9b30c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 855.501751] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579 [ 855.509012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 855.516351] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 855.524015] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4ce9b316d4 [ 855.531334] R13: 00000000004c2f90 R14: 00000000004d4818 R15: 00000000ffffffff [ 855.538622] INFO: task syz-executor0:29811 blocked for more than 140 seconds. [ 855.545910] Not tainted 4.19.0-rc6-next-20181005+ #88 [ 855.551681] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.559637] syz-executor0 D24472 29811 6080 0x00000004 [ 855.565636] Call Trace: [ 855.568234] __schedule+0x86c/0x1ed0 [ 855.571975] ? __sched_text_start+0x8/0x8 [ 855.576135] schedule+0xfe/0x460 [ 855.579483] ? __mutex_lock+0xbe2/0x1700 [ 855.583570] ? __schedule+0x1ed0/0x1ed0 [ 855.587547] ? kasan_check_read+0x11/0x20 [ 855.591725] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.596142] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.600712] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 855.606184] ? mutex_destroy+0x200/0x200 [ 855.610248] ? do_raw_spin_lock+0xc1/0x200 [ 855.614510] schedule_preempt_disabled+0x13/0x20 [ 855.619965] __mutex_lock+0xbe7/0x1700 [ 855.624408] ? perf_trace_init+0x58/0x250 [ 855.628559] ? mutex_trylock+0x2b0/0x2b0 [ 855.632674] ? __kernel_text_address+0xd/0x40 [ 855.637222] ? unwind_get_return_address+0x61/0xa0 [ 855.642202] ? __save_stack_trace+0x8d/0xf0 [ 855.646523] ? save_stack+0xa9/0xd0 [ 855.651367] ? save_stack+0x43/0xd0 [ 855.655779] ? kasan_kmalloc+0xc7/0xe0 [ 855.659647] ? kmem_cache_alloc_trace+0x152/0x750 [ 855.664566] ? perf_event_alloc.part.93+0x1d6/0x3590 [ 855.669683] ? __do_sys_perf_event_open+0xa9c/0x2f30 [ 855.674809] ? __x64_sys_perf_event_open+0xbe/0x150 [ 855.679826] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.685249] ? mark_held_locks+0x130/0x130 [ 855.689521] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 855.695115] ? m_show+0x5d0/0x5d0 [ 855.698628] ? lockdep_init_map+0x9/0x10 [ 855.702718] ? perf_event_alloc.part.93+0x1a2e/0x3590 [ 855.707911] ? lock_downgrade+0x900/0x900 [ 855.712087] mutex_lock_nested+0x16/0x20 [ 855.716149] ? mutex_lock_nested+0x16/0x20 [ 855.720366] perf_trace_init+0x58/0x250 [ 855.724370] perf_tp_event_init+0xa6/0x120 [ 855.728633] perf_try_init_event+0x137/0x2f0 [ 855.733070] perf_event_alloc.part.93+0x1b32/0x3590 [ 855.738104] ? perf_try_init_event+0x2f0/0x2f0 [ 855.742714] ? lock_acquire+0x1ed/0x520 [ 855.746688] ? __do_sys_perf_event_open+0x12fe/0x2f30 [ 855.751910] ? mark_held_locks+0x130/0x130 [ 855.756149] ? lock_release+0x970/0x970 [ 855.760115] ? check_same_owner+0x330/0x330 [ 855.764477] ? mark_held_locks+0x130/0x130 [ 855.768718] ? iterate_fd+0x4b0/0x4b0 [ 855.772635] ? __do_sys_perf_event_open+0x12fe/0x2f30 [ 855.777838] ? mutex_trylock+0x2b0/0x2b0 [ 855.781926] ? lock_downgrade+0x900/0x900 [ 855.786149] ? kasan_check_read+0x11/0x20 [ 855.790282] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.794723] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.799389] ? kasan_check_write+0x14/0x20 [ 855.803664] ? do_raw_spin_lock+0xc1/0x200 [ 855.807904] ? _raw_spin_unlock+0x2c/0x50 [ 855.812076] ? __alloc_fd+0x347/0x6e0 [ 855.815883] ? ptrace_may_access+0x38/0x50 [ 855.820104] ? rcu_read_unlock+0x37/0xa0 [ 855.824204] ? kasan_check_read+0x11/0x20 [ 855.828360] ? do_raw_spin_unlock+0xa7/0x2f0 [ 855.832795] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 855.837379] ? ptrace_setsiginfo+0x1a0/0x1a0 [ 855.841809] ? kasan_check_write+0x14/0x20 [ 855.846041] ? do_raw_spin_lock+0xc1/0x200 [ 855.850264] __do_sys_perf_event_open+0xa9c/0x2f30 [ 855.855233] ? lock_release+0x970/0x970 [ 855.859212] ? check_same_owner+0x330/0x330 [ 855.863560] ? posix_ktime_get_ts+0x15/0x20 [ 855.867885] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 855.873383] ? perf_event_set_output+0x650/0x650 [ 855.878159] ? nsecs_to_jiffies+0x30/0x30 [ 855.883115] ? lock_downgrade+0x900/0x900 [ 855.887788] ? trace_hardirqs_on+0xbd/0x310 [ 855.892131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.897674] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.903077] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 855.908533] __x64_sys_perf_event_open+0xbe/0x150 [ 855.913407] do_syscall_64+0x1b9/0x820 [ 855.917284] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 855.922694] ? syscall_return_slowpath+0x5e0/0x5e0 [ 855.927610] ? trace_hardirqs_on_caller+0x310/0x310 [ 855.932638] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 855.937644] ? recalc_sigpending_tsk+0x180/0x180 [ 855.942965] ? kasan_check_write+0x14/0x20 [ 855.947737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 855.952626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.957828] RIP: 0033:0x457579 [ 855.961053] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 6a 60 09 01 87 01 8b 05 62 60 09 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 9e 65 09 01 84 c0 74 72 b8 01 00 00 00 [ 855.979975] RSP: 002b:00007f3736167c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 855.988070] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579 [ 855.996586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 856.005474] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 856.013040] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f37361686d4 [ 856.020296] R13: 00000000004c2f90 R14: 00000000004d4818 R15: 00000000ffffffff [ 856.027637] INFO: lockdep is turned off. [ 856.031717] NMI backtrace for cpu 1 [ 856.035332] CPU: 1 PID: 980 Comm: khungtaskd Not tainted 4.19.0-rc6-next-20181005+ #88 [ 856.043367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.052699] Call Trace: [ 856.055271] dump_stack+0x1d3/0x2c4 [ 856.058878] ? dump_stack_print_info.cold.2+0x52/0x52 [ 856.064057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.069742] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 856.074920] nmi_cpu_backtrace.cold.4+0x63/0xa2 [ 856.079573] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 856.084747] nmi_trigger_cpumask_backtrace+0x1c2/0x22c [ 856.090009] arch_trigger_cpumask_backtrace+0x14/0x20 [ 856.095178] watchdog+0xb39/0x1050 [ 856.098711] ? reset_hung_task_detector+0xd0/0xd0 [ 856.103534] ? __kthread_parkme+0xce/0x1a0 [ 856.107752] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 856.112834] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 856.117919] ? lockdep_hardirqs_on+0x421/0x5c0 [ 856.122482] ? trace_hardirqs_on+0xbd/0x310 [ 856.126783] ? kasan_check_read+0x11/0x20 [ 856.130908] ? __kthread_parkme+0xce/0x1a0 [ 856.135122] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 856.140562] ? kasan_check_write+0x14/0x20 [ 856.144779] ? do_raw_spin_lock+0xc1/0x200 [ 856.148997] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 856.154092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 856.159611] ? __kthread_parkme+0xfb/0x1a0 [ 856.163825] ? reset_hung_task_detector+0xd0/0xd0 [ 856.168645] kthread+0x35a/0x440 [ 856.171992] ? kthread_bind+0x40/0x40 [ 856.175771] ret_from_fork+0x3a/0x50 [ 856.179536] Sending NMI from CPU 1 to CPUs 0: [ 856.184088] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 856.185077] Kernel panic - not syncing: hung_task: blocked tasks [ 856.197742] CPU: 1 PID: 980 Comm: khungtaskd Not tainted 4.19.0-rc6-next-20181005+ #88 [ 856.205771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.215109] Call Trace: [ 856.217690] dump_stack+0x1d3/0x2c4 [ 856.221300] ? dump_stack_print_info.cold.2+0x52/0x52 [ 856.226529] panic+0x238/0x4e7 [ 856.230403] ? add_taint.cold.5+0x16/0x16 [ 856.235525] ? nmi_trigger_cpumask_backtrace+0x1a2/0x22c [ 856.241571] ? nmi_trigger_cpumask_backtrace+0x1fe/0x22c [ 856.247010] ? nmi_trigger_cpumask_backtrace+0x1ab/0x22c [ 856.252454] ? nmi_trigger_cpumask_backtrace+0x1a2/0x22c [ 856.257995] watchdog+0xb4a/0x1050 [ 856.261538] ? reset_hung_task_detector+0xd0/0xd0 [ 856.266360] ? __kthread_parkme+0xce/0x1a0 [ 856.270574] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 856.275655] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 856.280740] ? lockdep_hardirqs_on+0x421/0x5c0 [ 856.285302] ? trace_hardirqs_on+0xbd/0x310 [ 856.289603] ? kasan_check_read+0x11/0x20 [ 856.293731] ? __kthread_parkme+0xce/0x1a0 [ 856.297944] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 856.303375] ? kasan_check_write+0x14/0x20 [ 856.307596] ? do_raw_spin_lock+0xc1/0x200 [ 856.311819] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 856.316906] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 856.322423] ? __kthread_parkme+0xfb/0x1a0 [ 856.326639] ? reset_hung_task_detector+0xd0/0xd0 [ 856.331459] kthread+0x35a/0x440 [ 856.334808] ? kthread_bind+0x40/0x40 [ 856.338596] ret_from_fork+0x3a/0x50 [ 856.343300] Kernel Offset: disabled [ 856.346922] Rebooting in 86400 seconds..